The server must only use approved network communication libraries, ports, and protocols.
Obtain a list of all approved network libraries, communication ports, and protocols from the server documentation.
Verify that the protocols are enabled for the instance.
Run the following SQL to list ports:
SELECT VARIABLE_NAME, VARIABLE_VALUE
FROM performance_schema.global_variables
WHERE VARIABLE_NAME in ('port', 'mysqlx_port', 'admin_port');
The default ports for MySQL for organizational connects are:
Classic MySQL Protocol - 3306, MySQL X Protocol 33060, MySQL Admin Port (disabled by default)
If these are in conflict with guidance, and not explained and approved in the system documentation, this is a finding.
Run the following to determine if a local socker/pipe are in use:
SELECT VARIABLE_NAME, VARIABLE_VALUE
FROM performance_schema.global_variables where
VARIABLE_NAME like '%pipe%' or VARIABLE_NAME = 'socket' or VARIABLE_NAME = 'mysqlx_socket';
Values are for classic and xprotocol will be returned.
For example on Linux
'socket','/tmp/mysql.sock'
'mysqlx_socket','/tmp/mysqlx.sock'
Windows
'named_pipe', 'ON';
If these are in conflict with guidance, and not explained and approved in the system documentation, this is a finding.
Run the following statement to inspect port settings:
SELECT VARIABLE_NAME, VARIABLE_VALUE
FROM performance_schema.global_variables
WHERE VARIABLE_NAME LIKE '%port%' or VARIABLE_NAME LIKE '%port' order by VARIABLE_NAME;
Linux local socket
select @@socket;
Windows local pipe
select @@named_pipe;
If any ports or protocols are used that are not specifically approved in the server documentation, this is a finding.