Skip to content

Commit f57ae7b

Browse files
authored
enh: prohibit users from tampering with configuration files after data encryption takes effect (#34344)
1 parent c613cdb commit f57ae7b

File tree

7 files changed

+48
-62
lines changed

7 files changed

+48
-62
lines changed

docs/en/14-reference/01-components/01-taosd.md

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -92,10 +92,10 @@ Additional Notes:
9292
| metaEntryCacheSize | since 3.3.6.35 | Supported, effective immediately | The reserved memory size to cache meta tags |
9393
| queryBufferSize | | Supported, effective after restart | Not effective yet |
9494
| queryRspPolicy | | Supported, effective immediately | Query response strategy |
95-
| queryUseMemoryPool | | Not supported | Whether query will use memory pool to manage memory, default value: 1 (on); 0: off, 1: on |
95+
| queryUseMemoryPool | | Supported, effective after restart | Whether query will use memory pool to manage memory, default value: 1 (on); 0: off, 1: on |
9696
| minReservedMemorySize | | Supported, effective immediately | The minimum reserved system available memory size, all memory except reserved can be used for queries, unit: MB, default reserved size is 20% of system physical memory, value range 1024-1000000000 |
9797
| singleQueryMaxMemorySize | | Not supported | The memory limit that a single query can use on a single node (dnode), exceeding this limit will return an error, unit: MB, default value: 0 (no limit), value range 0-1000000000 |
98-
| filterScalarMode | | Not supported | Force scalar filter mode, 0: off; 1: on, default value 0 |
98+
| filterScalarMode | | Supported, effective after restart | Force scalar filter mode, 0: off; 1: on, default value 0 |
9999
| queryRsmaTolerance | | Not supported | Internal parameter, tolerance time for determining which level of rsma data to query, in milliseconds |
100100
| pqSortMemThreshold | | Not supported | Internal parameter, memory threshold for sorting |
101101
| updateCacheBatch | After 3.3.4.11 | Not supported | Whether to batch update cache; default value true |
@@ -273,7 +273,7 @@ The effective value of charset is UTF-8.
273273
| syncTimeout | | Supported, effective immediately | Internal parameter, for debugging synchronization module |
274274
| mndSdbWriteDelta | | Supported, effective immediately | Internal parameter, for debugging mnode module |
275275
| mndLogRetention | | Supported, effective immediately | Internal parameter, for debugging mnode module |
276-
| skipGrant | | Not supported | Internal parameter, for authorization checks |
276+
| skipGrant | | Supported, effective after restart | Internal parameter, for authorization checks |
277277
| trimVDbIntervalSec | | Supported, effective immediately | Internal parameter, for deleting expired data |
278278
| ttlFlushThreshold | | Supported, effective immediately | Internal parameter, frequency of ttl timer |
279279
| compactPullupInterval | | Supported, effective immediately | Internal parameter, frequency of data reorganization timer |
@@ -288,12 +288,12 @@ The effective value of charset is UTF-8.
288288
| udf | | Supported, effective after restart | Whether to start UDF service; 0: do not start, 1: start; default value 1(The default value on Windows is 0.) |
289289
| udfdResFuncs | | Supported, effective after restart | Internal parameter, for setting UDF result sets|
290290
| udfdLdLibPath | | Supported, effective after restart | Internal parameter, indicates the library path for loading UDF |
291-
| streamBatchRequestWaitMs | | Not supported | Stream computing batch request wait time, range 0-1800000, in milliseconds, default value 5000 |
292-
| numOfMnodeStreamMgmtThreads| | Not supported | Mnode stream management thread count, range 2-5, default value is one quarter of CPU cores (not less than 2, not exceeding 5) |
293-
| numOfStreamMgmtThreads | | Not supported | Vnode stream management thread count, range 2-5, default value is one eighth of CPU cores (not less than 2, not exceeding 5) |
291+
| streamBatchRequestWaitMs | | Supported, effective after restart | Stream computing batch request wait time, range 0-1800000, in milliseconds, default value 5000 |
292+
| numOfMnodeStreamMgmtThreads| | Supported, effective after restart | Mnode stream management thread count, range 2-5, default value is one quarter of CPU cores (not less than 2, not exceeding 5) |
293+
| numOfStreamMgmtThreads | | Supported, effective after restart | Vnode stream management thread count, range 2-5, default value is one eighth of CPU cores (not less than 2, not exceeding 5) |
294294
| numOfVnodeStreamReaderThreads| | Not supported | Vnode stream reader thread count, range 2-INT32_MAX, default value is half of CPU cores (not less than 2) |
295-
| numOfStreamTriggerThreads | | Not supported | Stream trigger thread count, range 4-INT32_MAX, default value is CPU cores (not less than 4) |
296-
| numOfStreamRunnerThreads | | Not supported | Stream executor thread count, range 4-INT32_MAX, default value is CPU cores (not less than 4) |
295+
| numOfStreamTriggerThreads | | Supported, effective after restart | Stream trigger thread count, range 4-INT32_MAX, default value is CPU cores (not less than 4) |
296+
| numOfStreamRunnerThreads | | Supported, effective after restart | Stream executor thread count, range 4-INT32_MAX, default value is CPU cores (not less than 4) |
297297
| enableStrongPassword | After 3.3.6.0 | Supported, effective after restart | The password include at least three types of characters from the following: uppercase letters, lowercase letters, numbers, and special characters, special characters include `! @ # $ % ^ & * ( ) - _ + = [ ] { } : ; > < ? \| ~ , .`; 0: disable, 1: enable; default value 1 |
298298
|enableIpv6 | 3.3.7.0 |not Supported | force nodes to communicate directly via IPv6 only, default value is 0, notes: 1. `firstep`, `sencodep`, and `FQDN` must all resolve to IPv6 addresses. 2. Mixed IPv4/IPv6 deployment is not supported |
299299
|statusInterval | 3.3.0.0 | Supported, effective immediately | Controls the interval time for dnode to send status reports to mnode |
@@ -302,15 +302,15 @@ The effective value of charset is UTF-8.
302302

