pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedReg: Filesystem level encryption support for postgreSQL
4+ messages / 3 participants
[nested] [flat]
* Reg: Filesystem level encryption support for postgreSQL
@ 2019-09-12 20:59 pradeep pandey <pandeyp@hotmail.com>
2019-09-12 21:57 ` Re: Reg: Filesystem level encryption support for postgreSQL pradeep pandey <pandeyp@hotmail.com>
0 siblings, 1 reply; 4+ messages in thread
From: pradeep pandey @ 2019-09-12 20:59 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Hi folks,
i am new to postgreSQL and i need to implement Filesystem level encryption and we use EKM for encryption keys
i am seeking you folks help to know 2 things here
* if i implment EKM which is third party encryption is that supported by postgreSQL
* what is the best practice and supported method of implmenting the filesytem level of encyption/protection in postgreSQL
* i searched google but did not find much info
* any pointer or link to read would alos help
Thanks in advance folks
Pradeep
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Reg: Filesystem level encryption support for postgreSQL
2019-09-12 20:59 Reg: Filesystem level encryption support for postgreSQL pradeep pandey <pandeyp@hotmail.com>
@ 2019-09-12 21:57 ` pradeep pandey <pandeyp@hotmail.com>
2019-09-12 22:22 ` Re: Reg: Filesystem level encryption support for postgreSQL Ron <ronljohnsonjr@gmail.com>
0 siblings, 1 reply; 4+ messages in thread
From: pradeep pandey @ 2019-09-12 21:57 UTC (permalink / raw)
To: jwiencek3 <jwiencek3@comcast.net>; pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Thanks but i am looking for solution which is more specific to postgreSQL in line with TDE and HSM
________________________________
From: jwiencek3 <jwiencek3@comcast.net>
Sent: Thursday, September 12, 2019 9:42 PM
To: pradeep pandey <pandeyp@hotmail.com>; pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Subject: Re: Reg: Filesystem level encryption support for postgreSQL
I'm working on an environment that is using Hytrust. Other than taking a long time encrypt the disk there have been no issues at all.
FYI encryption of a 1Tb mount takes approx. 12 hours. We had to decrypt at one point and that effort was about the same as an encrypt.
Storage admins owned this not the DBA.
Sent via the Samsung Galaxy S9+, an AT&T 5G Evolution capable smartphone
-------- Original message --------
From: pradeep pandey <pandeyp@hotmail.com>
Date: 9/12/19 3:59 PM (GMT-06:00)
To: pgsql-admin@lists.postgresql.org
Subject: Reg: Filesystem level encryption support for postgreSQL
Hi folks,
i am new to postgreSQL and i need to implement Filesystem level encryption and we use EKM for encryption keys
i am seeking you folks help to know 2 things here
* if i implment EKM which is third party encryption is that supported by postgreSQL
* what is the best practice and supported method of implmenting the filesytem level of encyption/protection in postgreSQL
* i searched google but did not find much info
* any pointer or link to read would alos help
Thanks in advance folks
Pradeep
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Reg: Filesystem level encryption support for postgreSQL
2019-09-12 20:59 Reg: Filesystem level encryption support for postgreSQL pradeep pandey <pandeyp@hotmail.com>
2019-09-12 21:57 ` Re: Reg: Filesystem level encryption support for postgreSQL pradeep pandey <pandeyp@hotmail.com>
@ 2019-09-12 22:22 ` Ron <ronljohnsonjr@gmail.com>
2019-09-13 08:31 ` Re: Reg: Filesystem level encryption support for postgreSQL Arni <Arni.Kromic@Bios-ICT.hr>
0 siblings, 1 reply; 4+ messages in thread
From: Ron @ 2019-09-12 22:22 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
But you said "i need to implement *Filesystem* level encryption". That's
not specific to PostgreSQL.
On 9/12/19 4:57 PM, pradeep pandey wrote:
> Thanks but i am looking for solution which is more specific to postgreSQL
> in line with TDE and HSM
>
> ----------------------------------------------------------------------------
> *From:* jwiencek3 <jwiencek3@comcast.net>
> *Sent:* Thursday, September 12, 2019 9:42 PM
> *To:* pradeep pandey <pandeyp@hotmail.com>;
> pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
> *Subject:* Re: Reg: Filesystem level encryption support for postgreSQL
> I'm working on an environment that is using Hytrust. Other than taking a
> long time encrypt the disk there have been no issues at all.
