Skip to main content
Tungsten Clustering

Tungsten Clustering 7.2.0

Build: 84
Release Date: 8 Jul 2025
Release 7.2.0 contains a number of key bug fixes and improvements, along with the upgrade of log4j libraries.

Deprecation Notices (1)

The following features/tools have been deprecated from this release and will be removed in future releases. Any self written scripts that utilise these features should be updated.

Command-line Tools (1)

  • tungsten_health_check and tungsten_provision_thl have been deprecated and will be removed in a future release
    Issue: CT-2506

Behavior Changes (10)

The following changes may affect existing scripts and integration tools. Any scripts or environment which make use of these tools should check and update for the new configuration:

Installation and Deployment (2)

  • tpm validate now verifies localhost is defined in /etc/hosts
    Issue: CT-2564
  • All Tungsten Components now use log4j version 2.
    Issues: CT-1410, CT-1412

Command-line Tools (4)

  • The tpm cert info command now provides better error messages when a specifiedtypeSpec file does not exist.
    Issue: CT-2530

  • The tpm ask command now returns the appropriate values for keys: stagingdir,stagingpath, staginghost and staginguser.

    Additionally, the tpm ask staging command will return a JSON structure with all values. All values are the same as the output of the tpm query-staging command, just presented differently for easier machine usage.

    Issue: CT-2510
  • Removed sigtrap module dependency from tungsten_find_orphaned.
    Issue: CT-2451
  • The tungsten_send_diag command has been updated with new security keys and the ability to accept security keys on the CLI.
    Issue: CT-2438

Connector (1)

Security (2)

  • As of version 7.2.0 onwards, when providing custom keystores, the alias of the mysql certificate must be provided as java-mysql-alias=xxx and must have the same name in both tungsten_keystore andtungsten_connector_keystore.
    Issue: CT-2598
  • Now providing adequate error message when TLS certificates differ between connector and managers, or when manager refuses the SSL handshake.
    Issue: CT-2579

API (1)

  • The Manager APIv2 now returns a 404 error instead of 500 when a task status is requested for a TaskID that does not exist inside that Manager process.
    Issue: CT-2430

Known Issue (1)

The following issues are known within this release but not considered critical, nor impact operation. They will be addressed in a subsequent patch release.

Security (1)

  • tungsten_mysql_ssl_setup incorrectly generates self-signed CA certificates on RHEL9 Linux flavors.

    This will be fixed in v7.2.0 and v8.0.1

    Issue: CT-2581

Improvements, new features and functionality (13)

Installation and Deployment (1)

Command-line Tools (6)

  • The tpm ask command will now convert values 0 and false toNo and values 1 and true to Yes as human output when given --human or -n cli args.
    Issue: CT-2559
  • The tpm ini command now handles all new tpm options.
    Issue: CT-2543
  • The tpm diag command now gathers the output of the tpm ini check -xcommand as the tpmINICheck call.
    Issue: CT-2499
  • The tpm cert command will now handle public key files. The command tpm cert gen public will create $CONTINUENT_HOME/generated/tungsten_public.jks from the$CONTINUENT_HOME/share/tungsten_keystore.jks file and thetpm cert list public command will show the contents, etc.
    Issue: CT-2434
  • The tpm ask command now supports the -s|--service option for dsrole, dsstate, trrole and trstate keys. The option alias for --short is now -S (capitalized), was previously lower-case. Example:
    tpm ask dsrole --service alpha
    Issue: CT-2400
  • The new tpm ini command allows for easy creation, checking and administration of the &definifile; configuration file.
    Issue: CT-2366

Core Replicator (2)

  • The trepctl perf output has been improved when parallel apply is enabled to show granular statistics per channel.
    Issue: CT-2517
  • Replicator now recognizes the new MySQL 8.4 show binary log status syntax (as well as show master status) and will execute the configured replacement request appropriately.
    Issue: CT-2291

Connector (2)

  • Connector now recognizes the new MySQL 8.4 show replica status syntax (As well as show slave status) and will run replacement configured request appropriately.
    Issue: CT-2401
  • Fixed a bug where connections properly disconnecting with quit command would get an empty database change request.
    Issue: CT-2395

Security (1)

  • Tungsten can now hold two MySQL database SSL Certificates, allowing rotation of certificates without the need for downtime. A new command line tool, rotate_certs, is provided to aid in this process.
    Issue: CT-2511

Monitoring (1)

