Ensuring security

Securing an EDB Postgres Distributed (PGD) cluster involves configuring authentication, SSL/TLS, and Connection Manager endpoints, and encrypting sensitive columns with pgcrypto or DBMS_CRYPTO.

• Setting up access controls
  • Securing inter-node connections
    • Setting up an authentication method
    • Verifying the configuration
  • Securing client application connections
    • Securing client to Connection Manager connections
    • Securing Connection Manager to node connections
• Encrypting columns in PGD
  • Comparing encryption methods
  • Planning for encryption in a distributed cluster
    • Handling indexing and search on encrypted columns
    • Accounting for CPU overhead
    • Planning for storage and WAL growth
  • Encrypting columns using pgcrypto
  • Encrypting columns using DBMS_CRYPTO
  • Managing encryption keys securely