Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1qC1Su-0007mj-Vs for pgsql-docs@arkaria.postgresql.org; Wed, 21 Jun 2023 17:17:56 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1qC1St-0006RO-SN for pgsql-docs@arkaria.postgresql.org; Wed, 21 Jun 2023 17:17:55 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1qC1St-0006RC-L9 for pgsql-docs@lists.postgresql.org; Wed, 21 Jun 2023 17:17:55 +0000 Received: from mout-u-107.mailbox.org ([80.241.59.207]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1qC1Sq-003rLs-G2 for pgsql-docs@lists.postgresql.org; Wed, 21 Jun 2023 17:17:55 +0000 Received: from smtp202.mailbox.org (smtp202.mailbox.org [IPv6:2001:67c:2050:b231:465::202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-u-107.mailbox.org (Postfix) with ESMTPS id 4QmVZ523Ygz9sVl; Wed, 21 Jun 2023 19:17:49 +0200 (CEST) Date: Wed, 21 Jun 2023 19:17:48 +0200 (CEST) From: Erik Wienhold To: B M , pgsql-docs@lists.postgresql.org Message-ID: <378043614.1217340.1687367868601@office.mailbox.org> In-Reply-To: References: Subject: Re: large scale reliable software system MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Priority: 3 Importance: Normal X-Rspamd-Queue-Id: 4QmVZ523Ygz9sVl List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk I recommend posting this to pgsql-admin or pgsql-general instead of pgsql-docs to get more responses. Besides that, pgsql-docs is for discussions on the Postgres docs. > On 21/06/2023 18:52 CEST B M wrote: > > I would like to know your advices to develop a large scale reliable software > system using PostgreSQL in the back-end, This is very general but the following points hopefully lead you in the right direction: > through which i can share the storage with the different system users where > they login to the system through the web application front-end with different > passwords and usernames , save the privacy of each user data, improve overall > system security The OWASP Cheat Sheets give advice on securing web applications: https://cheatsheetseries.owasp.org/ > and performance, achieve fast response, My general advice: design and implement for correctness, then measure and optimize. For performance, look into high availability: https://www.postgresql.org/docs/current/high-availability.html > make backups and save the stored data from loss. Use pgBackRest or pgbarman with WAL streaming to reduce the recovery point objective (the maximum period in which data might be lost). > The system will be hosted on a cloud. Some cloud providers offer Postgres instances including backups, e.g. Google Cloud Platform which I'm looking into right now. -- Erik