Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1q2AcX-0007Dk-AR for pgsql-admin@arkaria.postgresql.org; Thu, 25 May 2023 13:03:09 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1q2AcV-00064X-SA for pgsql-admin@arkaria.postgresql.org; Thu, 25 May 2023 13:03:07 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1q2AcV-00064O-G9 for pgsql-admin@lists.postgresql.org; Thu, 25 May 2023 13:03:07 +0000 Received: from mail-yw1-x1136.google.com ([2607:f8b0:4864:20::1136]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1q2AcO-0024aQ-GJ for pgsql-admin@lists.postgresql.org; Thu, 25 May 2023 13:03:06 +0000 Received: by mail-yw1-x1136.google.com with SMTP id 00721157ae682-5658875abfaso7172367b3.1 for ; Thu, 25 May 2023 06:03:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1685019779; x=1687611779; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=U4yWoPCG+4SqnCLuITfvWuEywWaR1WcZ70NqYxeeSd8=; b=Sq/DuHF8m6wBpgsDbHKiMv68k0ymMHHCwzQ1abbJcuDUtSA5gCjSWUhybTopU4dzdu XXYhAAUNoASK0s4l660ehXwuy0Da24jv+0HDXPz4Kp9swbBqs41BoWA5MRr8o+z2pWdb 0EVj796QCi/Uy50ubnjUONYuetphVJAy+aSfftaS7YQc4GyXlXwV5NslLtI3yXK1LM94 Fpc3IDQwf9qij6HQm0T0ZSSX9LfjiiSSc5VGv6bLzWkI9BbRACFSQR0z1hBjyQ2cgNV6 xlAMzf6urH3SAWgIF82Z3RoXvUWLOimyIH5QxP0UFFG6lIWC/hntCQYDVAGESvk3v/k2 DunQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1685019779; x=1687611779; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=U4yWoPCG+4SqnCLuITfvWuEywWaR1WcZ70NqYxeeSd8=; b=Ufga/9ZVEb3t2A8dAfDsSgVfsMJ+MCADK8R5aUMPxWR77yLVqsya9+7PtWHhKd7kNI dRBSITQHo4gFapSgtrJ05fZXN3fhTxCiY3OcZe9rALIjYbB0+yAAbwv51bLxFNTmvxbU ppMCxZPXw2365UAdvPIs50v04gpcra3AtbaWGw+xsK2ES7K5EPaqDhLsU/h1rpbIiLQu WJYGlv3dzWMkQGL9KdmYqu9UDUj5AxA2OxR9p5j4WCiLo63yZeXIDES4U9OOB5JTjVX9 2N1SoSSuoktS4pmyKOrZ76anBem2mrl/Rx/eEJQzSJa9stJpaCrir4SnlmjwFjuOQwf6 PpIQ== X-Gm-Message-State: AC+VfDy5W7xGD5pcFpzhUBSbC+leDXQClXr+gLTxsUVRkp/DfCKkuiEK KTpQn+xmspu0OkLy1IUQykoJLCAQIps= X-Google-Smtp-Source: ACHHUZ5jO26dHqR0pdVsiijRTObpl25J302TJZEuTg+WRnNnSu0gtGqZTWWEHHIllHKFz0e0AUpPYg== X-Received: by 2002:a0d:dd57:0:b0:565:9e15:aca9 with SMTP id g84-20020a0ddd57000000b005659e15aca9mr190340ywe.19.1685019779226; Thu, 25 May 2023 06:02:59 -0700 (PDT) Received: from ?IPV6:2600:1700:bd2c:b810:ccfd:c146:a1fa:eea3? ([2600:1700:bd2c:b810:ccfd:c146:a1fa:eea3]) by smtp.googlemail.com with ESMTPSA id r123-20020a0de881000000b0056189f9ec2asm333528ywe.133.2023.05.25.06.02.58 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 25 May 2023 06:02:58 -0700 (PDT) Message-ID: Date: Thu, 25 May 2023 08:02:57 -0500 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.10.0 Subject: Re: PG Database Encryption Content-Language: en-US To: pgsql-admin@lists.postgresql.org References: From: Ron In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 5/25/23 03:21, Ravi GH wrote: > Hello PG Admins , Team :) > > We have enabled SSL Based replication & connection from Application to > PostgreSql DB using SSL via pgbouncer. > > My Question is in regard to implementing DataBase Encryption. > > Background : We are using PostgreSql DB for Atlassian Bitbucket Application. >                        We want to implement encryption for databases at > system level (  it can be at rest (archive) PgBackRest can encrypt it's backups using AES-256. > or while retrieving (accessing it)). > > Seeking guidance in this regard on How to enable DataBase Encryption of > Postgresql DB. Can anyone guide me in this regard or share a few pointers > pages on "How to enable it" or any 3rd party tools that can do ths. > > Thanks & Regards, > Ravi -- Born in Arizona, moved to Babylonia.