303303
| Parameter Name | Supported Version | Dynamic Modification | Description |
304304
| ----------------------- | ----------------- | ---------------------------------- | ------------------------------------------------------------ |
305-
| disableStream | | Supported, effective immediately | Switch to enable or disable stream computing |
305+
| disableStream | | Supported, effective after restart | Switch to enable or disable stream computing |
306306
| streamBufferSize | | Supported, effective immediately | Controls the size of the window state cache in memory, default value is 128MB |
307307
| streamAggCnt | | Not supported | Internal parameter, number of concurrent aggregation computations |
308308
| checkpointInterval | | Supported, effective after restart | Internal parameter, checkpoint synchronization interval |
309309
| concurrentCheckpoint | | Supported, effective immediately | Internal parameter, whether to check checkpoints concurrently |
310310
| maxStreamBackendCache | | Supported, effective immediately | Internal parameter, maximum cache used by stream computing |
311311
| streamSinkDataRate | | Supported, effective after restart | Internal parameter, used to control the write speed of stream computing results |
312-
| streamNotifyMessageSize | After 3.3.6.0 | Not supported | Internal parameter, controls the message size for event notifications, default value is 8192 |
313-
| streamNotifyFrameSize | After 3.3.6.0 | Not supported | Internal parameter, controls the underlying frame size when sending event notification messages, default value is 256 |
312+
| streamNotifyMessageSize | After 3.3.6.0 | Supported, effective after restart | Internal parameter, controls the message size for event notifications, default value is 8192 |
313+
| streamNotifyFrameSize | After 3.3.6.0 | Supported, effective after restart | Internal parameter, controls the underlying frame size when sending event notification messages, default value is 256 |
314314
| adapterFqdn | After 3.3.6.0 | Not supported | Internal parameter, The address of the taosadapter services, default value is localhost |
315315
| adapterPort | After 3.3.6.0 | Not supported | Internal parameter, The port of the taosadapter services, default value is 6041 |
316316
| adapterToken | After 3.3.6.0 | Not supported | Internal parameter, The string obtained by Base64-encoding `{username}:{password}`, default value is `cm9vdDp0YW9zZGF0YQ==` |
@@ -364,7 +364,7 @@ The effective value of charset is UTF-8.
364364
| randErrorScope | | Supported, effective immediately | Internal parameter, used for random failure testing |
365365
| safetyCheckLevel | | Supported, effective immediately | Internal parameter, used for random failure testing |
366366
| experimental | | Supported, effective immediately | Internal parameter, used for some experimental features |
367-
| simdEnable | After 3.3.4.3 | Not supported | Internal parameter, used for testing SIMD acceleration |
367+
| simdEnable | After 3.3.4.3 | Supported, effective after restart| Internal parameter, used for testing SIMD acceleration |
368368
| AVX512Enable | After 3.3.4.3 | Not supported | Internal parameter, used for testing AVX512 acceleration |
369369
| rsyncPort | | Not supported | Internal parameter, used for debugging stream computing |
370370
| snodeAddress | | Supported, effective immediately | Internal parameter, used for debugging stream computing |

docs/zh/14-reference/01-components/01-taosd.md

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -520,7 +520,7 @@ taosd 命令行参数如下:
520520
- 最小值:0
521521
- 最大值:1
522522
- 参数类型:局部配置参数
523-
- 动态修改:不支持
523+
- 动态修改:支持通过 SQL 修改,重启后效。
524524
- 支持版本:v3.3.5.0 引入
525525

