From: Ron <ronljohnsonjr@gmail.com>
To: pgsql-admin@lists.postgresql.org
Subject: Re: Reg: Filesystem level encryption support for postgreSQL
Date: Thu, 12 Sep 2019 17:22:18 -0500
Message-ID: <a5f1e70d-342b-428a-6f9b-9b635b6e053b@gmail.com> (raw)
In-Reply-To: <BMXPR01MB3847CD907B8388C63D67CF90B8B00@BMXPR01MB3847.INDPRD01.PROD.OUTLOOK.COM>
References: <BMXPR01MB38477E31CBAA5A462DFCD86AB8B00@BMXPR01MB3847.INDPRD01.PROD.OUTLOOK.COM>
<6962f5a2-b7e9-4a12-9991-b786515ffc83@DM6NAM12FT031.eop-nam12.prod.protection.outlook.com>
<BMXPR01MB3847CD907B8388C63D67CF90B8B00@BMXPR01MB3847.INDPRD01.PROD.OUTLOOK.COM>
But you said "i need to implement *Filesystem* level encryption". That's
not specific to PostgreSQL.
On 9/12/19 4:57 PM, pradeep pandey wrote:
> Thanks but i am looking for solution which is more specific to postgreSQL
> in line with TDE and HSM
>
> ----------------------------------------------------------------------------
> *From:* jwiencek3 <jwiencek3@comcast.net>
> *Sent:* Thursday, September 12, 2019 9:42 PM
> *To:* pradeep pandey <pandeyp@hotmail.com>;
> pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
> *Subject:* Re: Reg: Filesystem level encryption support for postgreSQL
> I'm working on an environment that is using Hytrust. Other than taking a
> long time encrypt the disk there have been no issues at all.
>
> FYI encryption of a 1Tb mount takes approx. 12 hours. We had to decrypt
> at one point and that effort was about the same as an encrypt.
>
> Storage admins owned this not the DBA.
>
>
> Sent via the Samsung Galaxy S9+, an AT&T 5G Evolution capable smartphone
>
> -------- Original message --------
> From: pradeep pandey <pandeyp@hotmail.com>
> Date: 9/12/19 3:59 PM (GMT-06:00)
> To: pgsql-admin@lists.postgresql.org
> Subject: Reg: Filesystem level encryption support for postgreSQL
>
> Hi folks,
>
> i am new to postgreSQL and i need to implement Filesystem level
> encryption and we use EKM for encryption keys
> i am seeking you folks help to know 2 things here
>
> * if i implment EKM which is third party encryption is that supported by
> postgreSQL
> * what is the best practice and supported method of implmenting the
> filesytem level of encyption/protection in postgreSQL
> * i searched google but did not find much info
> * any pointer or link to read would alos help
>
> Thanks in advance folks
> Pradeep
>
--
Angular momentum makes the world go 'round.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: ronljohnsonjr@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: Reg: Filesystem level encryption support for postgreSQL
In-Reply-To: <a5f1e70d-342b-428a-6f9b-9b635b6e053b@gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox