Home > mailing lists

Thread: Protecting sensitive data over NetApp

Protecting sensitive data over NetApp

From

"Liran's Lab"

Date:

01 May 2018, 13:33:04

PostgreSQL 9.4

Current setup is one standalone server with disk mount on NetApp.

Data should be protected from access by other sources.

For example - if for some reason one of the Netapp admins mount the Postgres LUN to another server.

One option is to stored data locally - but then it is limited by capacity (and costly)

The second option is to encrypt the data.

Since 3rd party is generating the data we cant touch the schema and add crypt function on the sensitive fields - tables are also too dynamic.

What would be the best (easy to implement, least affecting on performance ) option to implement from the suggested options:

https://www.postgresql.org/docs/8.1/static/encryption-options.html

Would you recommend other options like:

safenet: https://safenet.gemalto.com/data-encryption/postgresql-database-encryption/

cybertec: https://www.cybertec-postgresql.com/en/products/postgresql-instance-level-encryption/

After reading: https://www.enterprisedb.com/blog/postgres-and-transparent-data-encryption-tde

I tend to think that the File system-level encryption might be the best solution.

Thanks,

Liran.

Re: Protecting sensitive data over NetApp

From

Craig Ringer

Date:

01 May 2018, 13:38:21

This doesn't seem to be commentary on the documentation its self.

Please post to pgsql-general for advice and discussion about
PostgreSQL, or use one of the Stack Overflow sites or another
appropriate forum.