Help Center> Database Security Service> Service Overview> Constraints
Updated on 2024-04-24 GMT+08:00
View PDF

Constraints

Database audit is subject to certain constraints.

Supported Database Types

The following types of databases on HUAWEI CLOUD can be audited in out-of-path mode:

  • Relational Database Service (RDS)
  • Databases built on ECS
  • Databases built on BMS

Databases That Do Not Need Agents

Databases of some types and versions can be audited without using agents, as shown in Table 1.

Table 1 Agent-free relational databases

Database Type

Supported Edition

GaussDB(for MySQL)

All editions are supported by default.

RDS for SQLServer

All editions are supported by default.

RDS for MySQL
  • 5.6 (5.6.51.1 or later)
  • 5.7 (5.7.29.2 or later)
  • 8.0 (8.0.20.3 or later)

GaussDB(DWS)
  • 8.2.0.100 or later

PostGresql
  • 14 (14.4 or later)
  • 13 (13.6 or later)
  • 12 (12.10 or later)
  • 11 (11.15 or later)
  • 9.6 (9.6.24 or later)
  • 9.5 (9.5.25 or later)

Databases That Need Agents

The following database versions can be audited.

Table 2 Database types and versions supported by database audit

Database Type

Edition

MySQL
  • 5.0, 5.1, 5.5, 5.6, 5.7
  • 8.0 (8.0.11 and earlier)
  • 8.0.20
  • 8.0.23
  • 8.0.25

Oracle

(The Oracle database uses closed-source protocol and has complex adaptation versions. If you need to audit the Oracle database, contact customer service.)
  • 11g

    11.1.0.6.0, 11.2.0.1.0, 11.2.0.2.0, 11.2.0.3.0, and 11.2.0.4.0

  • 12c

    12.1.0.2.0, 12.2.0.1.0

  • 19c

PostgreSQL
  • 7.4
  • 8.0

    8.0, 8.1, 8.2, 8.3, 8.4

  • 9.0

    9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6

  • 10.0

    10.0, 10.1, 10.2, 10.3, 10.4, 10.5

  • 11.0
  • 12.0
  • 13.0
  • 14.0

SQL Server
  • 2008, 2008R2
  • 2012
  • 2014
  • 2016
  • 2017

DWS
  • 1.5
  • 8.1

SHENTONG

V7.0

GBase 8a

V8.5

GBase 8s

V8.8

Gbase XDM Cluster

V8.0

Greenplum

V6.0

HighGo

V6.0

GaussDB(for MYSQL)

MySQL 8.0

GaussDB

1.4 Enterprise Edition

DAMENG

DM8

KINGBASE

V8

MongoDB

V5.0

DDS

4.0

Hbase

(Supported by CTS instance 23.02.27.182148 and later versions)

1.3.1

2.2.3

Hive

1.2.2

2.3.9

3.1.2

3.1.3

Supported OSs

To use database audit, you need to install its agent on database nodes or application nodes. The database audit agent can run on the 64-bit Linux or Windows.
  • For more information, see Table 3.
    Table 3 Supported Linux OS versions

    System Name

    System version

    CentOS
    • CentOS 7.0 (64bit)
    • CentOS 7.1 (64bit)
    • CentOS 7.2 (64bit)
    • CentOS 7.3 (64bit)
    • CentOS 7.4 (64bit)
    • CentOS 7.5 (64bit)
    • CentOS 7.6 (64bit)
    • CentOS 7.8 (64bit)
    • CentOS 7.9 (64bit)
    • CentOS 8.0 (64bit)
    • CentOS 8.1 (64bit)
    • CentOS 8.2 (64bit)

    Debian
    • Debian 7.5.0 (64bit)
    • Debian 8.2.0 (64bit)
    • Debian 8.8.0 (64bit)
    • Debian 9.0.0 (64bit)
    • Debian 10.0.0 (64bit)

    Fedora
    • Fedora 24 (64bit)
    • Fedora 25 (64bit)
    • Fedora 29 (64bit)
    • Fedora 30 (64bit)

    OpenSUSE
    • SUSE 13 (64bit)
    • SUSE 15 (64bit)
    • SUSE 42 (64bit)

    SUSE
    • SUSE 11 SP4 (64bit)
    • SUSE 12 SP1 (64bit)
    • SUSE 12 SP2 (64bit)

    Ubuntu
    • Ubuntu 14.04 (64bit)
    • Ubuntu 16.04 (64bit)
    • Ubuntu 18.04 (64bit)
    • Ubuntu 20.04 (64-bit)

    EulerOS
    • Euler 2.2 (64bit)
    • Euler 2.3 (64bit)
    • Euler 2.5 (64bit)

    OpenEuler
    • OpenEuler 20.03 (64bit)

    Oracle Linux
    • Oracle Linux 6.9 (64bit)
    • Oracle Linux 7.4 (64bit)

    Red Hat
    • Red Hat Enterprise Linux 7.4 (64bit)
    • Red Hat Enterprise Linux 7.6 (64bit)

    NeoKylin
    • NeoKylin 7.0 (64bit)

    Kylin
    • Kylin Linux Advanced Server release V10 (64bit)

    Uniontech OS
    • Uniontech OS Server 20 Enterprise (64bit)

    Huawei Cloud Euler
    • Huawei Cloud Euler 2.0 (64bit)

    KylinSec
    • KylinSec 3.4 (64bit)
  • The following Windows OSs are supported:
    • Windows Server 2008 R2 (64bit)
    • Windows Server 2012 R2 (64bit)
    • Windows Server 2016 (64bit)
    • Windows Server 2019 (64bit)
    • Windows 7 (64bit)
    • Windows 10 (64bit)

    The DBSS agent depends on Npcap. If the message "Npcap not found, please install Npcap first" is displayed when you install the DBSS agent, first install Npcap and then the DBSS agent.

    Npcap download link: https://npcap.com/#download
    Figure 1 Npcap not found

Other Constraints

  • No. The database to be audited and the database audit instance you purchased must be in the same region.
  • If SSL is enabled for a database, the database cannot be audited. To use database audit, disable SSL first. For details, see How Do I Disable SSL for a Database?
  • Ensure the VPC of the database audit instance is the same as that of the node (application side or database side) where you plan to install the database audit agent. Otherwise, the instance will be unable to connect to the agent or perform audit. For more information, see How Do I Determine Where to Install an Agent?
  • In some SQL Server databases, complex declare statements, select functions, and symbol statements that cannot be identified by the system may fail to be parsed.