>
> FYI encryption of a 1Tb mount takes approx. 12 hours. We had to decrypt
> at one point and that effort was about the same as an encrypt.
>
> Storage admins owned this not the DBA.
>
>
> Sent via the Samsung Galaxy S9+, an AT&T 5G Evolution capable smartphone
>
> -------- Original message --------
> From: pradeep pandey <pandeyp@hotmail.com>
> Date: 9/12/19 3:59 PM (GMT-06:00)
> To: pgsql-admin@lists.postgresql.org
> Subject: Reg: Filesystem level encryption support for postgreSQL
>
> Hi folks,
>
> i am new to postgreSQL and i need to implement Filesystem level
> encryption and we use EKM for encryption keys
> i am seeking you folks help to know 2 things here
>
> * if i implment EKM which is third party encryption is that supported by
> postgreSQL
> * what is the best practice and supported method of implmenting the
> filesytem level of encyption/protection in postgreSQL
> * i searched google but did not find much info
> * any pointer or link to read would alos help
>
> Thanks in advance folks
> Pradeep
>
--
Angular momentum makes the world go 'round.
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Reg: Filesystem level encryption support for postgreSQL
2019-09-12 20:59 Reg: Filesystem level encryption support for postgreSQL pradeep pandey <pandeyp@hotmail.com>
2019-09-12 21:57 ` Re: Reg: Filesystem level encryption support for postgreSQL pradeep pandey <pandeyp@hotmail.com>
2019-09-12 22:22 ` Re: Reg: Filesystem level encryption support for postgreSQL Ron <ronljohnsonjr@gmail.com>
@ 2019-09-13 08:31 ` Arni <Arni.Kromic@Bios-ICT.hr>
0 siblings, 0 replies; 4+ messages in thread
From: Arni @ 2019-09-13 08:31 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
Indeed. When I read the question I also thought of something like
VeraCrypt (ex TrueCrypt). Any solution specific for postgres would NOT
be at "filesystem level".
Regards,
Arni
On 13/09/2019 00.22, Ron wrote:
> But you said "i need to implement *Filesystem* level encryption".
> That's not specific to PostgreSQL.
>
> On 9/12/19 4:57 PM, pradeep pandey wrote:
>> Thanks but i am looking for solution which is more specific to
>> postgreSQL in line with TDE and HSM
>>
>> ------------------------------------------------------------------------
>> *From:* jwiencek3 <jwiencek3@comcast.net>
>> *Sent:* Thursday, September 12, 2019 9:42 PM
>> *To:* pradeep pandey <pandeyp@hotmail.com>;
>> pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
>> *Subject:* Re: Reg: Filesystem level encryption support for postgreSQL
>>
>> I'm working on an environment that is using Hytrust. Other than
>> taking a long time encrypt the disk there have been no issues at all.
>>
>> FYI encryption of a 1Tb mount takes approx. 12 hours. We had to
>> decrypt at one point and that effort was about the same as an encrypt.
>>
>> Storage admins owned this not the DBA.
>>
>>
>> Sent via the Samsung Galaxy S9+, an AT&T 5G Evolution capable smartphone
>>
>> -------- Original message --------
>> From: pradeep pandey <pandeyp@hotmail.com>
>> Date: 9/12/19 3:59 PM (GMT-06:00)
>> To: pgsql-admin@lists.postgresql.org
>> Subject: Reg: Filesystem level encryption support for postgreSQL
>>
>> Hi folks,
>>
>> i am new to postgreSQL and i need to implement Filesystem level
>> encryption and we use EKM for encryption keys
>> i am seeking you folks help to know 2 things here
>>
>> * if i implment EKM which is third party encryption is that
>> supported by postgreSQL
>> * what is the best practice and supported method of implmenting the
>> filesytem level of encyption/protection in postgreSQL
>> * i searched google but did not find much info
>> * any pointer or link to read would alos help
>>
>> Thanks in advance folks
>> Pradeep
>>
>>
>
> --
> Angular momentum makes the world go 'round.
^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2019-09-13 08:31 UTC | newest]
Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2019-09-12 20:59 Reg: Filesystem level encryption support for postgreSQL pradeep pandey <pandeyp@hotmail.com>
2019-09-12 21:57 ` pradeep pandey <pandeyp@hotmail.com>
2019-09-12 22:22 ` Ron <ronljohnsonjr@gmail.com>
2019-09-13 08:31 ` Arni <Arni.Kromic@Bios-ICT.hr>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox