MySQL Router被HTTP流量击穿

##

MySQL Router被HTTP流量击穿

#莫名奇妙的问题，谁让客户把Router放公网呢？除了被挖矿，还能被HTTP流量攻击。

1、日志信息

root@ubuntu:/mysql# terminate called after throwing an instance of ‘mysqlrouter: :URIErrorwhat(): invalid URI: unexpected characters at position 95 for: /plugins/editors/jckeditor/plugins/jtreelink/dialogs/Links . php?extension=menu&view=menu&parent="%2OUNION%20SELECT%2@NULL , NULL , CONCAT_WS(@x203a26 , USER() , DATABASE()
VERSION() ,md5(999999999)) , NULL, NULL, NULL, NULL, NULL--%20aa
Application got fatal signal: 6
stack_bottom = © thread_stack 0x@#0 Ox14eb63caf420 operator() at mysql-9.1.0/router/src/harness/src/signal_handler.cc:222#1 Ox14eb63caf420 _FUN at mysql-9.1.0/router/src/harness/src/signal_handler .cc:225#2 @x14eb6248d51F <unknown>#3 @x14eb624e19Fc <unknown>#4 @x14eb6248d475 <unknown>#5 @x14eb624737F2 <unknown>#6 @x14eb62716b9d <unknown>#7 @x14eb6272220b <unknown>#8 @x14eb62722276 <unknown>#9 @x14eb6272252a <unknown>#10 @x14eb61a48591 _ZNSt8_Rb_treeljSt4pairIkjN4http6server13ServerRequestEESt10_Select1stIS5_ESt4lessIjESaIS5_£E17_M_construct_nodeTIRKSt21piecewise_construct_tSt5tupleIJRS1_EESG_IJOPNS3_16ServerConnectionIN3net3tls9TlsStreamINS
K_19basic_stream_socketINSK_2ip3tcpEEEEEEESH_OiRKNSt7__cxx1112basic_stringIcSt1ichar_traitsIcESaIcEEEONS2_4base7HeadersEEEEEEvPSt13_Rb_tree_nodeIS5_EDpOT_ at /opt/rh/gcc-toolset-13/root/usr/include/c++/13/bits/stl_tree.h:605#11 Ox14eb61a48591 _ZNSt8_Rb_treeljSt4pairIkjN4http6server13ServerRequestEESt10_Select1stIS5_ESt4lessIjESaIS5_EE14_M_create_nodeIJRKSt21piecewise_construct_tStStupleIJRS1_EESG_IJOPNS3_16ServerConnectionIN3net3tls9TLsStreamINSK_1
9basic_stream_socketINSK_2ip3tcpEEEEEEESH_OiRKNSt7__cxx1112basic_stringIcSt1ichar_traitsIcESaIcEEEONS2_4base7HeadersEEEEEEPSt13_Rb_tree_nodeIS5_EDpOT_ at /opt/rh/gcc-toolset-13/root/usr/include/c++/13/bits/stl_tree.h:614#12 Ox14eb61a48591 _ZNSt8_Rb_treeljSt4pairIKjn4http6server13ServerRequestEESt10_Select1stIS5_ESt4lessI jESaIS5_EE10_Auto_nodeC4IJRKSt21piecewise_construct_tStStupleIJRS1_EESH_IJOPNS3_16ServerConnectionIN3net3tls9TlsStreamINSL_19b
asic_stream_socket INSL_2ip3tcpEEEEEEESI_OiRKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEONS2_4base7HeadersEEEEEERSB_DpOT_ at /opt/rh/gcc-toolset-13/root/usr/include/c++/13/bits/stl_tree.h:1637#13 Ox14eb61a48591 _ZNSt8_Rb_tree1jSt4pairIKjn4http6server13ServerRequestEESt10_Select1stIS5_ESt4lessIjESaIS5_EE22_M_emplace_hint_uniqueIJRKSt21piecewise_construct_tStStupleIJRS1_EESG_IJOPNS3_16ServerConnectionIN3net3tls9TlsStre
amINSK_19basic_stream_socket INSK_2ip3tcpEEEEEEESH_OiRKNSt7__cxx1112basic_stringIcSt1lchar_traitsIcESaIcEEEONS2_4base7HeadersEEEEEESt17_Rb_tree_iteratorIS5_ESt23_Rb_tree_const_iteratorIS5_EDpOT_ at /opt/rh/gcc-toolset-13/root/usr/
include/c++/13/bits/stl_tree.h:2462#14 Ox14eb61a48591 _ZNSt3mapI jN4http6server13ServerRequestESt4less1 j€SaISt4pairIkjS2_EEE12emplace_hintIJRKSt21piecewise_construct_tStStupleIJRS6_EESE_IJOPNS1_16ServerConnectionIN3net3tls9TlsStreamINSI_19basic_stream_socketINSI_2
ip3tcpEEEEEEESF_OiRKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEONS®_4base7HeadersEEEEEESt17_Rb_tree_iteratorIS7_ESt23_Rb_tree_const_iteratorIS7_EDpOT_ at /opt/rh/gcc-toolset-13/root/usr/include/c++/13/bits/stl_map.h:640
#15 Ox14eb61a48591 _ZNSt3mapI jN4http6server13ServerRequestESt4less1 jESaIStupairIkjS2_EEE11try_emplaceIJPNS1_16ServerConnectionIN3net3tls9TlsStreamINSC_19basic_stream_socketINSC_2ip3tcpEEEEEEERS6_iRKNSt7__cxx1112basic_stringIcSt1
