Group Replication System Variables protocol offered by the seed member (or a host name that resolves to an address for that protocol). For more information, see Section 18.6.1, “Group Replication IP Address Permissions” . It is possible to configure different allowlists on different group members according to your security requirements, for example, in order to keep different subnets separate. However, this can cause issues when a group is reconfigured. If you do not have a specific security requirement to do otherwise, use the same allowlist on all members of a group. For more details, see Section 18.6.1, “Group Replication IP Address Permissions” . For host names, name resolution takes place only when a connection request is made by another server. A host name that cannot be resolved is not considered for allowlist validation, and a warning message is written to the error log. Forward-confirmed reverse DNS (FCrDNS) verification is carried out for resolved host names. Warning Host names are inherently less secure than IP addresses in an allowlist. FCrDNS verification provides a good level of protection, but can be compromised by certain types of attack. Specify host names in your allowlist only when strictly necessary, and ensure that all components used for name resolution, such as DNS servers, are maintained under your control. You can also implement name resolution locally using the hosts file, to avoid the use of external components. • group_replication_ip_whitelist Command-Line Format --group-replication-ip- whitelist=value Deprecated 8.0.22 System Variable group_replication_ip_whitelist Scope Global Dynamic Yes SET_VAR  Hint Applies No Type String Default Value AUTOMATIC From MySQL 8.0.22,  group_replication_ip_whitelist  is deprecated, and group_replication_ip_allowlist  is available to replace it. For both system variables, the default value is  AUTOMATIC . At Group Replication startup, if either one of the system variables has been set to a user-defined value and the other has not, the changed value is used. If both of the system variables have been set to a user-defined value, the value of  group_replication_ip_allowlist  is used. If you change the value of  group_replication_ip_whitelist  or group_replication_ip_allowlist  while Group Replication is running, which is possible from MySQL 8.0.24, neither variable has precedence over the other. The new system variable works in the same way as the old system variable, only the terminology has changed. The behavior description given for  group_replication_ip_allowlist  applies to both the old and new system variables. 3816