Re: Reg: Filesystem level encryption support for postgreSQL

Arni <Arni.Kromic@xxxxxxxxxxx> · Fri, 13 Sep 2019 10:31:22 +0200



    Indeed. When I read the question I also thought of something like
    VeraCrypt (ex TrueCrypt). Any solution specific for postgres would
    NOT be at "filesystem level".

    Regards,
Arni

    On 13/09/2019 00.22, Ron wrote:

    
      But you said "i need to implement Filesystem level
      encryption".  That's not specific to PostgreSQL.

      
      On 9/12/19 4:57 PM, pradeep pandey
        wrote:

      
         Thanks but i am
          looking for solution which is more specific to postgreSQL in
          line with TDE and HSM 
        
           
          From:
              jwiencek3 <jwiencek3@xxxxxxxxxxx>

              Sent: Thursday, September 12, 2019 9:42 PM

              To: pradeep pandey <pandeyp@xxxxxxxxxxx>;
              pgsql-admin@xxxxxxxxxxxxxxxxxxxx
              <pgsql-admin@xxxxxxxxxxxxxxxxxxxx>

              Subject: Re: Reg: Filesystem level encryption
              support for postgreSQL
             
          
            I'm working on an environment that is using
              Hytrust.   Other than taking a long time encrypt the disk
              there have been no issues at all.
            

            FYI encryption of a 1Tb mount takes approx.
              12 hours.  We had to decrypt at one point and that effort
              was about the same as an encrypt. 
            

            Storage admins owned this not the DBA.
            

              Sent
                via the Samsung Galaxy S9+, an AT&T 5G Evolution
                capable smartphone
            
            
              -------- Original message --------
              From: pradeep pandey <pandeyp@xxxxxxxxxxx>
              
              Date: 9/12/19 3:59 PM (GMT-06:00) 
              To: pgsql-admin@xxxxxxxxxxxxxxxxxxxx
              
              Subject: Reg: Filesystem level encryption support for
                postgreSQL 
              

             Hi folks, 
             

             i am new to postgreSQL
              and i need to implement Filesystem level encryption  and
              we use EKM for encryption keys
             i am seeking you folks
              help to know 2 things here 
            
              
                if i implment EKM which is third party encryption is
                  that supported by postgreSQL 
                what is the best practice and supported method of
                  implmenting the filesytem level of
                  encyption/protection in postgreSQL 

                
                i searched google but did not find much info 

                
                any pointer or link to read would alos help 
              
              Thanks in advance folks 
              Pradeep
               
              
      -- 

        Angular momentum makes the world go 'round.