v.23.3Improvement

Reimplement Interserver Mode to Prevent Replay Attacks

Official CH changelog text
Reimplement interserver mode to avoid replay attacks (note, that change is backward compatible with older servers). #47213 (Azat Khuzhin).
Reimplemented the interserver mode in ClickHouse to prevent replay attacks while maintaining backward compatibility with older servers.

Why it matters

This feature addresses security concerns by eliminating replay attacks in the interserver communication mode, enhancing overall cluster security without disrupting existing setups.

How to use it

The new interserver mode is enabled by default and is backward compatible; no additional configuration is required to benefit from the enhanced security. Existing clusters will continue to operate seamlessly with older server versions.

Related resources

PreviousNext