tls

The tls domain includes metrics about the status and configuration of TLS (SSL).

Industry best practice is to always use TLS with MySQL. This domain reports a single derived metric, enabled, that should be monitored to ensure that every MySQL instance has TLS enabled.

True (1) if the main MySQL connection interface supports encrypted connections, else false (0). Metrics sinks that don’t support bool report this metric as a gauge.

On MySQL 8.0.21 and newer, Blip reads the mysql_main channel’s Enabled property from the tls_channel_status table. For older MySQL versions and compatible distributions that do not have this table, or when the table cannot be read, Blip falls back to have_ssl when that variable is available.

None.

None.

None.

None.

On servers without the legacy have_ssl variable, including MySQL 8.4 and newer, the Blip database user needs SELECT access to performance_schema.tls_channel_status. Earlier versions can use the legacy have_ssl fallback when this table is unavailable or inaccessible.