Postgres Pro
Downloads
Home   >   mailing lists

Protecting sensitive data over NetApp - Mailing list pgsql-hackers

From Liran's Lab
Subject Protecting sensitive data over NetApp
Date
Msg-id CACoc41WYQK4S4ODZ+617E520zB_8jSUi8+UqqS3fpB5UwFtmkg@mail.gmail.com
Whole thread Raw
Responses Re: Protecting sensitive data over NetApp  (Craig Ringer <craig@2ndquadrant.com>)
List pgsql-hackers
Tree view
PostgreSQL 9.4
Current setup is one standalone server with disk mount on NetApp.
Data should be protected from access by other sources.
For example - if for some reason one of the Netapp admins mount the Postgres LUN to another server.

One option is to stored data locally - but then it is limited by capacity (and costly)
The second option is to encrypt the data.

Since 3rd party is generating the data we cant touch the schema and add crypt function on the sensitive fields - tables are also too dynamic.
What would be the best (easy to implement, least affecting on performance ) option to implement from the suggested options:

Would you recommend other options like: 

I tend to think that the File system-level encryption might be the best solution.

Thanks,
Liran.

pgsql-hackers by date:

Previous
From: Amit Langote
Date:
Subject: stats_ext test fails with -DCATCACHE_FORCE_RELEASE
Next
From: Craig Ringer
Date:
Subject: Re: Protecting sensitive data over NetApp