pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
stats and unix sockets
5+ messages / 3 participants
[nested] [flat]

* stats and unix sockets
@ 2011-12-21 15:03 Bèrto ëd Sèra <berto.d.sera@gmail.com>
  2011-12-21 16:16 ` Re: stats and unix sockets Tom Lane <tgl@sss.pgh.pa.us>
  0 siblings, 1 reply; 5+ messages in thread

From: Bèrto ëd Sèra @ 2011-12-21 15:03 UTC (permalink / raw)
  To: pgsql-admin

Hi all,

I have a requirement for PG (9.1) to run without any open port at all.
Everything is fine, but the stats collector seems to be unable to work
unless the port is left open on the fw. Is there any way to tell the stats
they should use a unix socket in instead? Google did not offer much on the
issue, thus far.

Bèrto

-- 
==============================
If Pac-Man had affected us as kids, we'd all be running around in a
darkened room munching pills and listening to repetitive music.

^ permalink  raw  reply  [nested|flat] 5+ messages in thread

* Re: stats and unix sockets
  2011-12-21 15:03 stats and unix sockets Bèrto ëd Sèra <berto.d.sera@gmail.com>
@ 2011-12-21 16:16 ` Tom Lane <tgl@sss.pgh.pa.us>
  2011-12-21 16:21   ` Re: stats and unix sockets Bèrto ëd Sèra <berto.d.sera@gmail.com>
  0 siblings, 1 reply; 5+ messages in thread

From: Tom Lane @ 2011-12-21 16:16 UTC (permalink / raw)
  To: Bèrto ëd Sèra <berto.d.sera@gmail.com>; +Cc: pgsql-admin

=?UTF-8?B?QsOocnRvIMOrZCBTw6hyYQ==?= <berto.d.sera@gmail.com> writes:
> I have a requirement for PG (9.1) to run without any open port at all.

That's a pretty stupid requirement.  The stats collector socket is bound
to itself, so it's inaccessible from anywhere else (on machine or off)
regardless of firewall settings.  There's no need to worry about it,
and no there is not a provision for doing it via unix socket instead.

			regards, tom lane



^ permalink  raw  reply  [nested|flat] 5+ messages in thread

* Re: stats and unix sockets
  2011-12-21 15:03 stats and unix sockets Bèrto ëd Sèra <berto.d.sera@gmail.com>
  2011-12-21 16:16 ` Re: stats and unix sockets Tom Lane <tgl@sss.pgh.pa.us>
@ 2011-12-21 16:21   ` Bèrto ëd Sèra <berto.d.sera@gmail.com>
  2011-12-21 16:50     ` Re: stats and unix sockets Greg Spiegelberg <gspiegelberg@gmail.com>
  0 siblings, 1 reply; 5+ messages in thread

From: Bèrto ëd Sèra @ 2011-12-21 16:21 UTC (permalink / raw)
  To: Tom Lane <tgl@sss.pgh.pa.us>; +Cc: pgsql-admin

Hi!


> That's a pretty stupid requirement.  The stats collector socket is bound
> to itself, so it's inaccessible from anywhere else (on machine or off)
> regardless of firewall settings.  There's no need to worry about it,
> and no there is not a provision for doing it via unix socket instead.
>

Indeed it is a totally harmless thing and the request makes little (if any)
sense. I will pass the answer over and I do share your stance regarding
excess in paranoid modes :)

Bèrto

-- 
==============================
If Pac-Man had affected us as kids, we'd all be running around in a
darkened room munching pills and listening to repetitive music.

^ permalink  raw  reply  [nested|flat] 5+ messages in thread

* Re: stats and unix sockets
  2011-12-21 15:03 stats and unix sockets Bèrto ëd Sèra <berto.d.sera@gmail.com>
  2011-12-21 16:16 ` Re: stats and unix sockets Tom Lane <tgl@sss.pgh.pa.us>
  2011-12-21 16:21   ` Re: stats and unix sockets Bèrto ëd Sèra <berto.d.sera@gmail.com>
@ 2011-12-21 16:50     ` Greg Spiegelberg <gspiegelberg@gmail.com>
  2011-12-21 18:18       ` Re: stats and unix sockets Bèrto ëd Sèra <berto.d.sera@gmail.com>
  0 siblings, 1 reply; 5+ messages in thread

From: Greg Spiegelberg @ 2011-12-21 16:50 UTC (permalink / raw)
  To: Bèrto ëd Sèra <berto.d.sera@gmail.com>; +Cc: Tom Lane <tgl@sss.pgh.pa.us>; pgsql-admin

On Wed, Dec 21, 2011 at 9:21 AM, Bèrto ëd Sèra <berto.d.sera@gmail.com>wrote:

> Hi!
>
>
>> That's a pretty stupid requirement.  The stats collector socket is bound
>> to itself, so it's inaccessible from anywhere else (on machine or off)
>> regardless of firewall settings.  There's no need to worry about it,
>> and no there is not a provision for doing it via unix socket instead.
>>
>
> Indeed it is a totally harmless thing and the request makes little (if
> any) sense. I will pass the answer over and I do share your stance
> regarding excess in paranoid modes :)
>
>
Can you create a virtual network interface, assign an address to it and
have PostgreSQL listen to it in addition to the socket?  I'm thinking not
the eth0:X type but potentially what VirtualBox (vboxnet0), VMware (vmnet0)
or other virtualization products do using brctl.

Greg

^ permalink  raw  reply  [nested|flat] 5+ messages in thread

* Re: stats and unix sockets
  2011-12-21 15:03 stats and unix sockets Bèrto ëd Sèra <berto.d.sera@gmail.com>
  2011-12-21 16:16 ` Re: stats and unix sockets Tom Lane <tgl@sss.pgh.pa.us>
  2011-12-21 16:21   ` Re: stats and unix sockets Bèrto ëd Sèra <berto.d.sera@gmail.com>
  2011-12-21 16:50     ` Re: stats and unix sockets Greg Spiegelberg <gspiegelberg@gmail.com>
@ 2011-12-21 18:18       ` Bèrto ëd Sèra <berto.d.sera@gmail.com>
  0 siblings, 0 replies; 5+ messages in thread

From: Bèrto ëd Sèra @ 2011-12-21 18:18 UTC (permalink / raw)
  To: Greg Spiegelberg <gspiegelberg@gmail.com>; +Cc: Tom Lane <tgl@sss.pgh.pa.us>; pgsql-admin

Hi!

Can you create a virtual network interface, assign an address to it and
> have PostgreSQL listen to it in addition to the socket?  I'm thinking not
> the eth0:X type but potentially what VirtualBox (vboxnet0), VMware (vmnet0)
> or other virtualization products do using brctl.
>

This might actually be an option, I'll forward it to the admin, as I'm not
personally in charge for this level of configuration on the box.

Thanks
Bèrto

-- 
==============================
If Pac-Man had affected us as kids, we'd all be running around in a
darkened room munching pills and listening to repetitive music.

^ permalink  raw  reply  [nested|flat] 5+ messages in thread


end of thread, other threads:[~2011-12-21 18:18 UTC | newest]

Thread overview: 5+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2011-12-21 15:03 stats and unix sockets Bèrto ëd Sèra <berto.d.sera@gmail.com>
2011-12-21 16:16 ` Tom Lane <tgl@sss.pgh.pa.us>
2011-12-21 16:21   ` Bèrto ëd Sèra <berto.d.sera@gmail.com>
2011-12-21 16:50     ` Greg Spiegelberg <gspiegelberg@gmail.com>
2011-12-21 18:18       ` Bèrto ëd Sèra <berto.d.sera@gmail.com>

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox