Postgres FM cover image

Postgres FM

Connections

Sep 1, 2023
Topics discussed include different connection options, security measures and performance tradeoffs, protecting the database with encryption, benchmarking Unix domain sockets vs TCP/IP connections for performance, the implications of object ownership on connections, and connecting to a Postgres database without a password.
28:20

Podcast summary created with Snipd AI

Quick takeaways

  • Opening a port to the world without encryption is a serious mistake, and it is best to limit access to trusted networks.
  • Understanding Postgres configuration files, such as pg_hba.conf, is important for secure and efficient connections, and proper user management improves security and traceability.

Deep dives

Understanding the security risks of open ports

The podcast discusses the risks of having open ports to the world. While it may seem convenient and simple, allowing public access to a freshly installed Postgres database can lead to security vulnerabilities. The podcast emphasizes that security by obscurity is not a reliable method of protection. Even if you use a randomly generated username and a strong password, the risk of leaked credentials and brute force attacks remains. Encryption is crucial, and opening a port to the world without encryption is a serious mistake. The best practice is to avoid opening the port to public IP addresses and instead limit access to trusted networks.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode