Release Notes for MariaDB MaxScale 23.08.3

Common Configuration Blocks

Configuration blocks can be defined which are common to multiple sections, and then be included in those sections by name.

• This can be useful in cases where multiple monitors are configured the same except for their list of servers.

• For example:

  [Monitor-Common]
  type=include
  module=mariadbmon
  user=the_user
  password=the_password
  handle_events=false
  monitor_interval=2000ms
  backend_connect_timeout = 3s
  backend_connect_attempts = 5
  
  [Monitor1]
  type=monitor
  @include=Monitor-Common
  servers=Server1, Server2
  
  [Monitor2]
  type=monitor
  @include=Monitor-Common
  servers=Server3, Server3
  

Switchover Improvements

With MariaDB Monitor (mariadbmon), during a switchover MariaDB Monitor initiates a new connection to the master with a long timeout, ignoring the limit of backend_read_timeout. (MXS-2744)

• This reduces the probability of timeout when executing long-running statements such as SET GLOBAL read_only=1

• When kicking-out super and read-only admin users, the monitor prevent writes with FLUSH TABLES WITH READ LOCK

• For additional information, see MariaDB Monitor documentation.

Manual Forced Switchover

Manual forced switchover can be initiated with the MaxCtrl switchover-force command. (MXS-3983)

• switchover-force swaps a running primary with a replica, ignoring most errors.

• This command can be useful where an automatic switchover may not happen. For example, manual forced switchover may be needed if the primary server responds to pings but does not perform other commands.

• switchover-force should be used with caution because it may lead to diverging replication on the old primary.

Safer Transaction Replay

With readwritesplit router with transaction_replay enabled, default transaction replay behavior has changed. (MXS-4505)

• transaction_replay_safe_commit controls whether to replay transactions that were about to be committed to the server.

• The new default behavior is not to replay transactions that were being committed to the server when the connection was lost.

Partial Results and Replay

With readwritesplit router, if a query in a transaction is interrupted and the result was partially delivered to the client, the query will be re-executed and the part of the result already delivered to the client will be discarded. (MXS-4549)

fast_universal Causal Reads

With readwritesplit router, the behavior of causal_reads=universal and causal_reads=fast can be combined with causal_reads=fast_universal (MXS-4123)

• fast_universal uses the same mechanism to retrieve GTID position as universal

• fast_universal behaves like fast when routing queries.

schemawriter Cache Invalidation

With schemawriter router, the database map cache can be cleared manually using maxctrl (MXS-4215)

• Syntax:

  maxctrl call command schemarouter clear <service>
  

• This makes it possible to schedule the clearing of the caches for busy systems where the update of the map takes a long time.

schemawriter Stale Cache Usage

With schemawriter router, stale entries in the database map can be used up to max_staleness seconds. (MXS-4216)

• This reduces the impact that a shard update causes to the client applications.

PAM Authentication Sandboxing

PAM authentication can be run in a suid sandbox subprocess. (MXS-3753)

• This behavior is enabled with PAM Authenticator when pam_mode is suid.

• For additional information, see PAM Authenticator documentation.

Service Password Changeover

When a service password is changed, MaxScale remembers and will use the previous password if the new password does not work. (MXS-4232)

• This makes it easier to perform a password changeover, since the password in the backend and the password in MaxScale do not need to be changed simultaneously.

regex Matching Limits

The PCRE2 library used by MaxScale now limits heap memory to 1GB and limits matches to 500000. This change prevents catastrophic backtracking when a regular expression uses nested recursion. (MXS-3531)

REST API JWT Issuer

admin_jwt_issuer configures the value of the iss field in JWT generated by the MaxScale REST API, allowing clients to see who issued the token. (MXS-4277)

• Prior to this release, the issuer was maxscale for all tokens.

Logging Improvement

Logging due to log_info no longer results in log entries containing extra newlines that are present in the logged SQL statement. (MXS-4385)

• Prior to this release, SQL statements were logged verbatim. If the SQL statement contained extra newlines, the log entry would also include those newlines.

• Starting with this release, newlines are replaced with the text \n so that the log line does not contain extra newlines.

MaxGUI UI Improvement

When adding a new query tab, the new query tab automatically uses the current active database of the current active query tab. (MXS-4364)

Region-Aware Bootstrap for MariaDB Xpand

With Xpand monitor, it is possible to limit the nodes that the monitor dynamically detects to those in a specific region.

• For additional information, see region_name and region_oid in Xpand monitor documentation.

MariaDB Xpand LDAP Support

In support of LDAP features added in MariaDB Xpand 23.09.1, the MariaDB Authenticator (mariadbauth) includes a passthrough authentication mode.

• Enabled with authenticator_options=clear_pw_passthrough=true

• Since passwords are sent in clear-text, the MaxScale listener should be configured for SSL (TLS).

• For additional information, see MariaDB Authenticator documentation.

Early Connection Metadata

The connection_metadata listener parameter controls the set of metadata variables sent to the client during connection creation. (MXS-4635)

• By default, the following values are sent:

  • character_set_client system variable

  • character_set_connection system variable

  • character_set_results system variable

  • max_allowed_packet system variable

  • system_time_zone system variable

  • time_zone system variable

  • tx_isolation system variable

  • threads_connected, with the current number of connections

  • connection_id, with the real 64-bit connection ID

• Compatible MariaDB Connectors will use this information from MaxScale instead of querying the values of the variables from the database server. This will speed up connection creation.

Can result in unexpected behavior

• log_throttling is not disabled if log_info is enabled, which can cause omission of log messages. (MXS-4749)

• Connection IDs are missing from error messages. (MXS-4735)

• With readwritesplit router, slave_selection_criteria does not accept lowercased versions of enumeration values. (MXS-4724)

• Graphs in MaxGUI can refresh continually, even when refresh is stopped. (MXS-4477)