public inbox for [email protected]  
help / color / mirror / Atom feed
From: 李明 <[email protected]>
To: Ron Johnson <[email protected]>
Cc: pgsql-admin <[email protected]>
Subject: Re: Allow connections by IP address?
Date: Wed, 17 Sep 2025 07:40:17 +0800
Message-ID: <[email protected]> (raw)
In-Reply-To: <CANzqJaBD0vqs6=ovHOjUF4SV80pBx6A-1kZ8mwcryJq2bjFH2g@mail.gmail.com>
References: <CANzqJaBD0vqs6=ovHOjUF4SV80pBx6A-1kZ8mwcryJq2bjFH2g@mail.gmail.com>


Maybe you can set the allowed ips with listen_address in postgresql.conf.

More,through network admin can achieve your aim more efficiency.

> 在 2025年9月12日,00:21,Ron Johnson <[email protected]> 写道:
> 
> 
> PG 17.latest
> 
> My server has two IP addresses:
> 10.1.2.3.4
> 10.1.2.3.5 (a VIP)
> 
> Some connections should only come in through the VIP, while others (like replication) must come in through .4 and others (f.e. administrators, can come in from .4 or .5).
> 
> Is there any way to restrict that?  I don't see anything in https://www.postgresql.org/docs/17/auth-pg-hba-conf.html but may be overlooking something.
> 
> (Why don't we use a connection pooler?  The 3rd party application has only been validated against direct connections to PG. Bugs in PgPool caused problems in prod.)
> 
> -- 
> Death to <Redacted>, and butter sauce.
> Don't boil me, I'm still alive.
> <Redacted> lobster!


reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: Allow connections by IP address?
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox