pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedPG Database Encryption
7+ messages / 4 participants
[nested] [flat]
* PG Database Encryption
@ 2023-05-25 08:21 Ravi GH <mails2ravi@gmail.com>
2023-05-25 10:22 ` Re: PG Database Encryption hubert depesz lubaczewski <depesz@depesz.com>
2023-05-25 13:02 ` Re: PG Database Encryption Ron <ronljohnsonjr@gmail.com>
0 siblings, 2 replies; 7+ messages in thread
From: Ravi GH @ 2023-05-25 08:21 UTC (permalink / raw)
To: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Hello PG Admins , Team :)
We have enabled SSL Based replication & connection from Application to
PostgreSql DB using SSL via pgbouncer.
My Question is in regard to implementing DataBase Encryption.
Background : We are using PostgreSql DB for Atlassian Bitbucket Application.
We want to implement encryption for databases at
system level ( it can be at rest (archive) or while retrieving (accessing
it)).
Seeking guidance in this regard on How to enable DataBase Encryption of
Postgresql DB. Can anyone guide me in this regard or share a few pointers
pages on "How to enable it" or any 3rd party tools that can do ths.
Thanks & Regards,
Ravi
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: PG Database Encryption
2023-05-25 08:21 PG Database Encryption Ravi GH <mails2ravi@gmail.com>
@ 2023-05-25 10:22 ` hubert depesz lubaczewski <depesz@depesz.com>
2023-05-29 11:58 ` Re: PG Database Encryption Ravi GH <mails2ravi@gmail.com>
1 sibling, 1 reply; 7+ messages in thread
From: hubert depesz lubaczewski @ 2023-05-25 10:22 UTC (permalink / raw)
To: Ravi GH <mails2ravi@gmail.com>; +Cc: Pgsql-admin <pgsql-admin@lists.postgresql.org>
On Thu, May 25, 2023 at 01:51:53PM +0530, Ravi GH wrote:
> Seeking guidance in this regard on How to enable DataBase Encryption of
> Postgresql DB. Can anyone guide me in this regard or share a few pointers
> pages on "How to enable it" or any 3rd party tools that can do ths.
Pg doesn't have anything like this now.
What you can do, is:
1. Check https://wiki.postgresql.org/wiki/Transparent_Data_Encryption
2. Encrypt the filesystem/disk that the PG is on, using whatever tool
your operating system provides.
Best regards,
depesz
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: PG Database Encryption
2023-05-25 08:21 PG Database Encryption Ravi GH <mails2ravi@gmail.com>
2023-05-25 10:22 ` Re: PG Database Encryption hubert depesz lubaczewski <depesz@depesz.com>
@ 2023-05-29 11:58 ` Ravi GH <mails2ravi@gmail.com>
2023-05-31 18:46 ` Re: PG Database Encryption Laurenz Albe <laurenz.albe@cybertec.at>
0 siblings, 1 reply; 7+ messages in thread
From: Ravi GH @ 2023-05-29 11:58 UTC (permalink / raw)
To: depesz@depesz.com; +Cc: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Thanks depesz , Ron, Marco & others,
I tried the suggested option of TDE
<https://wiki.postgresql.org/wiki/Transparent_Data_Encryption; , to enable
Cluster Level Encryption. I had followed the "Installation from Source
Code" method with --with-ssl=openssl parameter to ./configure during build.
1. Please confirm the enabling encryption is possible only by install from
source with --with-ssl parameter?
2. I could enable encryption using PG 12 with patched version provided at
here
<https://www.cybertec-postgresql.com/en/products/postgresql-transparent-data-encryption/;
,
do we need to purchase the product or is it possible with Postgres source
shared at https://www.postgresql.org/ftp/source/v14.7/
We are using Ubuntu 22 and we will prefer to go with TDE cluster level
encryption, please advise can we try to implement it by install from source
( with shared source at https://www.postgresql.org/ftp/source/v14.7 ) or
need to purchasing TDE patched version is mandatory to enable cluster level
encryption?
Thanks a lot,
Ravi
On Thu, May 25, 2023 at 3:52 PM hubert depesz lubaczewski <depesz@depesz.com>
wrote:
> On Thu, May 25, 2023 at 01:51:53PM +0530, Ravi GH wrote:
> > Seeking guidance in this regard on How to enable DataBase Encryption of
> > Postgresql DB. Can anyone guide me in this regard or share a few pointers
> > pages on "How to enable it" or any 3rd party tools that can do ths.
