auxiliary processes in pg_stat_ssl

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
8 messages Options
Reply | Threaded
Open this post in threaded view
|

auxiliary processes in pg_stat_ssl

Alvaro Herrera-9
I just noticed that we list auxiliary processes in pg_stat_ssl:

55432 13devel 28627=# select * from pg_stat_ssl ;
  pid  │ ssl │ version │         cipher         │ bits │ compression │ client_dn │ client_serial │ issuer_dn
───────┼─────┼─────────┼────────────────────────┼──────┼─────────────┼───────────┼───────────────┼───────────
 28618 │ f   │         │                        │      │             │           │               │
 28620 │ f   │         │                        │      │             │           │               │
 28627 │ t   │ TLSv1.3 │ TLS_AES_256_GCM_SHA384 │  256 │ f           │           │               │
 28616 │ f   │         │                        │      │             │           │               │
 28615 │ f   │         │                        │      │             │           │               │
 28617 │ f   │         │                        │      │             │           │               │
(6 filas)

55432 13devel 28627=# select pid, backend_type from pg_stat_activity ;
  pid  │         backend_type        
───────┼──────────────────────────────
 28618 │ autovacuum launcher
 28620 │ logical replication launcher
 28627 │ client backend
 28616 │ background writer
 28615 │ checkpointer
 28617 │ walwriter
(6 filas)

But this seems pointless.  Should we not hide those?  Seems this only
happened as an unintended side-effect of fc70a4b0df38.  It appears to me
that we should redefine that view to restrict backend_type that's
'client backend' (maybe include 'wal receiver'/'wal sender' also, not
sure.)

--
Álvaro Herrera                                http://www.twitter.com/alvherre


Reply | Threaded
Open this post in threaded view
|

Re: auxiliary processes in pg_stat_ssl

Alvaro Herrera-9
On 2019-Sep-04, Alvaro Herrera wrote:

> I just noticed that we list auxiliary processes in pg_stat_ssl:
[...]
> But this seems pointless.  Should we not hide those?  Seems this only
> happened as an unintended side-effect of fc70a4b0df38.  It appears to me
> that we should redefine that view to restrict backend_type that's
> 'client backend' (maybe include 'wal receiver'/'wal sender' also, not
> sure.)

[crickets]

Robert, Kuntal, any opinion on this?

--
Álvaro Herrera                https://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services


Reply | Threaded
Open this post in threaded view
|

Re: auxiliary processes in pg_stat_ssl

Robert Haas
On Mon, Nov 4, 2019 at 8:26 AM Alvaro Herrera <[hidden email]> wrote:

> On 2019-Sep-04, Alvaro Herrera wrote:
> > I just noticed that we list auxiliary processes in pg_stat_ssl:
> [...]
> > But this seems pointless.  Should we not hide those?  Seems this only
> > happened as an unintended side-effect of fc70a4b0df38.  It appears to me
> > that we should redefine that view to restrict backend_type that's
> > 'client backend' (maybe include 'wal receiver'/'wal sender' also, not
> > sure.)
>
> [crickets]
>
> Robert, Kuntal, any opinion on this?

I think if I were doing something about it, I'd probably try to filter
on a field that directly represents whether there is a connection,
rather than checking the backend type. That way, if the list of
backend types that have client connections changes later, there's
nothing to update. Like "WHERE client_port IS NOT NULL," or something
of that sort.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company


Reply | Threaded
Open this post in threaded view
|

Re: auxiliary processes in pg_stat_ssl

Euler Taveira
In reply to this post by Alvaro Herrera-9
Em qua., 4 de set. de 2019 às 12:15, Alvaro Herrera
<[hidden email]> escreveu:

>
> I just noticed that we list auxiliary processes in pg_stat_ssl:
>
> 55432 13devel 28627=# select * from pg_stat_ssl ;
>   pid  │ ssl │ version │         cipher         │ bits │ compression │ client_dn │ client_serial │ issuer_dn
> ───────┼─────┼─────────┼────────────────────────┼──────┼─────────────┼───────────┼───────────────┼───────────
>  28618 │ f   │         │                        │      │             │           │               │
>  28620 │ f   │         │                        │      │             │           │               │
>  28627 │ t   │ TLSv1.3 │ TLS_AES_256_GCM_SHA384 │  256 │ f           │           │               │
>  28616 │ f   │         │                        │      │             │           │               │
>  28615 │ f   │         │                        │      │             │           │               │
>  28617 │ f   │         │                        │      │             │           │               │
> (6 filas)
>
> 55432 13devel 28627=# select pid, backend_type from pg_stat_activity ;
>   pid  │         backend_type
> ───────┼──────────────────────────────
>  28618 │ autovacuum launcher
>  28620 │ logical replication launcher
>  28627 │ client backend
>  28616 │ background writer
>  28615 │ checkpointer
>  28617 │ walwriter
> (6 filas)
>
> But this seems pointless.  Should we not hide those?  Seems this only
> happened as an unintended side-effect of fc70a4b0df38.  It appears to me
> that we should redefine that view to restrict backend_type that's
> 'client backend' (maybe include 'wal receiver'/'wal sender' also, not
> sure.)
>
Yep, it is pointless. BackendType that open connections to server are:
autovacuum worker, client backend, background worker, wal sender. I
also notice that pg_stat_gssapi is in the same boat as pg_stat_ssl and
we should constraint the rows to backend types that open connections.
I'm attaching a patch to list only connections in those system views.



