MIME-Version: 1.0
From: Ron Johnson <ronljohnsonjr@gmail.com>
Date: Thu, 11 Sep 2025 12:21:35 -0400
Message-ID: 
 <CANzqJaBD0vqs6=ovHOjUF4SV80pBx6A-1kZ8mwcryJq2bjFH2g@mail.gmail.com>
Subject: Allow connections by IP address?
To: pgsql-admin <pgsql-admin@postgresql.org>
Content-Type: multipart/alternative; boundary="0000000000001dc5df063e88efc8"
Archived-At: 
 <https://www.postgresql.org/message-id/CANzqJaBD0vqs6%3DovHOjUF4SV80pBx6A-1kZ8mwcryJq2bjFH2g%40mail.gmail.com>
Precedence: bulk

--0000000000001dc5df063e88efc8
Content-Type: text/plain; charset="UTF-8"

PG 17.latest

My server has two IP addresses:
10.1.2.3.4
10.1.2.3.5 (a VIP)

Some connections should only come in through the VIP, while others (like
replication) must come in through .4 and others (f.e. administrators, can
come in from .4 or .5).

Is there any way to restrict that?  I don't see anything in
https://www.postgresql.org/docs/17/auth-pg-hba-conf.html but may be
overlooking something.

(Why don't we use a connection pooler?  The 3rd party application has only
been validated against direct connections to PG. Bugs in PgPool caused
problems in prod.)

-- 
Death to <Redacted>, and butter sauce.
Don't boil me, I'm still alive.
<Redacted> lobster!

--0000000000001dc5df063e88efc8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>PG 17.latest</div><div><br></div><div>My server has t=
wo IP addresses:</div><div>10.1.2.3.4</div><div>10.1.2.3.5 (a VIP)</div><di=
v><br></div><div>Some connections should only come in through the VIP, whil=
e others (like replication) must come in through .4 and others (f.e. admini=
strators, can come in from .4 or .5).</div><div><br></div><div>Is there any=
 way to restrict that?=C2=A0 I don&#39;t see anything in=C2=A0<a href=3D"ht=
tps://www.postgresql.org/docs/17/auth-pg-hba-conf.html">https://www.postgre=
sql.org/docs/17/auth-pg-hba-conf.html</a> but may be overlooking something.=
</div><div><br></div><div>(Why don&#39;t we use a connection pooler?=C2=A0 =
The 3rd party application has only been validated against direct=C2=A0conne=
ctions to PG. Bugs in PgPool caused problems in=C2=A0prod.)</div><div><br><=
/div><span class=3D"gmail_signature_prefix">-- </span><br><div dir=3D"ltr" =
class=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div dir=3D"lt=
r">Death to &lt;Redacted&gt;, and butter sauce.<div>Don&#39;t boil me, I=
9;m still alive.<br><div><div>&lt;Redacted&gt; lobster!</div></div></div></=
div></div></div>

--0000000000001dc5df063e88efc8--