>
> Pg doesn't have anything like this now.
>
> What you can do, is:
> 1. Check https://wiki.postgresql.org/wiki/Transparent_Data_Encryption
> 2. Encrypt the filesystem/disk that the PG is on, using whatever tool
> your operating system provides.
>
> Best regards,
>
> depesz
>
>
--
"Give me the place to stand, and I shall move the earth" — Archimedes
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: PG Database Encryption
2023-05-25 08:21 PG Database Encryption Ravi GH <mails2ravi@gmail.com>
2023-05-25 10:22 ` Re: PG Database Encryption hubert depesz lubaczewski <depesz@depesz.com>
2023-05-29 11:58 ` Re: PG Database Encryption Ravi GH <mails2ravi@gmail.com>
@ 2023-05-31 18:46 ` Laurenz Albe <laurenz.albe@cybertec.at>
2023-06-05 06:07 ` Re: PG Database Encryption Ravi GH <mails2ravi@gmail.com>
0 siblings, 1 reply; 7+ messages in thread
From: Laurenz Albe @ 2023-05-31 18:46 UTC (permalink / raw)
To: Ravi GH <mails2ravi@gmail.com>; depesz@depesz.com; +Cc: Pgsql-admin <pgsql-admin@lists.postgresql.org>
On Mon, 2023-05-29 at 17:28 +0530, Ravi GH wrote:
> I tried the suggested option of TDE , to enable Cluster Level Encryption. I had followed the
> "Installation from Source Code" method with --with-ssl=openssl parameter to ./configure during build.
>
> 1. Please confirm the enabling encryption is possible only by install from source with --with-ssl parameter?
Sounds right.
> 2. I could enable encryption using PG 12 with patched version provided at here , do we need to purchase
> the product or is it possible with Postgres source shared at https://www.postgresql.org/ftp/source/v14.7/
It is free open source.
You can get the patched version for different releases here:
https://github.com/cybertec-postgresql/postgres/tags
> We are using Ubuntu 22 and we will prefer to go with TDE cluster level encryption, please advise can we try
> to implement it by install from source ( with shared source at https://www.postgresql.org/ftp/source/v14.7 )
> or need to purchasing TDE patched version is mandatory to enable cluster level encryption?
That should be here: https://github.com/cybertec-postgresql/postgres/releases/tag/PG_14_7_TDE_1_1_3
Yours,
Laurenz Albe
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: PG Database Encryption
2023-05-25 08:21 PG Database Encryption Ravi GH <mails2ravi@gmail.com>
2023-05-25 10:22 ` Re: PG Database Encryption hubert depesz lubaczewski <depesz@depesz.com>
2023-05-29 11:58 ` Re: PG Database Encryption Ravi GH <mails2ravi@gmail.com>
2023-05-31 18:46 ` Re: PG Database Encryption Laurenz Albe <laurenz.albe@cybertec.at>
@ 2023-06-05 06:07 ` Ravi GH <mails2ravi@gmail.com>
2023-06-05 06:51 ` Re: PG Database Encryption Laurenz Albe <laurenz.albe@cybertec.at>
0 siblings, 1 reply; 7+ messages in thread
From: Ravi GH @ 2023-06-05 06:07 UTC (permalink / raw)
To: Laurenz Albe <laurenz.albe@cybertec.at>; +Cc: depesz@depesz.com, Pgsql-admin <pgsql-admin@lists.postgresql.org>
Thanks Laurenz, Team.
FYI, I am trying to contact the Cybertec team :) , i have following
queries
Queries:
The native Postgres does not mention about "Cluster-level encryption" at
page https://www.postgresql.org/docs/14/encryption-options.html
Does this mean DB Cluster encryption* is not yet fully supported *by Native
Postgres release? ( and if we need this feature then better to rely on
Ubuntu deb packages from cybertec or download patch versions?
Request to share your known info in this regard which will help us to great
extent.
Thank You,
Ravi
On Thu, Jun 1, 2023 at 12:16 AM Laurenz Albe <laurenz.albe@cybertec.at>
wrote:
> On Mon, 2023-05-29 at 17:28 +0530, Ravi GH wrote:
> > I tried the suggested option of TDE , to enable Cluster Level
> Encryption. I had followed the
> > "Installation from Source Code" method with --with-ssl=openssl parameter
> to ./configure during build.
