Data Scrubbing

Data Scrubbing

Availability:This feature is Experimental quality

While data encryption ensures that the existing data are not stored in plain form, the data scrubbing literally removes the data once the user decides they should be deleted. Compare this behavior with how the DELETE statement works which only marks the affected data as deleted - the space claimed by this data is overwritten with new data later.

Once enabled, data scrubbing works automatically on each tablespace separately. To enable data scrubbing, you need to set the following variables:

  • innodb-background-scrub-data-uncompressed
  • innodb-background-scrub-data-compressed

Uncompressed tables can also be scrubbed immediately, independently of key rotation or background threads. This can be enabled by setting the variable innodb-immediate-scrub-data-uncompressed. This option is not supported for compressed tables.

Note that data scrubbing is made effective by setting the innodb_online_encryption_threads variable to a value greater than zero.

System Variables

variable innodb_background_scrub_data_compressed
Command Line:--innodb-background-scrub-data-compressed
Dynamic:Yes
Scope:Global
Variable Type:Boolean
Default Value:OFF
variable innodb_background_scrub_data_uncompressed
Command Line:--innodb-background-scrub-data-uncompressed
Dynamic:Yes
Scope:Global
Variable Type:Boolean
Default Value:OFF

See also

Vault Documentation
https://www.vaultproject.io/docs/index.html
General-Purpose Keyring Key-Management Functions
https://dev.mysql.com/doc/refman/8.0/en/keyring-udfs-general-purpose.html
Download PDF Manual

Table Of Contents

This Page

Percona Server Series

Contact Us

For free technical help, visit the Percona Community Forum.
To report bugs or submit feature requests, open a JIRA ticket.
For paid support and managed or professional services, contact Percona Sales.