Re: Question: Multiple pg clusters on one server can be reached with the standard port. - Mailing list pgsql-general

From Ron
Subject Re: Question: Multiple pg clusters on one server can be reached with the standard port.
Date
Msg-id 0f467ff1-8cdb-2460-75d6-0e0e4497890f@gmail.com
Whole thread Raw
In response to Re: Question: Multiple pg clusters on one server can be reached with the standard port.  ("Peter J. Holzer" <hjp-pgsql@hjp.at>)
Responses Re: Question: Multiple pg clusters on one server can be reached with the standard port.
List pgsql-general
On 6/19/23 05:33, Peter J. Holzer wrote:
[snip]
> You cant setup firewall rules basedon dns names. firewall rules are based on
>> ip adresses and dns resolution happens on rule creation.
>> I dont have an example for nginx. As I remember nginx resolves dns names
>> only for variables. So setup a variable with your hostname and use this
>> variable in your server definition.
> As Francisco already pointed out, this can't work with nginx either. The
> client resolves the alias and the TCP packets only contain the IP
> address, not the alias which was used to get that address. So nginx
> simply doesn't have that information and therefore can't act on it.
>
> For HTTP this works because the HTTP protocol contains a Host field
> which the client fills with the name it used. But the Postgres protocol
> has no such information (and in any case nginx probably doesn't
> understand that protocol anyway).
>
> So (again, as Francisco already wrote) the best way is probably to write
> a simple proxy which uses the database (not DNS) name for routing. I
> seem to remember that nginx has a plugin architecture for protocols so
> it might make sense to write that as an nginx plugin instead of a
> standalone server, but that's really a judgement call the programmer has
> to make. Another possibility would of course be to extend pgbouncer to
> do what the OP needs.

How would this work with JDBC clients?


-- 
Born in Arizona, moved to Babylonia.



pgsql-general by date:

Previous
From: "Brainmue"
Date:
Subject: Re: Question: Multiple pg clusters on one server can be reached with the standard port.
Next
From: Sebastien Flaesch
Date:
Subject: OpenSSL version 3