Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1UPzYr-0007NT-Hs for pgsql-admin@arkaria.postgresql.org; Wed, 10 Apr 2013 18:15:57 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.72) (envelope-from ) id 1UPzYr-0000fG-0G for pgsql-admin@arkaria.postgresql.org; Wed, 10 Apr 2013 18:15:57 +0000 Received: from makus.postgresql.org ([2001:4800:7903:4::125]) by malur.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1UPzYp-0000de-50 for pgsql-admin@postgresql.org; Wed, 10 Apr 2013 18:15:55 +0000 Received: from qmta03.westchester.pa.mail.comcast.net ([2001:558:fe14:43:76:96:62:32]) by makus.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1UPzYl-00064g-Rt for pgsql-admin@postgresql.org; Wed, 10 Apr 2013 18:15:54 +0000 Received: from omta19.westchester.pa.mail.comcast.net ([76.96.62.98]) by qmta03.westchester.pa.mail.comcast.net with comcast id NFqq1l04a27AodY53JFqgU; Wed, 10 Apr 2013 18:15:50 +0000 Received: from [192.168.1.176] ([69.142.185.164]) by omta19.westchester.pa.mail.comcast.net with comcast id NJFp1l00T3ZEZL53fJFq64; Wed, 10 Apr 2013 18:15:50 +0000 Message-ID: <5165AC42.4080109@comcast.net> Date: Wed, 10 Apr 2013 14:15:30 -0400 From: AJ Weber User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1 MIME-Version: 1.0 To: pgsql-admin@postgresql.org Subject: Re: Encrypting PGBouncer to Postgres DB connections References: <515AEB4E.9010305@europecamions-interactive.com> <1365617192.69337.YahooMailNeo@web163506.mail.gq1.yahoo.com> In-Reply-To: <1365617192.69337.YahooMailNeo@web163506.mail.gq1.yahoo.com> Content-Type: multipart/alternative; boundary="------------090503080603040605030407" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20121106; t=1365617750; bh=/e/CRSpWHWf7RVotJ19QVT9JqhwxaeLs6nQ024mzqmE=; h=Received:Received:Message-ID:Date:From:MIME-Version:To:Subject: Content-Type; b=GDtEeK6H3YJzj7r+A/5BnUS/8eHWtREDRkmHpLbflhLxGhVps4sVXhTAmUQbhCb8Y rwOzXshwBqcwb9tMP9P6VA7oRQQTFgJxCC9WA3QFNLTnRcNnTilPYXuyMlyBr2lUIP R6SYiw9XtbwASfQuVF82FSNl1tA8opRRVL0MPDnQNRPHfX+0FGlL24cn8OPJVNDd0Y o0PJTIt6LJopwAn/AyCW7kqTV0hyPZJT+lSOEHRxxT04YNlzSTJAoa947FwtNBP9Ka JcsvRq6k3j0qCkObFnzmHidLsmU02xSdsYZTuB+Ip7gpb880dOTVi81Jq7qcuigd6X 5wit3yryYiY3g== X-Pg-Spam-Score: -4.4 (----) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org This is a multi-part message in MIME format. --------------090503080603040605030407 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit AFAIK, you have to use stunnel to do it (which is not hard to setup, but it almost makes you wonder whether you should go to the trouble of using pgbouncer at all). I just went through this and I ended up just testing direct connections through the tunnel without pgbouncer in the middle. It worked for the most part. I had some unexplained issues with my app that I couldn't pinpoint so I stopped testing it for a while. (And my app already does connection pooling, so pgbouncer wasn't going to help that much in that regard.) On 4/10/2013 2:06 PM, Bhanu Murthy wrote: > Hi all, > Can someone please point me to detailed documentation on how to > secure/encrypt connections between PGBouncer and Postgresql database > (version 8.4.3)? > Thanks in advance! > Bhanu M. Gandikota > Cell: (415) 420-7740 --------------090503080603040605030407 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit AFAIK, you have to use stunnel to do it (which is not hard to setup, but it almost makes you wonder whether you should go to the trouble of using pgbouncer at all).

I just went through this and I ended up just testing direct connections through the tunnel without pgbouncer in the middle.  It worked for the most part.  I had some unexplained issues with my app that I couldn't pinpoint so I stopped testing it for a while.  (And my app already does connection pooling, so pgbouncer wasn't going to help that much in that regard.)


On 4/10/2013 2:06 PM, Bhanu Murthy wrote:
Hi all,
 
Can someone please point me to detailed documentation on how to secure/encrypt connections between PGBouncer and Postgresql database (version 8.4.3)? 
 
Thanks in advance!
 
Bhanu M. Gandikota
Cell: (415) 420-7740
 
--------------090503080603040605030407--