Reg: Filesystem level encryption support for postgreSQL

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Reg: Filesystem level encryption support for postgreSQL

pradeep pandey
Hi folks, 

i am new to postgreSQL and i need to implement Filesystem level encryption  and we use EKM for encryption keys
i am seeking you folks help to know 2 things here 
  • if i implment EKM which is third party encryption is that supported by postgreSQL 
  • what is the best practice and supported method of implmenting the filesytem level of encyption/protection in postgreSQL 
  • i searched google but did not find much info 
  • any pointer or link to read would alos help 
Thanks in advance folks 
Pradeep
 

Reply | Threaded
Open this post in threaded view
|

Re: Reg: Filesystem level encryption support for postgreSQL

pradeep pandey
Thanks but i am looking for solution which is more specific to postgreSQL in line with TDE and HSM 


From: jwiencek3 <[hidden email]>
Sent: Thursday, September 12, 2019 9:42 PM
To: pradeep pandey <[hidden email]>; [hidden email] <[hidden email]>
Subject: Re: Reg: Filesystem level encryption support for postgreSQL
 
I'm working on an environment that is using Hytrust.   Other than taking a long time encrypt the disk there have been no issues at all.

FYI encryption of a 1Tb mount takes approx. 12 hours.  We had to decrypt at one point and that effort was about the same as an encrypt. 

Storage admins owned this not the DBA.


Sent via the Samsung Galaxy S9+, an AT&T 5G Evolution capable smartphone

-------- Original message --------
From: pradeep pandey <[hidden email]>
Date: 9/12/19 3:59 PM (GMT-06:00)
Subject: Reg: Filesystem level encryption support for postgreSQL

Hi folks, 

i am new to postgreSQL and i need to implement Filesystem level encryption  and we use EKM for encryption keys
i am seeking you folks help to know 2 things here 
  • if i implment EKM which is third party encryption is that supported by postgreSQL 
  • what is the best practice and supported method of implmenting the filesytem level of encyption/protection in postgreSQL 
  • i searched google but did not find much info 
  • any pointer or link to read would alos help 
Thanks in advance folks 
Pradeep
 

Reply | Threaded
Open this post in threaded view
|

Re: Reg: Filesystem level encryption support for postgreSQL

Ron-2
But you said "i need to implement Filesystem level encryption".  That's not specific to PostgreSQL.

On 9/12/19 4:57 PM, pradeep pandey wrote:
Thanks but i am looking for solution which is more specific to postgreSQL in line with TDE and HSM 


From: jwiencek3 [hidden email]
Sent: Thursday, September 12, 2019 9:42 PM
To: pradeep pandey [hidden email]; [hidden email] [hidden email]
Subject: Re: Reg: Filesystem level encryption support for postgreSQL
 
I'm working on an environment that is using Hytrust.   Other than taking a long time encrypt the disk there have been no issues at all.

FYI encryption of a 1Tb mount takes approx. 12 hours.  We had to decrypt at one point and that effort was about the same as an encrypt. 

Storage admins owned this not the DBA.


Sent via the Samsung Galaxy S9+, an AT&T 5G Evolution capable smartphone

-------- Original message --------
From: pradeep pandey [hidden email]
Date: 9/12/19 3:59 PM (GMT-06:00)
Subject: Reg: Filesystem level encryption support for postgreSQL

Hi folks, 

i am new to postgreSQL and i need to implement Filesystem level encryption  and we use EKM for encryption keys
i am seeking you folks help to know 2 things here 
  • if i implment EKM which is third party encryption is that supported by postgreSQL 
  • what is the best practice and supported method of implmenting the filesytem level of encyption/protection in postgreSQL 
  • i searched google but did not find much info 
  • any pointer or link to read would alos help 
Thanks in advance folks 
Pradeep
 


--
Angular momentum makes the world go 'round.
Reply | Threaded
Open this post in threaded view
|

Re: Reg: Filesystem level encryption support for postgreSQL

Arni Kromić
Indeed. When I read the question I also thought of something like VeraCrypt (ex TrueCrypt). Any solution specific for postgres would NOT be at "filesystem level".
Regards,
Arni
On 13/09/2019 00.22, Ron wrote:
But you said "i need to implement Filesystem level encryption".  That's not specific to PostgreSQL.

On 9/12/19 4:57 PM, pradeep pandey wrote:
Thanks but i am looking for solution which is more specific to postgreSQL in line with TDE and HSM 


From: jwiencek3 [hidden email]
Sent: Thursday, September 12, 2019 9:42 PM
To: pradeep pandey [hidden email]; [hidden email] [hidden email]
Subject: Re: Reg: Filesystem level encryption support for postgreSQL
 
I'm working on an environment that is using Hytrust.   Other than taking a long time encrypt the disk there have been no issues at all.

FYI encryption of a 1Tb mount takes approx. 12 hours.  We had to decrypt at one point and that effort was about the same as an encrypt. 

Storage admins owned this not the DBA.


Sent via the Samsung Galaxy S9+, an AT&T 5G Evolution capable smartphone

-------- Original message --------
From: pradeep pandey [hidden email]
Date: 9/12/19 3:59 PM (GMT-06:00)
Subject: Reg: Filesystem level encryption support for postgreSQL

Hi folks, 

i am new to postgreSQL and i need to implement Filesystem level encryption  and we use EKM for encryption keys
i am seeking you folks help to know 2 things here 
  • if i implment EKM which is third party encryption is that supported by postgreSQL 
  • what is the best practice and supported method of implmenting the filesytem level of encyption/protection in postgreSQL 
  • i searched google but did not find much info 
  • any pointer or link to read would alos help 
Thanks in advance folks 
Pradeep
 


--
Angular momentum makes the world go 'round.