Received: from maia.hub.org (maia-3.hub.org [200.46.204.243]) by mail.postgresql.org (Postfix) with ESMTP id 10C071337B5E for ; Tue, 25 Jan 2011 12:25:49 -0400 (AST) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.243]) (amavisd-maia, port 10024) with ESMTP id 52712-02 for ; Tue, 25 Jan 2011 16:25:41 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from mail7.sea5.speakeasy.net (mail7.sea5.speakeasy.net [69.17.117.52]) by mail.postgresql.org (Postfix) with ESMTP id 9F26D133655C for ; Tue, 25 Jan 2011 12:25:40 -0400 (AST) Received: (qmail 7296 invoked from network); 25 Jan 2011 16:25:38 -0000 Received: from 25-76-42-72.skybeam.com (HELO [192.168.2.16]) (scott_ribe@killerbytes.com@[72.42.76.25]) (envelope-sender ) by mail7.sea5.speakeasy.net (qmail-ldap-1.03) with AES128-SHA encrypted SMTP for ; 25 Jan 2011 16:25:38 -0000 Subject: Re: Replication to less secure slave server Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Scott Ribe In-Reply-To: Date: Tue, 25 Jan 2011 09:25:37 -0700 Cc: pgsql-admin@postgresql.org Content-Transfer-Encoding: quoted-printable Message-Id: <586AFF34-2850-434B-84CC-3BE0ADA75E70@elevated-dev.com> References: To: alys brett X-Mailer: Apple Mail (2.1082) X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=2.419 tagged_above=-10 required=5 tests=BAYES_00=-1.9, FS_REPLICA=3.599, SARE_SPEC_REPLICA=0.72 X-Spam-Level: ** X-Archive-Number: 201101/158 X-Sequence-Number: 36598 On Jan 25, 2011, at 7:04 AM, alys brett wrote: > I am planning a system that will be hosted within a secure network = with very limited access. All access to the database will be from within = this network. I need to have a copy of the database available on a much = less secure server, which will allow access for web applications. This = copy of the database is considered sacrificial. >=20 > The replication methods I have read about are focussed on creating = standby servers to take over if the primary becomes unavailable. For = this, there is obviously a requirement that the slave be able to connect = to the database on the master. This is not allowed by our security = set-up (that's the whole reason for having the replica database).=20 >=20 > I need to somehow push the changes from the master out to the slave. = The database is not very complex or large (two main tables with < = 100,000 rows) and new rows will be added only every few minutes. A = minute or so lag on the copy database is acceptable. I have similar requirements, so I have the master initiate an SSH = reverse tunnel to the replica, where pg connects to the local port that = is the remote end of that tunnel. --=20 Scott Ribe scott_ribe@elevated-dev.com http://www.elevated-dev.com/ (303) 722-0567 voice