Ichar_traitsIcESaIcEEENSO_4base7HeadersEEEES5_ISt17_Rb_tree_iteratorIS7_EbESM_DpOT_ at /opt/rh/gcc-toolset-13/root/usr/include/c++/13/bits/stl_map.h:728#16 Ox14eb61a48591 _ZN4httpéserver16ServerConnectionIN3net3tls9TLsStreamINS2_19basic_stream_socketINS2_2ip3tcpEEEEEE190n_cno_message_headEjPK13cno_message_t at mysql-9.1.0/router/src/http/src/http/server/connection.h:114#17 @x14eb61la55bd8 cno_when_hi_head at mysql-9.1.0/extra/Libcno/Libcno-208939F540957a35b337dacdd5c5Se34d51821bd2/cno/core.c:1181#18 Ox14eb61a564F4 cno_consume at mysql-9.1.0/extra/Libcno/libcno-208939540957a35b337dacdd5c5e34d51821bd2/cno/core.c:1316#19 Ox14eb6la3ebf6 _ZN4http4baseleConnectionIN3net3tls9TlsStreamINS2_19basic_stream_socketINS2_2ip3tcpEEEEEE14on_net_receiveERKSt10error_codem at mysql-9.1.0/router/src/http/include/http/base/connection.h:259#20 Ox14eb61a3#3F5 _ZZN4httpYbase1@ConnectionIN3net3tls9TlsStreamINS2_19basic_stream_socketINS2_2ip3tcpEEEEEE11do_net_recvEvENKULSt1@error_codeT_E_cLImEEDaSB_SC_ at mysql-9.1.0/router/src/http/include/http/base/connection.h:225
#21 Ox14eb61a3#0a7 _ZN3net3t1s20SslIoCompletionTokenINS@_16SslReadOperationENS_14mutable_bufferEZN4http4base10ConnectionINSO_9TLsStreamINS_19basic_stream_socketINS_2ip3tcpEEEEEE11do_net_recvEvEULSt10error_codeT_E_NSO_7TlsBaseISB
-FENS@_11AsyncActionEE8do_tokenERKSE_m at mysql-9.1.0/router/src/openssl/include/tls/details/ssl_io_completion.h:262#22 Ox14eb61a3#0a7 _ZN3net3t1s20SslIoCompletionTokenINS@_16SslReadOperationENS_14mutable_bufferEZN4http4base1@ConnectionINSO_9TLsStreamINS_19basic_stream_socketINS_2ip3tcpEEEEEE11do_net_recvEvEULSt10error_codeT_E_NS@_7TlsBaseISB
-FENS@_11AsyncActionEESdo_itEv at mysql-9.1.0/router/src/openssl/include/tls/details/ssl_io_completion.h:233#23 Ox14eb61a3#288 _ZN3net3t1s20SslIoCompletionTokenINS@_16SslReadOperationENS_14mutable_bufferEZN4http4base1@ConnectionINSO_9TLsStreamINS_19basic_stream_socketINS_2ip3tcpEEEEEE11do_net_recvEvEULSt1error_codeT_E_NS@_7TlsBaseISB
-FENS@_11AsyncActionEE7do_readEv at mysql-9.1.0/router/src/openssl/include/tls/details/ssl_io_completion.h:319#24 Ox14eb6la3#5ba _ZN3net3tls20SslIoCompletionTokenINS@_16SslReadOperationENS_14mutable_bufferEZNUhttp4base1@ConnectionINSO_9TLsStreamINS_19basic_stream_socketINS_2ip3tcpEEEEEE11do_net_recvEvEULSt1@error_codeT_E_NS®_7TLsBaseISB
-EENS@_11AsyncActionEE11handle_readESE_m at mysql-9.1.0/router/src/openssl/include/tls/details/ssl_io_completion.h:171#25 Ox14eb6la3f5ba _ZNK3net3tls29LowerLayerReadComplet ionTokenINSO_20SslIoComplet ionTokenINSO_16SslReadOperationENS_14mutable_bufferEZN4http4base1@ConnectionINSO_9TlsStreamINS_19basic_stream_socketINS_2ip3tcpEEEEEE11do_net_recvE
vEULSt1@error_codeT_E_NSO_7TlsBaseISC_EENSO_11AsyncActionEEENS@_9NOP_tokenEECLESF_m at mysql-9.1.0/router/src/openssl/include/tls/details/lower_layer_completion.h:60#26 Ox14eb6la3f5ba _ZZN3net19basic_stream_socketINS_2ip3tcpEE13async_receiveINS_3tls19FlexibleInputBufferERNS5_29LowerLayerReadCompletionTokenINS5_20SsLIoComplet ionTokenINS5_16SslReadOperat ionENS_14mutable_bufferEZN4http4base10C
onnectionINSS_9TlsStreamIS3_EEE11do_net_recvEvEUISt10error_codeT_E_NS5_7TlsBaseIS3_EENS5_11AsyncActionEEENS5_9NOP_tokenEEEEEDaRKSI_St6bitsetILm31EEOT@_ENKULSH_E_clESH_ at harness/net_ts/socket .h:1228#27 Ox14eb63d11c84 _ZN3net10io_context6do_oneERSt11unique_LockIStSmutexENSt6chrono8durationIlStSratioILL1ELl1OQ0EEEE at harness/net_ts/io_context.h:1283#28 @x14eb63d13e00 _ZN3net1@io_context3runEv at harness/net_ts/io_context .h:912#29 @x14eb63d13e00 _ZN8IoThreadclEv at mysql-9.1.0/router/src/io/src/io_thread.cc:53#30 @x14eb62750252 <unknown>#31 @x14eb624dFac2 <unknown>#32 @x14eb6257184F <unknown>
(833 OxFFFEEEFEFEEEEEEE <unknown>

2、解决方案

禁用HTTP或者安全加固