<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
	<channel>
		<title><![CDATA[Latest posts for the topic "Use internal IPs for PGPool and Streaming Replication"]]></title>
		<link>http://forums.enterprisedb.com/posts/list/21.page</link>
		<description><![CDATA[Latest messages posted in the topic "Use internal IPs for PGPool and Streaming Replication"]]></description>
		<generator>JForum - http://www.jforum.net</generator>
			<item>
				<title>Use internal IPs for PGPool and Streaming Replication</title>
				<description><![CDATA[ Looking at the Postgres and PGPool config files that get created when I spin up a new cluster I've found that all the hostname/ip address fields are populated with the servers' external IP addresses, instead of the internal IP addresses.  This causes all network traffic between database nodes to go out to the internet and back, instead of staying within the AWS network, which creates the following issues:<br /> <br /> Performance issues:<br /> -- Higher network latency for streaming replication, resulting in instances being slightly more out of sync than they could otherwise be.<br /> -- Higher network latency for all PGPool queries that don't go against the master DB (localhost), resulting in reduced perceived performance of the cluster.<br /> <br /> Security issues:<br /> -- All traffic coming from PGPool and streaming replication appears as if it is coming from somewhere on the internet, instead of from within the AWS security group, thus there is no way to lock those ports down.  I'd be much more comfortable knowing that those ports could only be hit from within the security groups I've given access to, than having the ports wide open to the internet and just trusting in my database user's password to secure my data.<br /> -- Since the traffic is going out to the internet and back it raises the possibility of someone with a network scanner capturing those packets and possibly compromising my data.<br /> <br /> Cost issues:<br /> -- Bandwidth usage between AWS EC2 instances is incurred when communicating over the external IP address.  It is free when using the internal IP addresses.<br /> <br /> So in summary, due to bad configurations generated by Cloud DB I'm going to have a slower cluster, that is less secure, and cost me more money.<br /> <br /> For more information on this topic you can read this page: <a class="snap_shots" href="http://aws.amazon.com/ec2/" target="_blank" rel="nofollow">http://aws.amazon.com/ec2/</a><br /> [quote]If you choose to communicate using your Public or Elastic IP address or Elastic Load Balancer inside of the Amazon EC2 network, you’ll pay Regional Data Transfer rates even if the instances are in the same Availability Zone. For data transfer within the same Availability Zone, you can easily avoid this charge (and get better network performance) by using your private IP whenever possible.[/quote]]]></description>
				<guid isPermaLink="true">http://forums.enterprisedb.com/posts/preList/3152/11755.page</guid>
				<link>http://forums.enterprisedb.com/posts/preList/3152/11755.page</link>
				<pubDate><![CDATA[Thu, 29 Mar 2012 15:19:43]]> GMT</pubDate>
				<author><![CDATA[ mbaird]]></author>
			</item>
			<item>
				<title>Re:Use internal IPs for PGPool and Streaming Replication</title>
				<description><![CDATA[ Thanks for your concerns and insights into this topic.  We are looking into the implications of using the internal IPs for intra-cluster communications across multiple availability zones within a region and any impact this may have on other cluster operations and communications.  We will respond back to you on this thread.]]></description>
				<guid isPermaLink="true">http://forums.enterprisedb.com/posts/preList/3152/11766.page</guid>
				<link>http://forums.enterprisedb.com/posts/preList/3152/11766.page</link>
				<pubDate><![CDATA[Fri, 30 Mar 2012 16:25:04]]> GMT</pubDate>
				<author><![CDATA[ Gary_C]]></author>
			</item>
			<item>
				<title>Re:Use internal IPs for PGPool and Streaming Replication</title>
				<description><![CDATA[ There is no issue with using the internal IP across AWS availability zones as long as it is within the same AWS region.<br /> <br /> Also, if you used the external DNS, instead of the external IP, it will resolve to the internal IP when used within AWS, and the external IP otherwise.]]></description>
				<guid isPermaLink="true">http://forums.enterprisedb.com/posts/preList/3152/11767.page</guid>
				<link>http://forums.enterprisedb.com/posts/preList/3152/11767.page</link>
				<pubDate><![CDATA[Fri, 30 Mar 2012 16:29:59]]> GMT</pubDate>
				<author><![CDATA[ mbaird]]></author>
			</item>
			<item>
				<title>Re:Use internal IPs for PGPool and Streaming Replication</title>
				<description><![CDATA[ This is an excellent point mbaird  put forward here..<br /> I am a bit surprised that this was not originally implemented knowing we have postgresql experts here..<br /> Can you please implement this pretty quick?<br /> <br /> Regards,<br /> Hans]]></description>
				<guid isPermaLink="true">http://forums.enterprisedb.com/posts/preList/3152/11771.page</guid>
				<link>http://forums.enterprisedb.com/posts/preList/3152/11771.page</link>
				<pubDate><![CDATA[Sat, 31 Mar 2012 01:02:15]]> GMT</pubDate>
				<author><![CDATA[ hansbak]]></author>
			</item>
			<item>
				<title>Re:Use internal IPs for PGPool and Streaming Replication</title>
				<description><![CDATA[ [quote]Also, if you used the external DNS, instead of the external IP, it will resolve to the internal IP when used within AWS, and the external IP otherwise.[/quote]<br /> <br /> Yes, that is our understanding also, but again, we need to test this to make sure we don't break anything else.  We are treating this seriously and will keep you posted.]]></description>
				<guid isPermaLink="true">http://forums.enterprisedb.com/posts/preList/3152/11779.page</guid>
				<link>http://forums.enterprisedb.com/posts/preList/3152/11779.page</link>
				<pubDate><![CDATA[Sun, 1 Apr 2012 10:10:30]]> GMT</pubDate>
				<author><![CDATA[ Gary_C]]></author>
			</item>
			<item>
				<title>Re:Use internal IPs for PGPool and Streaming Replication</title>
				<description><![CDATA[ Thanks for raising this issue. I have just deployed an update of the Cloud Database Console/Cluster Manager that will now use internal IP addresses on EC2 whenever possible.<br /> <br /> thanks,<br /> Hans]]></description>
				<guid isPermaLink="true">http://forums.enterprisedb.com/posts/preList/3152/11818.page</guid>
				<link>http://forums.enterprisedb.com/posts/preList/3152/11818.page</link>
				<pubDate><![CDATA[Wed, 4 Apr 2012 14:10:27]]> GMT</pubDate>
				<author><![CDATA[ hanshrasna]]></author>
			</item>
	</channel>
</rss>