--
   Euler Taveira                                   Timbira -
http://www.timbira.com.br/
   PostgreSQL: Consultoria, Desenvolvimento, Suporte 24x7 e Treinamento

0001-Show-only-rows-that-open-connections-in-some-system-.patch (5K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: auxiliary processes in pg_stat_ssl

Stephen Frost
In reply to this post by Robert Haas
Greetings,

* Robert Haas ([hidden email]) wrote:

> On Mon, Nov 4, 2019 at 8:26 AM Alvaro Herrera <[hidden email]> wrote:
> > On 2019-Sep-04, Alvaro Herrera wrote:
> > > I just noticed that we list auxiliary processes in pg_stat_ssl:
> > [...]
> > > But this seems pointless.  Should we not hide those?  Seems this only
> > > happened as an unintended side-effect of fc70a4b0df38.  It appears to me
> > > that we should redefine that view to restrict backend_type that's
> > > 'client backend' (maybe include 'wal receiver'/'wal sender' also, not
> > > sure.)
> >
> > [crickets]
> >
> > Robert, Kuntal, any opinion on this?
>
> I think if I were doing something about it, I'd probably try to filter
> on a field that directly represents whether there is a connection,
> rather than checking the backend type. That way, if the list of
> backend types that have client connections changes later, there's
> nothing to update. Like "WHERE client_port IS NOT NULL," or something
> of that sort.
Yeah, using a "this has a connection" would be better and, as also noted
on this thread, pg_stat_gssapi should get similar treatment.

Based on what we claim in our docs, it does look like 'client_port IS
NOT NULL' should work.  I do think we might want to update the docs to
make it a bit more explicit, what we say now is:

TCP port number that the client is using for communication with this
backend, or -1 if a Unix socket is used

We don't explain there that NULL means the backend doesn't have an
external connection even though plenty of those entries show up in every
instance of PG.  Perhaps we should add this:

If this field is null, it indicates that this is an internal process
such as autovacuum.

Which is what we say for 'client_addr'.

I have to admit that while it's handy that we just shove '-1' into
client_port when it's a unix socket, it's kind of ugly from a data
perspective- in a green field it'd probably be better to have a
"connection type" field that then indicates which other fields are valid
instead of having a special constant, but that ship sailed long ago and
it's not like we have a lot of people complaining about it, so I suppose
just using it here as suggested is fine.

Thanks,

Stephen

signature.asc (836 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: auxiliary processes in pg_stat_ssl

Kuntal Ghosh
In reply to this post by Euler Taveira
On Mon, Nov 4, 2019 at 9:09 PM Euler Taveira <[hidden email]> wrote:

> >
> > But this seems pointless.  Should we not hide those?  Seems this only
> > happened as an unintended side-effect of fc70a4b0df38.  It appears to me
> > that we should redefine that view to restrict backend_type that's
> > 'client backend' (maybe include 'wal receiver'/'wal sender' also, not
> > sure.)
> >
> Yep, it is pointless. BackendType that open connections to server are:
> autovacuum worker, client backend, background worker, wal sender. I
> also notice that pg_stat_gssapi is in the same boat as pg_stat_ssl and
> we should constraint the rows to backend types that open connections.
> I'm attaching a patch to list only connections in those system views.
>
Yeah, We should hide those. As Robert mentioned, I think checking
whether 'client_port IS NOT NULL' is a better approach than checking
the backend_type. The patch looks good to me.



--
Thanks & Regards,
Kuntal Ghosh
EnterpriseDB: http://www.enterprisedb.com


Reply | Threaded
Open this post in threaded view
|

Re: auxiliary processes in pg_stat_ssl

Alvaro Herrera-9
In reply to this post by Euler Taveira
On 2019-Nov-04, Euler Taveira wrote:

> Yep, it is pointless. BackendType that open connections to server are:
> autovacuum worker, client backend, background worker, wal sender. I
> also notice that pg_stat_gssapi is in the same boat as pg_stat_ssl and
> we should constraint the rows to backend types that open connections.
> I'm attaching a patch to list only connections in those system views.

Thanks!  I pushed this.

--
Álvaro Herrera                https://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services


Reply | Threaded
Open this post in threaded view
|

Re: auxiliary processes in pg_stat_ssl

Alvaro Herrera-9
In reply to this post by Stephen Frost
On 2019-Nov-04, Stephen Frost wrote:

> Based on what we claim in our docs, it does look like 'client_port IS
> NOT NULL' should work.  I do think we might want to update the docs to
> make it a bit more explicit, what we say now is:
>
> TCP port number that the client is using for communication with this
> backend, or -1 if a Unix socket is used
>
> We don't explain there that NULL means the backend doesn't have an
> external connection even though plenty of those entries show up in every
> instance of PG.  Perhaps we should add this:
>
> If this field is null, it indicates that this is an internal process
> such as autovacuum.
>
> Which is what we say for 'client_addr'.

Seems sensible.  Done.  Thanks

--
Álvaro Herrera                https://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services