Inexpensive Datamasking for MySQL with ProxySQL
summary
ProxySQL adds RE2 and PCRE regex support and uses table-driven query rules to rewrite or block queries on the fly for cheap MySQL datamasking. Rules keep first two letters of names and replace the rest with Xs, generate randomized salaries (e.g. salary 50,000 + 10,000), and explicitly select blocked patterns; it can also transform mysqldump output to produce an anonymized export (mysqldump masking). Live demo shows community bypasses patched, clustering/metrics and query mirroring aid rollout, but regex parsing has limits versus a full SQL parser.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 1:45Overview
- 4:22What is ProxySQL
- 6:43ProxySQL Gateway
- 10:27How ProxySQL Works
- 16:40Query Rules
- 24:49Example
- 26:43Limitations
- 31:10More examples
- 32:48Recap
- 33:14Questions
- 38:35Native Clustering
- 40:25Nick
- 41:00ProxySQL dialect
- 43:05MS SQL support
- 44:10Joints and unions
- 45:00Replacing regular expressions
related talks
50m#ProxySQL Use Case Scenarios
04mData Masking in PG
41mProxySQL 2021 Dev Submit
37mScale MySQL beyond limits with ProxySQL
08mMySQL as a Layered Service: How to use Proxy SQL to Control Traffic and Scale Out
32mAnonymization and Dynamic Masking with PostgreSQL
27mThe State of ProxySQL, 2020 Edition
34mActive Security Honeypot for MySQL and PostgreSQL protecting databases from ransomware attacks