  • Additional prometheus metrics have been added to the Replicator:
    • tungsten_replicator_service_online_duration_seconds gauge show duration in seconds since the replicator was put online.
    • tungsten_replicator_task_total counter shows statistics by service, stage and task as shown in the following example:
      tungsten_replicator_task_total{service="alpha",stage="q-to-dbms",task_id="1",stat="extract_time",} 250.015
      In this case, this is the extract time spent by the task #1 of the q-to-dbms stage of the alpha service. This is similar to the new trepctl perf output.
    Issue: CT-2514

Bug Fixes (27)

Installation and Deployment (2)

Command-line Tools (19)

  • The tapi command no longer issues an error when the quantity of command-line arguments is larger than expected.
    Issue: CT-2580
  • The tpm purge-thl command now works properly when run against environments where there are multiple THL files, but the lowest seqno returned exists in the very first THL file.
    Issue: CT-2561
  • The tpm cert info command now properly handles all available typeSpecs.
    Issue: CT-2532
  • The tpm cert aliases --running command now properly handles thetls_passwordstore and jmx_passwordstore typeSpecs.
    Issue: CT-2512
  • Fixes an issue where dsctl set with the -reset option could show warnings when run several times in a row, as shown:

    WARNING: Could not execute query DROP TABLE `tungsten_alpha`.`heartbeat`  : Unknown table 'tungsten_alpha.heartbeat'
    Issue: CT-2502
  • The tungsten_send_diag command now handles curl and aws s3 errors separately and displays the proper message back.
    Issue: CT-2488
  • During a tpm uninstall, when skipping data services not managed locally, tpmwill now print a notice rather than a warning, since this is the expected behavior.
    Issue: CT-2479
  • The tpm ask version and tpm ask versions commands now display values.
    Issue: CT-2475
  • executable-prefix is now applied to the deployall and undeployall script names. For example, whenexecutable-prefix=mm, deployall would be named mm_deployall.
    Issue: CT-2467
  • The tpm keep command is now properly called by tpm uninstall, and a regression in a call to the mysql cli has been fixed as well.
    Issue: CT-2462
  • The tpm update command now properly identifies and removes services with mixed-case service names.
    Issue: CT-2426
  • tpm now properly detects MariaDB default settings.
    Issue: CT-2424
  • The tapi command now accepts non-standard ports on the command line, and also properly accepts a user/password pair on the CLI.
    Issue: CT-2420
  • The tungsten_get_status command now passes the correct number of arguments to theprintf function in various places, preventing "Redundant argument" warnings.
    Issue: CT-2407
  • The tpm delete-service and tpm update commands now correctly remove Composite Active/Active cross-site subservices from cctrl
    Issue: CT-2404
  • The tpm diag command now gathers:
    • tungsten-replicator/log/replicator-api.log
    • tungsten-connector/log/connector-api.log
    • tungsten-manager/log/manager-api.log
    Issue: CT-2397
  • The tapi command now creates proper URL's for these standard endpoints when-C, -M or -R are specified along with one of the following strings: ping, tungstenVersion, createAdminUser,deleteAdminUser, listAdminUsers, rmiSecurity or user.
    Issue: CT-2391
  • The tpm check ports and tpm check ports -c commands are now able to handle replicator-only nodes. By default, it will automatically try to discover the node type, and you may manually specify the node type with-r|--replicator or -c|--cluster.
    Issue: CT-2356
  • The tpm diag command no longer displays a NOTICE for missing optional files.
    Issue: CT-2355

Core Replicator (3)

  • Fixed an issue where a cluster could display a wrong latency after MySQL and the replicator were stopped and restarted. This would only show under no load conditions.
    Issue: CT-2485
  • The replicator will now properly rollback an XA transaction in case of failure.
    Issue: CT-2410
  • Fixed an issue that would wrongly flag a SQL statement starting with a # comment as bidi_unsafe
    Issue: CT-2405

Connector (3)

  • The tpm delete-service command now sets MAINTENANCE mode before operations, then sets back to AUTOMATIC if it wasAUTOMATIC to start with.
    Issue: CT-2555
  • In active/active setups, no longer using global data service for show slave latency connector intercept.
    Issue: CT-2554
  • Fixed an issue with PHP and caching_sha2_password when using proxy mode: the protocol part "fast path" was not handled properly by the connector, php would hang after reading an unexpected packet. Workaround for this issue (for earlier tungsten versions) is to set property=defaultAuthPlugin=mysql_native_password within /etc/tungsten/tungsten.ini.
    Issue: CT-2471