Download as PDF, PPTX
![© 2015 EnterpriseDB Corporation. All rights reserved. 13
Example
More Comprehensive Forensics with
Audit Log Tagging
$ psql –U app1 -d edb
edb=# alter session set edb_audit_tag=’UserName
FromApplication’;
ALTER SESSION
edb=# create table test (a number);
ERROR: relation “test” already exists
$ cat audit-2016-01-21_145111.xml
<event user=”app1" database="edb" remote_host="[local]”
session_id="56a06f4f.c624" process_id="50724"
time="2016-01-21 14:51:11 EST”
transaction_id="0" type="error" audit_tag=”UserName
FromApplication”>
<message>ERROR: relation “test” already exists</message>
</event>](https://image.slidesharecdn.com/expanding-160201185248/75/Expanding-with-EDB-Postgres-Advanced-Server-9-5-13-2048.jpg)
Uploaded byEDB
Expanding with EDB Postgres Advanced Server 9.5
The document outlines the features and enhancements of EDB Postgres Advanced Server 9.5, focusing on security, scalability, performance, and compatibility with Oracle. Key improvements include password profiles for enhanced security, advanced auditing capabilities, and tools for smoother database migrations. Additionally, EDB Postgres Enterprise Manager 6.0 is introduced with features like Nagios integration and improved dashboard visualization.
More Related Content
Similar to Expanding with EDB Postgres Advanced Server 9.5
Expanding with EDB Postgres Advanced Server 9.5
- 1. © 2015 EnterpriseDBCorporation. All rights reserved. 1 Expanding with EDB Postgres Advanced Server 9.5 For more information please visit www.enterprisedb.com or email sales@enterprisedb.com for subscription information.
- 2. © 2015 EnterpriseDBCorporation. All rights reserved. 2 • EDB Postgres Advanced Server Overview • Walkthrough New Features in EDB Postgres Advanced Server 9.5 • Highlights of New Features in EDB Postgres Enterprise Manager 6.0 Agenda
- 3. © 2015 EnterpriseDBCorporation. All rights reserved. 3 Continuously synchronized with PostgreSQL for a super-set of community PLUS enterprise features ADVANCED SERVER EDB POSTGRES
- 4. © 2015 EnterpriseDBCorporation. All rights reserved. 4 Security Tools Performance Compatibility ADVANCED SERVER EDB POSTGRES
- 5. © 2015 EnterpriseDBCorporation. All rights reserved. 5 Security • User account / password policy management • Enhanced Auditing • Row Level Security (VPD) • SQL Injection attack guard • Server-side code protection • Multiple US Gov’t certifications including EAL2 ADVANCED SERVER EDB POSTGRES
- 6. © 2015 EnterpriseDBCorporation. All rights reserved. 6 Bundled Tools • Oracle, SQL Server & PostgreSQL to Postgres Plus replication • Enterprise management, monitoring, and tuning • Multi-master replication • HA failover protection • Oracle, SQL Server & MySQL to Postgres Plus migration • Update monitoring ADVANCED SERVER EDB POSTGRES
- 7. © 2015 EnterpriseDBCorporation. All rights reserved. 7 Performance • Improved Scalability – better performance under high concurrency • Resource Manager – adjust CPU & I/O resources on mixed workloads • Faster Partitioning - 400x faster writes & 76x faster selects • SQL Profiler – fix slow workloads • Bulk Data Loader - 2x faster • Index Advisor - speeds up inquiries • DynaTune - memory upgrades • Dynamic runtime statistics - reveals SQL wait bottlenecks ADVANCED SERVER EDB POSTGRES
- 8. © 2015 EnterpriseDBCorporation. All rights reserved. 8 Database Compatibility for Oracle® • Faster, easier migrations • PL/SQL, OCI support • Oracle SQL extensions • User defined objects • Function packages • Database links • Oracle-like tools: EDB*Loader, EDB*Plus, EDB*Wrap ADVANCED SERVER EDB POSTGRES
- 9. © 2015 EnterpriseDBCorporation. All rights reserved. 9 PostgreSQL • Perform ‘UPSERT’ operations with INSERT…ON CONFLICT DO NOTHING/UPDATE syntax • Speed up queries on large tables with new Block Range Indexes (BRIN) • Easily re-sync database cluster machines with pg_rewind • Modify JSONB data with new operators and functions • Automate schema creation for Foreign Data Wrappers using IMPORT FOREIGN SCHEMA syntax Feature Highlights for Postgres Advanced 9.5 • Secure access to your database with password profiles • More comprehensive forensics with audit log tagging • Scale to more users with improvements to locking subsystems • Higher performance bulk loading with EDB Loader FREEZE keyword • Continued improvements around for database compatibility for Oracle (12th Generation) Postgres Advanced Server Focus on Security, Scalability, and Enterprise Readiness
