MariaDB Source

The MariaDB Source Connector streams every insert, update and delete from your MariaDB tables into Popsink in real time, by reading the server’s binary log. MariaDB has its own connector, separate from the MySQL Source: the two products have drifted apart (MariaDB GTIDs, for example, use a different format), so each one is checked and read on its own terms. A MySQL server is refused by this connector, and a MariaDB server by the MySQL one.

Compatible versions


MariaDB	10.11 or later — tested on the 10.11 and 11.4 LTS lines
Binary log	Row-based — `binlog_format=ROW`, `binlog_row_image=FULL`
CDC engine	Debezium (MariaDB connector)

Prerequisites

Binary logging enabled with row-based format and full row images:

log_bin = ON
binlog_format = ROW
binlog_row_image = FULL

A user with the following privileges:

SELECT
RELOAD
SHOW DATABASES
REPLICATION SLAVE
REPLICATION CLIENT  -- shown as BINLOG MONITOR on MariaDB 10.5 and later

The credential check refuses the connection, with the setting to change, when the server is older than 10.11, when it is a MySQL server, or when any of the three binary-log settings above is wrong.

Configuration

Field	Required	Description
Host	Yes	Hostname or IP address of the MariaDB server
Port	Yes	TCP port (default `3306`)
Database	Yes	Database to connect to
Username / Password	Yes	Credentials with the privileges above
Encrypt connection	No (default on)	Use TLS when connecting
Trust server certificate	No (default on)	Skip certificate verification, for a self-signed certificate
Table Whitelist	Yes	Comma-separated tables, as `database.table` or `table`

Connecting through an SSH Tunnel

If the database is only reachable through a bastion host, enable SSH Tunnel and provide:

Field	Required	Description
SSH Host	Yes	Hostname or IP of the bastion host
SSH Port	Yes	SSH port (default `22`)
SSH User	Yes	User to authenticate as on the bastion
SSH Private Key	Yes	Base64-encoded private key for the SSH user

The Host and Port above stay as the database is addressed from the bastion. For key generation, bastion hardening and the other connectivity options (IPsec VPN, Tailscale), see Tunnels and private connectivity.

Table Selection

After a successful credential check, pick the tables to replicate from the discovered list. Each selected table becomes its own data model.

Welcome

Platform Overview

Security

Deployment

Source Connectors

Target Connectors

Integrations

API

Transformation

Changelog

Compatible versions

Prerequisites

Configuration

Connecting through an SSH Tunnel

Table Selection

​Compatible versions

​Prerequisites

​Configuration

​Connecting through an SSH Tunnel

​Table Selection

Compatible versions

Prerequisites

Configuration

Connecting through an SSH Tunnel

Table Selection