Search Postgresql Archives

Re: On "multi-master"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Andrew Sullivan wrote:

On Fri, Oct 14, 2005 at 11:54:19PM +0900, Tatsuo Ishii wrote:
Enforcement? There would be plenty of ways to achieve that. For
example, you could set pg_hba.conf so that on ly the host where pgpool
is running on could connect to the host where postmaster is running
on.

That just changes the problem to someone logging in from that host. (This isn't a theoretical problem, by the way; it's an objection that
I've heard from people.)

Repeat after me... Data integrity, like security, is a process, not a product.

Your objection is not an insoluble one. But it involves care in designing the system.

If your DBA logs in to the actual DB host and issues a command, then that is the DBA's fault, and your DBA should know better. If he/she doesn't you have bigger problems than replication. A more valid concern is the question of not knowing that the DBA logged in from the wrong system to the wrong system. This can be greately reduced by intelligently engineering the network, and setting things up so that the system automatically logs in with a read-only account unless a username is specified.... I think that this risk can be reduced to something acceptable even in the world of high availability systems, but you are right, it is not so done out of the box.

I think that this objection comes from the difference between FOSS where you have projects as toolkits for solutions and COTS Software where the packages are supposed to be complete solutions.


Right. It's your freedom that you do not use pgpool until you think
it's solid enough.

And my managers approve it :)  I should note, for the record, that
I'm extremely impressed with pgpool.  I just think we have some room
to grow before we can say we have something to really compete with
the commercial multimaster systems.

Now, I never said it was a direct competitor by itself with commerical multimaster systems. I do think that with appropriate consulting services, network engineering, etc. services it could be with a little work, if these are the only objections you have :-)


Best Wishes,
Chris Travers
Metatron Technology Consulting
begin:vcard
fn:Chris Travers
n:Travers;Chris
email;internet:chris@xxxxxxxxxxxxxxxx
x-mozilla-html:FALSE
version:2.1
end:vcard

---------------------------(end of broadcast)---------------------------
TIP 1: if posting/reading through Usenet, please send an appropriate
       subscribe-nomail command to majordomo@xxxxxxxxxxxxxx so that your
       message can get through to the mailing list cleanly

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux