On Oct 9, 2015, at 10:48 AM, dinesh bhandary <dbhandary@xxxxxxxxx> wrote: > > I am trying to setup streaming rep between master ( which is in PCI tier1 zone) to slave ( PCI tier 2 zone). However, I am told that PCI tier1 can only initiate connection to lower security zone, in our case slave environment ( PCI tier 2). However, for streaming rep to work, slave needs to connect to Master. Does this violate PCI requirement. Anyone has experience setting up master-salve in PCI compliance environment? I have a simliar situation in which I do not want anything in my replica's zone to be able to initiate connections into the data center where the primary is. I have the master set up an SSH reverse tunnel to the slave, and then the slave connects to that tunnel end locally. -- Scott Ribe scott_ribe@xxxxxxxxxxxxxxxx http://www.elevated-dev.com/ https://www.linkedin.com/in/scottribe/ (303) 722-0567 voice -- Sent via pgsql-admin mailing list (pgsql-admin@xxxxxxxxxxxxxx) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin
