Choosing your architecture

Always On architectures reflect EDB’s Trusted Postgres architectures that encapsulate practices and help you to achieve the highest possible service availability in multiple configurations. These configurations range from single-location architectures to complex distributed systems that protect from hardware failures and data center failures. The architectures leverage EDB Postgres Distributed’s multi-master capability and its ability to achieve 99.999% availability, even during maintenance operations.

You can use EDB Postgres Distributed for architectures beyond the examples described here. Use-case-specific variations have been successfully deployed in production. However, these variations must undergo rigorous architecture review first. Also, EDB’s standard deployment tool for Always On architectures, TPAExec, must be enabled to support the variations before they can be supported in production environments.

Standard EDB Always On architectures

EDB has identified four standard Always On architectures:

and a local backup

location with an offsite backup

location with a witness

plus additional redundant hardware in a hot standby mode)

Each architecture can provide zero Recovery Point Objective (RPO), as data can be streamed synchronously to at least one local master, thus guaranteeing zero data loss in case of local hardware failure. However, synchronous replication is highly discouraged for Bronze architectures due to the extended RPO on failure of either data node.

Increasing the availability guarantee drives additional cost for hardware and licenses, networking requirements, and operational complexity. Carefully consider your availability and compliance requirements before choosing an architecture.

Architecture details

EDB Postgres Distributed uses a show-raft -based consensus architecture. While regular database operations (insert, select, delete) don’t require cluster-wide consensus, EDB Postgres Distributed benefits from an odd number of nodes to make decisions that require consensus, such as generating new global sequences, or distributed DDL operations. Even the simpler architectures always have three nodes within a location, even if not all of them are storing data. Always On Gold and Platinum, which use two locations, introduce a fifth node as a witness node to support the RAFT requirements.

Applications connect to the standard Always On architectures by way of multi-host connection strings, where each HARP-proxy server is a distinct entry in the multi-host connection string. Other connection mechanisms have been successfully deployed in production, but they’re not part of the standard Always On architectures.

Choosing your architecture

All architectures provide the following:

  • Hardware failure protection

  • Zero downtime upgrades

  • Support for availability zones in public/private cloud

Use these criteria to help you to select the appropriate Always On architecture.

Bronze

Silver

Gold

Platinum

Minimum Locations Needed

1

2

3

2

Location failure protection

No - unless offsite backup

Yes - Recovery from backup

Yes - instant failover to fully functional site

Yes - instant failover to fully functional site

Failover to DR or full DC

NA (DR only if offsite backup)

DR using offsite backup

Full DC

Full DC

Fast local restoration of high availability after device failure

No; time to restore HA: (1) VM prov + (2) approx 60 min/500GB

Yes; three local data nodes allow to maintain HA after device failure

No; time to restore HA: (1) VM prov + (2) approx 60 min/500GB

Yes; logical standbys can quickly be promoted to master data nodes

Cross location network traffic

None (unless offsite backup then backup traffic only)

Backup traffic only

Full replication traffic

Full replication traffic

License cost

2 data nodes

3 data nodes

4 data nodes

4 data nodes <br/>2 logical standbys