> >
> > 1. Please confirm the enabling encryption is possible only by install
> from source with --with-ssl parameter?
>
> Sounds right.
>
> > 2. I could enable encryption using PG 12 with patched version
> provided at here , do we need to purchase
> > the product or is it possible with Postgres source shared at
> https://www.postgresql.org/ftp/source/v14.7/
>
> It is free open source.
> You can get the patched version for different releases here:
> https://github.com/cybertec-postgresql/postgres/tags
>
> > We are using Ubuntu 22 and we will prefer to go with TDE cluster level
> encryption, please advise can we try
> > to implement it by install from source ( with shared source at
> https://www.postgresql.org/ftp/source/v14.7 )
> > or need to purchasing TDE patched version is mandatory to enable cluster
> level encryption?
>
> That should be here:
> https://github.com/cybertec-postgresql/postgres/releases/tag/PG_14_7_TDE_1_1_3
>
> Yours,
> Laurenz Albe
>
--
"Give me the place to stand, and I shall move the earth" — Archimedes
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: PG Database Encryption
2023-05-25 08:21 PG Database Encryption Ravi GH <mails2ravi@gmail.com>
2023-05-25 10:22 ` Re: PG Database Encryption hubert depesz lubaczewski <depesz@depesz.com>
2023-05-29 11:58 ` Re: PG Database Encryption Ravi GH <mails2ravi@gmail.com>
2023-05-31 18:46 ` Re: PG Database Encryption Laurenz Albe <laurenz.albe@cybertec.at>
2023-06-05 06:07 ` Re: PG Database Encryption Ravi GH <mails2ravi@gmail.com>
@ 2023-06-05 06:51 ` Laurenz Albe <laurenz.albe@cybertec.at>
0 siblings, 0 replies; 7+ messages in thread
From: Laurenz Albe @ 2023-06-05 06:51 UTC (permalink / raw)
To: Ravi GH <mails2ravi@gmail.com>; +Cc: depesz@depesz.com, Pgsql-admin <pgsql-admin@lists.postgresql.org>
On Mon, 2023-06-05 at 11:37 +0530, Ravi GH wrote:
> Does this mean DB Cluster encryption is not yet fully supported by Native Postgres release?
Correct. You need a modified version of the PostgreSQL server.
Yours,
Laurenz Albe
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: PG Database Encryption
2023-05-25 08:21 PG Database Encryption Ravi GH <mails2ravi@gmail.com>
@ 2023-05-25 13:02 ` Ron <ronljohnsonjr@gmail.com>
1 sibling, 0 replies; 7+ messages in thread
From: Ron @ 2023-05-25 13:02 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
On 5/25/23 03:21, Ravi GH wrote:
> Hello PG Admins , Team :)
>
> We have enabled SSL Based replication & connection from Application to
> PostgreSql DB using SSL via pgbouncer.
>
> My Question is in regard to implementing DataBase Encryption.
>
> Background : We are using PostgreSql DB for Atlassian Bitbucket Application.
> We want to implement encryption for databases at
> system level ( it can be at rest (archive)
PgBackRest can encrypt it's backups using AES-256.
> or while retrieving (accessing it)).
>
> Seeking guidance in this regard on How to enable DataBase Encryption of
> Postgresql DB. Can anyone guide me in this regard or share a few pointers
> pages on "How to enable it" or any 3rd party tools that can do ths.
>
> Thanks & Regards,
> Ravi
--
Born in Arizona, moved to Babylonia.
^ permalink raw reply [nested|flat] 7+ messages in thread
end of thread, other threads:[~2023-06-05 06:51 UTC | newest]
Thread overview: 7+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2023-05-25 08:21 PG Database Encryption Ravi GH <mails2ravi@gmail.com>
2023-05-25 10:22 ` hubert depesz lubaczewski <depesz@depesz.com>
2023-05-29 11:58 ` Ravi GH <mails2ravi@gmail.com>
2023-05-31 18:46 ` Laurenz Albe <laurenz.albe@cybertec.at>
2023-06-05 06:07 ` Ravi GH <mails2ravi@gmail.com>
2023-06-05 06:51 ` Laurenz Albe <laurenz.albe@cybertec.at>
2023-05-25 13:02 ` Ron <ronljohnsonjr@gmail.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox