Encryption Proxy Service

Apply Constraint

Special clarification on whether to enable SSL: To achieve non-intrusive bypass of traffic for flow encryption, TLS encryption channels cannot be used, and there may be security risks.

Unsupported Operations for the Encryption Proxy Feature:

1. SELECT statements containing the temp keyword are not supported.
2. Recursive batch INSERT operations and INSERT statements with nested formats are not supported.
3. UPDATE statements with nested formats are not supported.
4. Encrypted fields do not support comparison operations such as greater than, less than, ORDER BY, BETWEEN, etc.
5. Function calculation operations such as AVG, MAX, MIN, SUM and arithmetic expressions are not supported.
6. Views, triggers and stored procedures are not supported. For = comparisons in conditions such as WHERE, both fields on both sides of the = sign must be either encrypted or unencrypted.
7. Tables and fields with wildcard characters in their names cannot be configured for encryption.

Adding Proxy Service

1. Logging In to the Database Encryption System using the system administrator sysadmin account.
2. In the left navigation bar, select Encryption Proxy Service.
3. In the right pane, click Add New (select the primary and proxy servers based on your specific business requirements).
   Figure 1 Encryption Proxy Service
   

4. After selecting the server type, configure the corresponding server information in the pop-up window.
   • For configuring the primary server, refer to the Table 1 for parameter descriptions.
     Figure 2 Adding primary server
     

     Table 1 Table1 Adding primary server parameter description

     Parameter	Description
     Main Service Name	Custom string that can be filled in based on business needs.
     Machine Name	Custom string that can be filled in based on business needs.
     Public IP	This field is optional; you can enter the public IP address of this host.
     MAC	This field is optional; you can enter the host's MAC address.

   • Configure the proxy server. For parameter descriptions, refer to the Table 2.
     Figure 3 Adding primary server
     

     Table 2 Table2 Configure proxy server-Form parameter description

     Parameter	Description
     Main Server	Drag down to select the configured primary server.
     Proxy Service Name	Custom string that can be filled in based on actual business needs.
     Port Number	The port number for the proxy service, ranging from 2026 to 3036.
     Database Type	Drop-down to select the required database type, such as MySQL or ORACLE.
     Data Asset	Select the configured data assets from the dropdown (must be configured in the 'Asset Library' module).
     Remark	Not mandatory; you can provide additional information about this service.

5. After completing the required information, save.

View Service Information

View the configuration information of all servers. The page supports fuzzy matching queries based on conditions.

Figure 4 Encryption proxy service list

Editing or Deleting

Adjust the configuration of existing servers to accommodate changing business requirements.

1. Logging In to the Database Encryption System using the system administrator sysadmin account.
2. In the left navigation bar, select Encryption Proxy Service.
3. View the server list and click the button on the right to edit.
   Figure 5 Editing the proxy service
   

4. Edit the configuration information in the pop-up window.
   Figure 6 Editing proxy server
   

5. After editing is complete, click Confirm to save and exit.
6. You can also delete the corresponding server information based on business needs.

• Service disruption: Encryption, decryption, and data masking operations depend on specific proxy service configurations. Editing or deleting the proxy service while these operations are in progress may cause service interruptions, affecting normal system operation.
• Data loss: Encryption and decryption operations involve handling sensitive data. Editing or deleting the proxy service while these operations are in progress may prevent the relevant data from being decrypted or recovered correctly, resulting in data loss.
• Security Risk: Encryption, decryption, and data masking operations involve handling sensitive data. Editing or deleting the proxy service while these operations are in progress may create security vulnerabilities, exposing sensitive data to risk.
• Configuration error: Rule configurations are typically tightly integrated with other parts of the system. Editing or deleting proxy services while configuring rules may cause configuration errors, affecting system operation.