ProxySQL

ProxySQL
Name	ProxySQL
Author	René Cannaò
Developer	ProxySQL Technologies, Percona
Released	2016
Programming language	C++
Operating system	Linux, FreeBSD
Genre	Database proxy
License	GNU GPLv3

ProxySQL ProxySQL is a high-performance, open-source database proxy designed to mediate traffic between database clients and back-end servers. It is widely used in conjunction with MySQL, MariaDB, Percona Server, and cloud providers such as Amazon Web Services, Google Cloud Platform, and Microsoft Azure to provide advanced routing, query caching, load balancing, and failover capabilities. Operators integrate ProxySQL with orchestration systems like Kubernetes, Docker Swarm, and configuration tools such as Ansible, Chef, and Puppet for automated deployment and management.

Overview

ProxySQL emerged from community needs for a programmable, performant proxy sitting between application tiers and relational systems like MySQL and MariaDB. It competes and interworks with products and projects including HAProxy, MaxScale (MariaDB), PgBouncer, Envoy (software), and proprietary solutions from F5 Networks and Citrix Systems. Adoption spans ecosystems such as LAMP stack, LEMP stack, WordPress, Drupal, and enterprise applications like SAP and Salesforce integrations that rely on external data warehousing platforms like Teradata and Snowflake.

Architecture and Components

ProxySQL's architecture separates control and data planes to handle routing logic and connection pooling efficiently. Core components include the runtime listener, the in-memory administrative datastore, the query rules engine, and the connection multiplexing layer. It integrates with topology and discovery systems such as Orchestrator (GitHub), MHA (MySQL High Availability), Galera Cluster, and MySQL Group Replication to coordinate role awareness across servers. Monitoring and observability are commonly implemented using Prometheus, Grafana, InfluxDB, and logging pipelines that forward to ELK Stack components like Elasticsearch and Kibana.

Configuration and Management

Configuration is managed via an administrative interface accessible over SQL and a runtime API, and stored in an in-memory SQLite-like structure with persistence options. Administrators use tools like Percona Monitoring and Management and orchestration systems including SaltStack and Terraform for infrastructure as code. Integrations include service discovery with Consul (software), configuration distribution via etcd, and secret management through HashiCorp Vault. Change management workflows often reference standards from ITIL and DevOps practices, and CICD pipelines built around Jenkins, GitLab CI/CD, and GitHub Actions.

Features and Functionality

ProxySQL provides features such as read/write splitting, query caching, multiplexing, connection pooling, query rewriting, and firewalling. Advanced routing can be combined with sharding solutions like Vitess, ProxyShard, and federation approaches using MySQL Fabric. It supports protocol-level compatibility with client libraries such as libmysqlclient, Connector/J (JDBC), and MySQL Connector/NET, and is used alongside ORMs including Hibernate, Doctrine (PHP), and ActiveRecord (Rails). Enterprise integrations frequently leverage backups and replication tools such as mysqldump, Percona XtraBackup, and Binary Log (MySQL) based replication.

Deployment and Use Cases

Deployments range from single-host, high-availability clusters to global, geo-distributed topologies integrating CDNs like Cloudflare and Akamai for front-end delivery. Common use cases include scaling read workloads for applications such as Magento, Shopify Plus integrations, MediaWiki, and analytics platforms including Apache Kafka pipelines feeding into ClickHouse or Apache Druid. ProxySQL is also used in hybrid cloud architectures combining on-premises datacenters like those run by Equinix with public clouds such as Alibaba Cloud and Oracle Cloud Infrastructure.

Performance, Scalability, and Reliability

Performance engineering around ProxySQL focuses on latency reduction, throughput maximization, and connection efficiency to support high-concurrency services such as Twitter-scale timelines, event processing for Uber-style dispatching, and storefront peaks seen by Black Friday traffic. Scalability patterns employ horizontal scaling coordinated with service meshes like Istio or Linkerd and use metrics exported to Datadog and New Relic for SLO-based operations. Reliability practices include automated failover orchestrated by Corosync/Pacemaker, circuit breaking inspired by Netflix OSS patterns, and chaos testing using Chaos Monkey.

Security and Authentication

ProxySQL supports TLS/SSL for encrypted connections and integrates with authentication backends such as LDAP, Kerberos, and identity providers like Okta and Auth0. Role-based access control and auditing are complemented by deployment alongside network controls from Cisco ASA appliances and cloud-native security groups on AWS Security Groups. Compliance-conscious deployments map to frameworks like PCI DSS, HIPAA, and SOC 2 when ProxySQL is part of a regulated data path, and secrets are typically managed with AWS KMS or Google Cloud KMS.

Category:Database proxies