Re: FW: Configuring Postgres to use unix sockets

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Douglas McNaught <doug(at)mcnaught(dot)org>
Cc: "John Zubac" <jzubac(at)internetsecure(dot)com>, pgsql-general(at)postgresql(dot)org
Subject: Re: FW: Configuring Postgres to use unix sockets
Date: 2005-09-09 14:53:23
Message-ID: 10592.1126277603@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Douglas McNaught <doug(at)mcnaught(dot)org> writes:
> You could also enforce use of the
> private network (in both cases) by use of firewall rules.

I think the real point here is that any additional security you gain
comes from having the physically separate wire. It's foolish to suppose
that using a nonstandard protocol over that wire is going to buy
anything. So there's no point in going through a lot of pushups to
substitute something else for TCP/IP.

regards, tom lane

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Richard Huxton 2005-09-09 15:00:54 Re: constraints on composite types
Previous Message Terry Lee Tucker 2005-09-09 14:49:59 Re: Route Miles