Hi Eric,
Eric Day wrote:
Hi everyone,
Do people actually use max_allowed_packet as a limit? It seems to me
like a "hack" of how to limit large requests.
Unless someone has a good reason to keep it, I propose we remove it
in the current protocol (always use the maximum size). Also, the new
protocol draft currently does not have any limits (chunked packets).
-Eric
It is there, in mysqld, to protect the server from being DoS-ed. Because
the queries are being re-assembled in the server and the passed for
parsing, a user with low privs can send a 2GB query to the server and
DoS it. The admin can define how big that max query can be by adjusting
max_allowed_packet. Although the name references the protocol it has
security implications on the server.
I won't kill that one.
Best,
Andrey
--
Andrey Hristov, Connectors Software Developer, Database Group
Sun Microsystems GmbH, Sonnenallee 1, 85551 Kirchheim-Heimstetten
Amtsgericht Muenchen: HRB161028
Geschaeftsfuehrer: Thomas Schroeder, Wolfgang Engels, Dr. Roland Boemer
Vorsitzender des Aufsichtsrates: Martin Haering
_______________________________________________
Mailing list: https://launchpad.net/~drizzle-discuss
Post to : [email protected]
Unsubscribe : https://launchpad.net/~drizzle-discuss
More help : https://help.launchpad.net/ListHelp