526526
#### minReservedMemorySize
@@ -555,7 +555,7 @@ taosd 命令行参数如下:
555555
- 最小值:0
556556
- 最大值:1
557557
- 参数类型:局部配置参数
558-
- 动态修改:不支持
558+
- 动态修改:支持通过 SQL 修改,重启生效。
559559
- 支持版本:v3.1.0.0 引入
560560

561561
#### queryNoFetchTimeoutSec
@@ -1490,7 +1490,7 @@ charset 的有效值是 UTF-8。
14901490
- 说明:用于授权检查 **`内部参数`**
14911491
- 类型:整数
14921492
- 参数类型:全局配置参数
1493-
- 动态修改:不支持
1493+
- 动态修改:支持通过 SQL 修改,重启生效。
14941494
- 支持版本:v3.1.0.0 引入
14951495

14961496
#### trimVDbIntervalSec
@@ -1603,7 +1603,7 @@ charset 的有效值是 UTF-8。
16031603
- 类型:布尔值;false:不禁用;true:禁用。
16041604
- 默认值:false
16051605
- 参数类型:局部配置参数
1606-
- 动态修改:不支持
1606+
- 动态修改:支持通过 SQL 修改,重启生效。
16071607
- 支持版本:从 v3.3.6.18 版本开始引入
16081608

16091609
#### streamBatchRequestWaitMs
@@ -1615,7 +1615,7 @@ charset 的有效值是 UTF-8。
16151615
- 最小值:0
16161616
- 最大值:1800000
16171617
- 参数类型:局部配置参数
1618-
- 动态修改:不支持
1618+
- 动态修改:支持通过 SQL 修改,重启生效。
16191619
- 支持版本:从 v3.3.8.5 版本开始引入
16201620

16211621
#### udfdResFuncs
@@ -1663,7 +1663,7 @@ charset 的有效值是 UTF-8。
16631663
- 最小值:2
16641664
- 最大值:5
16651665
- 参数类型:局部配置参数
1666-
- 动态修改:不支持
1666+
- 动态修改:支持通过 SQL 修改,重启生效
16671667
- 支持版本:从 v3.3.7.0 版本开始引入
16681668

16691669
#### numOfStreamMgmtThreads
@@ -1674,7 +1674,7 @@ charset 的有效值是 UTF-8。
16741674
- 最小值:2
16751675
- 最大值:5
16761676
- 参数类型:局部配置参数
1677-
- 动态修改:不支持
1677+
- 动态修改:支持通过 SQL 修改,重启生效
16781678
- 支持版本:从 v3.3.7.0 版本开始引入
16791679

16801680
#### numOfVnodeStreamReaderThreads
@@ -1684,7 +1684,7 @@ charset 的有效值是 UTF-8。
16841684
- 默认值:CPU 核数的二分之一
16851685
- 最小值:4
16861686
- 最大值:INT32_MAX
1687-
- 参数类型:局部配置参数
1687+
- 参数类型:支持通过 SQL 修改,重启生效
16881688
- 动态修改:不支持
16891689
- 支持版本:从 v3.3.7.0 版本开始引入
16901690

@@ -1695,8 +1695,8 @@ charset 的有效值是 UTF-8。
16951695
- 默认值:CPU 核数
16961696
- 最小值:4
16971697
- 最大值:INT32_MAX
1698+
- 动态修改:支持通过 SQL 修改,重启生效
16981699
- 参数类型:局部配置参数
1699-
- 动态修改:不支持
17001700
- 支持版本:从 v3.3.7.0 版本开始引入
17011701

17021702
#### numOfStreamRunnerThreads
@@ -1731,7 +1731,7 @@ charset 的有效值是 UTF-8。
17311731
- 最小值:8
17321732
- 最大值:1048576
17331733
- 参数类型:局部配置参数
1734-
- 动态修改:不支持
1734+
- 动态修改:支持通过 SQL 修改,重启生效
17351735
- 支持版本:从 v3.3.7.0 版本开始引入
17361736

17371737
#### streamNotifyFrameSize
@@ -1743,7 +1743,7 @@ charset 的有效值是 UTF-8。
17431743
- 最小值:8
17441744
- 最大值:104857
17451745
- 参数类型:局部配置参数
1746-
- 动态修改:不支持
1746+
- 动态修改:支持通过 SQL 修改,重启生效
17471747
- 支持版本:从 v3.3.7.0 版本开始引入
17481748

17491749
### 日志相关

include/common/tglobal.h

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,6 @@ extern char tsLocalEp[];
5858
extern char tsVersionName[];
5959
extern uint16_t tsServerPort;
6060
extern int32_t tsVersion;
61-
extern int32_t tsForceReadConfig;
6261
extern int32_t tsdmConfigVersion;
6362
extern int32_t tsConfigInited;
6463
extern int32_t tsEncryptKeysStatus;

0 commit comments

Comments
 (0)