Skip to content

v2.4.0

Latest
Latest

Choose a tag to compare

View all tags
@renecannao renecannao released this 19 Aug 15:59
v2.4.0
cbd088e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ProxySQL MySQL Binlog Reader v2.4.0

This is a major modernization release for the service that runs next to MySQL, tracks GTIDs, and makes them available to ProxySQL for causal reads and adaptive routing.

Replace libslave with MariaDB Connector/C

The production replication path no longer uses libslave. It now uses the MariaDB Connector/C replication API, built from the vendored MariaDB Connector/C 3.4.8 source archive and linked statically into the reader.

  • No MariaDB Connector/C runtime package is required.
  • caching_sha2_password authentication is supported, including a cold authentication path.
  • MySQL 9.0 and 9.4 are now tested and supported; the legacy libslave integration could not support these releases.
  • The reader keeps robust GTID handling and replication-start validation with the new client implementation.

TLS is now configurable and secure by default

Replication connections use TLS by default: --ssl-mode=REQUIRED and --ssl-verify-server-cert=1. The reader supports MySQL-style TLS settings, including:

  • --ssl-mode=DISABLED|PREFERRED|REQUIRED
  • --ssl-verify-server-cert=0|1
  • --ssl-ca, --ssl-capath, --ssl-cert, --ssl-key
  • --ssl-cipher and --tls-version

Container images expose the same options as SSL_MODE, SSL_VERIFY_SERVER_CERT, SSL_CA, SSL_CAPATH, SSL_CERT, SSL_KEY, SSL_CIPHER, and TLS_VERSION. For development or private environments using a self-signed certificate, verification can be disabled explicitly while TLS encryption remains required.

Extensive automated verification

The new CI and integration-test infrastructure uses dbdeployer to run the real reader against MySQL 5.7, 8.0, 8.4, 9.0, and 9.4. It verifies TLS certificate rejection and encrypted replication, cold caching_sha2_password authentication, GTID behavior, batching, startup/shutdown behavior, and package/runtime correctness.

Every release now builds and validates packages and runtime images for:

  • CentOS 9 and CentOS 10
  • Debian 12 and Debian 13
  • Ubuntu 22.04 and Ubuntu 24.04

Container images are published only after the complete runtime test gate passes.

Available artifacts

The release includes Debian and RPM packages for all six targets, plus GHCR images such as:

docker pull ghcr.io/sysown/proxysql-mysqlbinlog:2.4.0
docker pull ghcr.io/sysown/proxysql-mysqlbinlog:2.4.0-ubuntu24

For configuration examples and the complete TLS option reference, see the README.

Full Changelog: v2.3...v2.4.0

Assets 8
Loading