SQL Statements for Controlling Replica Servers Important To connect to the source using a replication user account that authenticates with the caching_sha2_password  plugin, you must either set up a secure connection as described in Section 17.3.1, “Setting Up Replication to Use Encrypted Connections” , or enable the unencrypted connection to support password exchange using an RSA key pair. 2771 applies to replicas that authenticate with the  sha256_password or  caching_sha2_password  authentication plugin. (For sha256_password ,  SOURCE_PUBLIC_KEY_PATH  can be used only if MySQL was built using OpenSSL.) If you are using a replication user account that authenticates with the  caching_sha2_password plugin (which is the default from MySQL 8.0), and you are not using a secure connection, you must specify either this option or the GET_SOURCE_PUBLIC_KEY=1  option to provide the RSA public key to the replica. SOURCE_RETRY_COUNT Sets the maximum number of reconnection attempts that the replica makes after the connection to the source times out, as determined by the  slave_net_timeout  system variable. If the replica does need to reconnect, the first retry occurs immediately after the timeout. The interval between the attempts is specified by the SOURCE_CONNECT_RETRY  option. If both the default settings are used, the replica waits 60 seconds between reconnection attempts ( SOURCE_CONNECT_RETRY=60 ), and keeps attempting to reconnect at this rate for 60 days ( SOURCE_RETRY_COUNT=86400 ). A setting of 0 for  SOURCE_RETRY_COUNT  means that there is no limit on the number of reconnection attempts, so the replica keeps trying to reconnect indefinitely. The values for  SOURCE_CONNECT_RETRY  and  SOURCE_RETRY_COUNT are recorded in the source metadata repository and shown in the replication_connection_configuration  Performance Schema table.  SOURCE_RETRY_COUNT  supersedes the  --master-retry- count  server startup option. SOURCE_SSL_ xxx , SOURCE_TLS_ xxx Specify how the replica uses encryption and ciphers to secure the replication connection. These options can be changed even on replicas that are compiled without SSL support. They are saved to the source metadata repository, but are ignored if the replica does not have SSL support enabled. The  SOURCE_SSL_ xxx  and  SOURCE_TLS_ xxx options perform the same functions as the  --ssl- xxx  and  -- tls- xxx  client options described in Command Options for Encrypted Connections. The correspondence between the two sets of options, and the use of the  SOURCE_SSL_ xxx  and  SOURCE_TLS_ xxx  options to set up a secure connection, is explained in Section 17.3.1, “Setting Up Replication to Use Encrypted Connections” . SOURCE_USER The user name for the replication user account to use for connecting to the replication source server.