From: Scott Ribe <scott_ribe@elevated-dev.com>
To: alys brett <alysbrett@googlemail.com>
Cc: pgsql-admin@postgresql.org
Subject: Re: Replication to less secure slave server
Date: Tue, 25 Jan 2011 09:25:37 -0700
Message-ID: <586AFF34-2850-434B-84CC-3BE0ADA75E70@elevated-dev.com> (raw)
In-Reply-To: <AANLkTimoaa3wG1L6Whf8FO9awKiAC-fKS-pGMyq_o=FT@mail.gmail.com>
References: <AANLkTimoaa3wG1L6Whf8FO9awKiAC-fKS-pGMyq_o=FT@mail.gmail.com>
On Jan 25, 2011, at 7:04 AM, alys brett wrote:
> I am planning a system that will be hosted within a secure network with very limited access. All access to the database will be from within this network. I need to have a copy of the database available on a much less secure server, which will allow access for web applications. This copy of the database is considered sacrificial.
>
> The replication methods I have read about are focussed on creating standby servers to take over if the primary becomes unavailable. For this, there is obviously a requirement that the slave be able to connect to the database on the master. This is not allowed by our security set-up (that's the whole reason for having the replica database).
>
> I need to somehow push the changes from the master out to the slave. The database is not very complex or large (two main tables with < 100,000 rows) and new rows will be added only every few minutes. A minute or so lag on the copy database is acceptable.
I have similar requirements, so I have the master initiate an SSH reverse tunnel to the replica, where pg connects to the local port that is the remote end of that tunnel.
--
Scott Ribe
scott_ribe@elevated-dev.com
http://www.elevated-dev.com/
(303) 722-0567 voice
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: scott_ribe@elevated-dev.com, alysbrett@googlemail.com
Subject: Re: Replication to less secure slave server
In-Reply-To: <586AFF34-2850-434B-84CC-3BE0ADA75E70@elevated-dev.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox