DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=mime-version:in-reply-to:references:date:message-id:subject:from:to
	:cc:content-type;
	b=Ixq94Y8Fx/G3e0l2hf9O2QBr3vQ0DJSm1moPHylbwLsrMgQ2O/+Z50sb+Op1FIpVwq
	lpwuJcOAViMp98H9enSs00OsXAIMXWXFvHrr4XGNwZ6zJHGnCxWWy+pHbbB3GCzjlkHL
	bwQAXTGBnCKBOw+KLkZglU4u3xHZOc67rwt0I=
MIME-Version: 1.0
In-Reply-To: <1273002081.2590.7.camel@w-ehs-psa.telbiomed.at>
References: <1272977816.21378.13.camel@w-ehs-psa.telbiomed.at>
	<13335.1272987580@sss.pgh.pa.us>
	<1273002081.2590.7.camel@w-ehs-psa.telbiomed.at>
Date: Tue, 4 May 2010 14:04:38 -0600
Message-ID: <w2ydcc563d11005041304ufc8ee23dy2e0873df298d2b5f@mail.gmail.com>
Subject: Re: Statistics collector port / unix dom. socket?
From: Scott Marlowe <scott.marlowe@gmail.com>
To: Peter Sabaini <peter.sabaini@ait.ac.at>
Cc: Tom Lane <tgl@sss.pgh.pa.us>, pgsql-admin@postgresql.org
Content-Type: text/plain; charset=ISO-8859-1

On Tue, May 4, 2010 at 1:41 PM, Peter Sabaini <peter.sabaini@ait.ac.at> wrote:
> On Tue, 2010-05-04 at 11:39 -0400, Tom Lane wrote:
>> Peter Sabaini <peter.sabaini@ait.ac.at> writes:
>> > it seems Postgres tries to send a UDP packet to a random high port to
>> > communicate with the statistics collector daemon. We have rather strict
>> > packet filter rules in place, and I'd like to make the system use a
>> > fixed port for this, or even better a Unix domain socket. Is this
>> > possible (setting a compile time or run time parameter)?
>>
>> No, the stats collector just uses whatever port bind() chooses for it.
>
> A pity.
>
>> I'd suggest backing off your ideas about how much filtering is
>> appropriate for local connections.
>
> Since we're running multiple database instances with different projects
> on one machine I'd like to isolate them as best I can.

Maybe running them in individual VMs would do that.