MIME-Version: 1.0
References: <CACgMzfwSDRF+kQr59h0-xGUobCeFZxwVzE_tUxF18DkVb+vuDQ@mail.gmail.com>
In-Reply-To: <CACgMzfwSDRF+kQr59h0-xGUobCeFZxwVzE_tUxF18DkVb+vuDQ@mail.gmail.com>
From: Fernando Laudares Camargos <fernando.laudares.camargos@gmail.com>
Date: Fri, 31 Oct 2025 11:41:40 -0300
Message-ID: <CAF0m2_E=iFFOZSX7HTPkyukVqjuGjrwwb+zvy70px6WyJz+9wg@mail.gmail.com>
Subject: Re: Enquiry about TDE with PgSQL
To: Ashish Mukherjee <ashish.mukherjee@gmail.com>
Cc: pgsql-general@postgresql.org
Content-Type: multipart/alternative; boundary="000000000000c042700642755dd4"
Archived-At: <https://www.postgresql.org/message-id/CAF0m2_E%3DiFFOZSX7HTPkyukVqjuGjrwwb%2Bzvy70px6WyJz%2B9wg%40mail.gmail.com>
Precedence: bulk

--000000000000c042700642755dd4
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Ashish,
If you are looking for "native" TDE in PostgreSQL, you won't find it in the
PostgreSQL community distribution.
If you search for "postgresql tde", you will find a list of vendors that
provide TDE functions in their own distributions of PostgreSQL, such as:

   -
   https://www.cybertec-postgresql.com/en/products/cybertec-postgresql-ente=
rprise-edition-pgee/
   - https://www.enterprisedb.com/products/database
   - https://docs.percona.com/pg-tde/

What's important to understand is that if you migrate from PostgreSQL
community to one of these distributions and encrypt your tables using the
respective solution offered by the distribution, moving back to PostgreSQL
Community will require a logical backup (pg_dump) and restore.

Disclaimer: I work for Percona.

On Mon, Oct 13, 2025 at 12:55=E2=80=AFPM Ashish Mukherjee <
ashish.mukherjee@gmail.com> wrote:

> Hello,
>
> Thank you to the group members for the responses to my previous questions
> about TDE problems with PgSQL 17.
>
> I would like to enquire that based on the anecdotal experience of group
> members, which TDE solution works best for PgSQL 17 databases. The scenar=
io
> I have is of a large number of tables (15-20K) and some tables with 100M
> tuples each. The total database size is 4TB.
>
> I understand there may be variations and specific testing is required,
> however high-level pointers and feedback would be valuable.
>
> Regards,
> Ashish
>

--000000000000c042700642755dd4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi Ashish,<div>If you are looking for &quot;native&quot; T=
DE in PostgreSQL, you won&#39;t find it in the PostgreSQL community distrib=
ution.</div><div>If you search for &quot;postgresql tde&quot;, you will fin=
d a list of vendors that provide TDE functions in their own distributions o=
f PostgreSQL, such as:</div><div><ul><li><a href=3D"https://www.cybertec-po=
stgresql.com/en/products/cybertec-postgresql-enterprise-edition-pgee/">http=
s://www.cybertec-postgresql.com/en/products/cybertec-postgresql-enterprise-=
edition-pgee/</a></li><li><a href=3D"https://www.enterprisedb.com/products/=
database">https://www.enterprisedb.com/products/database</a></li><li><a hre=
f=3D"https://docs.percona.com/pg-tde/">https://docs.percona.com/pg-tde/</a>=
</li></ul>What&#39;s important to understand is that if you migrate from Po=
stgreSQL community to one of these distributions and encrypt your tables us=
ing the respective solution offered by the distribution, moving back to Pos=
tgreSQL Community will require a logical backup (pg_dump) and restore.</div=
><div><br></div><div>Disclaimer: I work for Percona.</div></div><br><div cl=
ass=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_a=
ttr">On Mon, Oct 13, 2025 at 12:55=E2=80=AFPM Ashish Mukherjee &lt;<a href=
=3D"mailto:ashish.mukherjee@gmail.com">ashish.mukherjee@gmail.com</a>&gt; w=
rote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0p=
x 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=
=3D"ltr">Hello,<div><br></div><div>Thank you to the group members for the r=
esponses to my previous questions about TDE problems with PgSQL 17.</div><d=
iv><br></div><div>I would like to enquire that based on the anecdotal exper=
ience of group members, which TDE solution works best for PgSQL 17 database=
s. The=C2=A0scenario I=C2=A0have is of a large number of tables (15-20K) an=
d some tables with 100M tuples each. The total database size is 4TB.</div><=
div><br></div><div>I understand there may be variations and specific testin=
g is required, however high-level pointers and feedback would be valuable.<=
/div><div><br></div><div>Regards,</div><div>Ashish</div></div>
</blockquote></div>

--000000000000c042700642755dd4--