Group replication security

To secure a group of members, we have three options:

• Whitelisting IP addresses of members
• Communicating over SSL
• Operating group replication over a virtual private network (VPN)

IP address whitelist

A group replication plugin has a configuration option group_replication_ip_whitelist. If you set this option on server 1, then when server 2 is establishing a connection to server 1, it accepts/rejects the connection. By default, it sets the whitelist to the private networks that the server has interface on. We can specify host names, IP addresses, and Classless Inter-Domain Routing (CIDR) notation, separated by a comma. IPV6 addresses and hostname resolving to IPV6 addresses are not supported:

mysql...