Help Center/ Database Security Service/ Service Overview/ Overview/ Constraints
Updated on 2022-09-22 GMT+08:00

Constraints

Database audit is subject to certain constraints.

Supported Database Types

The following types of databases on HUAWEI CLOUD can be audited in out-of-path mode:

  • RDS instances
  • Self-built databases on ECS
  • Self-built databases on BMS

Supported Database Versions

The following database versions can be audited.

Table 1 Database types and versions supported by database audit

Database Type

Version

MySQL
  • 5.0, 5.1, 5.5, 5.6, 5.7
  • 8.0 (8.0.11 and earlier)
  • 8.0.23
  • 8.0.25

Oracle
  • 11g

    11.1.0.6.0, 11.2.0.1.0, 11.2.0.2.0, 11.2.0.3.0, and 11.2.0.4.0

  • 12c

    12.1.0.2.0, 12.2.0.1.0

  • 19c

PostgreSQL

7.4 or later

SQL Server
  • 2008, 2008R2
  • 2012
  • 2014
  • 2016
  • 2017

DWS
  • 1.5
  • v8

SHENTONG

V7.0

GBase 8a

V8.5

GBase 8s

V8.8

Gbase XDM Cluster

V8.0

Greenplum

V6.0

HighGo

V6.0

GaussDB(for MYSQL)

MySQL 8.0

GaussDB(for openGauss)

1.4 Enterprise Edition

DAMENG

DM8

KINGBASE

V8

MongoDB

V5.0

Supported OSs

To use database audit, you need to install its agent on database nodes or application nodes. The database audit agent can run on the 64-bit Linux or Windows.
  • For more information, see Table 2.
    Table 2 Supported Linux OS versions

    System Name

    System version

    CentOS
    • CentOS 6.3 (64bit)
    • CentOS 6.5 (64bit)
    • CentOS 6.8 (64bit)
    • CentOS 6.9 (64bit)
    • CentOS 7.0 (64bit)
    • CentOS 7.1 (64bit)
    • CentOS 7.2 (64bit)
    • CentOS 7.3 (64bit)
    • CentOS 7.4 (64bit)
    • CentOS 7.5 (64bit)
    • CentOS 7.6 (64bit)
    • CentOS 7.8 (64bit)
    • CentOS 7.9 (64bit)
    • CentOS 8.0 (64bit)
    • CentOS 8.1 (64bit)
    • CentOS 8.2 (64bit)

    Debian
    • Debian 7.5.0 (64bit)
    • Debian 8.2.0 (64bit)
    • Debian 8.8.0 (64bit)
    • Debian 9.0.0 (64bit)
    • Debian 10.0.0 (64bit)

    Fedora
    • Fedora 24 (64bit)
    • Fedora 25 (64bit)
    • Fedora 29 (64bit)
    • Fedora 30 (64bit)

    OpenSUSE
    • SUSE 13 (64bit)
    • SUSE 15 (64bit)
    • SUSE 42 (64bit)

    SUSE
    • SUSE 11 SP4 (64bit)
    • SUSE 12 SP1 (64bit)
    • SUSE 12 SP2 (64bit)

    Ubuntu
    • Ubuntu 14.04 (64bit)
    • Ubuntu 16.04 (64bit)
    • Ubuntu 18.04 (64bit)

    EulerOS
    • Euler 2.2 (64bit)
    • Euler 2.3 (64bit)
    • Euler 2.5 (64bit)

    OpenEuler
    • OpenEuler 20.03 (64bit)

    Oracle Linux
    • Oracle Linux 6.9 (64bit)
    • Oracle Linux 7.4 (64bit)

    RedHat
    • Red Hat Enterprise Linux 7.4 (64bit)
    • Red Hat Enterprise Linux 7.6 (64bit)

    NeoKylin
    • NeoKylin 7.0 (64bit)

    Kylin
    • Kylin Linux Advanced Server release V10 (64bit)

    Uniontech OS
    • Uniontech OS Server 20 Enterprise (64bit)
  • The following Windows OSs are supported:
    • Windows Server 2008 R2 (64bit)
    • Windows Server 2012 R2 (64bit)
    • Windows Server 2016 (64bit)
    • Windows Server 2019 (64bit)
    • Windows 7 (64bit)
    • Windows 10 (64bit)

    The DBSS agent depends on Npcap. If the message "Npcap not found, please install Npcap first" is displayed when you install the DBSS agent, first install Npcap and then the DBSS agent.

    Npcap download link: https://npcap.com/#download
    Figure 1 Npcap not found

Other Constraints

  • Database audit cannot be used across regions. The database to be audited and the database audit instance you purchased must be in the same region.
  • If SSL is enabled for a database, the database cannot be audited. To use database audit, disable SSL first. For details, see How Do I Disable SSL for a Database?.
  • Ensure the VPC of the database audit instance is the same as that of the node (application side or database side) where you plan to install the database audit agent. Otherwise, the instance will be unable to connect to the agent or perform audit.
  • Ensure the VPC of the database audit instance is the same as that of the node (application side or database side) where you plan to install the database audit agent. Otherwise, the instance will be unable to connect to the agent or perform audit. For more information, see How Do I Determine Where to Install an Agent?.
Parent topic: Overview