- 10. © 2015 EnterpriseDBCorporation. All rights reserved. 10 Enable PCI DSS compliance and security conscious applications Secure Access to your Database with Password Profiles • Passwords profiles operate securely in the database. They allow you to: − Limit password re-use − Define rules for password complexity − Mark a password for expiration − Track failed login attempts − Lock an account for a specified period of time • Using profiles − DBA managed and assignable to Users, Roles, Groups − Explicit commands to Lock/Unlock/Expire a profile − Compatible with Oracle profiles
- 11. © 2015 EnterpriseDBCorporation. All rights reserved. 11 Sample Profiles Secure Access to your Database with Password Profiles • After 5 incorrect login attempts, lock account for 6 hours (1/4 of a day) − CREATE PROFILE acctg LIMIT FAILED_LOGIN_ATTEMPTS 5 PASSWORD_LOCK_TIME .25; • Change password every 90 days and provide a 3 day grace period before account is locked. − CREATE PROFILE sales LIMIT PASSWORD_LIFE_TIME 90 PASSWORD_GRACE_TIME 3; • Ensure complexity rules are followed when choosing a password − CREATE PROFILE partners LIMIT PASSWORD_VERIFY_FUNCTION partner_password_rules;
- 12. © 2015 EnterpriseDBCorporation. All rights reserved. 12 Incorporate Application & Middle Tier Information in Database Audit Logs More Comprehensive Forensics with Audit Log Tagging • EDB Postgres Advanced Server provides an audit log capability − Use edb_audit and related configuration parameters in postgresql.conf to enable. • The new edb_audit_tag feature provides a mechanism for applications to store additional information in the audit log
- 13. © 2015 EnterpriseDBCorporation. All rights reserved. 13 Example More Comprehensive Forensics with Audit Log Tagging $ psql –U app1 -d edb edb=# alter session set edb_audit_tag=’UserName FromApplication’; ALTER SESSION edb=# create table test (a number); ERROR: relation “test” already exists $ cat audit-2016-01-21_145111.xml <event user=”app1" database="edb" remote_host="[local]” session_id="56a06f4f.c624" process_id="50724" time="2016-01-21 14:51:11 EST” transaction_id="0" type="error" audit_tag=”UserName FromApplication”> <message>ERROR: relation “test” already exists</message> </event>
- 14. © 2015 EnterpriseDBCorporation. All rights reserved. 14 Write Workloads Where Data Fits In Shared Buffers Scale to More Users pgbench –M prepared (Read/Write workload) Median of 3 30-minute runs, scale_factor=300 (~4.5 gb workload), max_connections = 200, shared_buffers = 8gb 8 CPU / 64 Core / 128 Threads, 500 GB RAM 25% improvement at 48 concurrent connections (peak performance in 9.4) 115% improvement at 128 concurrent connections
- 15. © 2015 EnterpriseDBCorporation. All rights reserved. 15 Write Workloads Where Data Is Larger Than Shared Buffers Scale to More Users pgbench –M prepared (Read/Write workload) Median of 3 30-minute runs, scale_factor=1000 (~15 gb workload), max_connections = 200, shared_buffers = 8gb 8 CPU / 64 Core / 128 Threads, 500 GB RAM 10% improvement at 48 concurrent connections (peak performance in 9.4) 20% improvement at 80 concurrent connections (peak performance in 9.5)
- 16. © 2015 EnterpriseDBCorporation. All rights reserved. 16 Minimize Impact of Migrations Expanded Compatibility with Oracle • Profiles for Passwords • EDB*Loader: new FREEZE and ZONED options • Packages and Functions: − UTL_RAW: manipulation of raw data types − DBMS_SESSION: ability to enable and disable roles − UTL_HTTP: WRITE_LINE, WRITE_TEXT • Hierarchical Queries: new SYS_CONNECT_BY_PATH option • SELECT… FOR UPDATE WAIT n Syntax: − If an UPDATE, DELETE or SELECT FOR UPDATE from another session has already locked row, this specifies behavior of this session
- 17. © 2015 EnterpriseDBCorporation. All rights reserved. 17 EDB Postgres Enterprise Manager v6 MONITOR MANAGE TUNE Enhanced DBA Productivity 1) Integration with Nagios monitoring 2) Monitor and Drive EDB Postgres Failover Manager 3) Native Replication Setup, Config and Deployment 4) Audit Log Alerts 5) Improved At-A-Glance Dashboards 6) Custom Alerts GUI
- 18. © 2015 EnterpriseDBCorporation. All rights reserved. 18 • EDB Postgres Advanced Server 9.5 is available today! − Improvements in Security, Scalability / Performance, and Compatibility with Oracle − Password Profiles − Session Tag Auditing − Scale to More Users − Simplify Migration from Oracle • EDB Postgres Enterprise Manger 6.0 is available today! − Improved Visualization − Nagios Integration − Audit Log Alerts − Streaming Replication Wizard and EDB Failover Manager Integration Recap
- 19. © 2015 EnterpriseDBCorporation. All rights reserved. 19 • Download EDB Postgres Advanced Server 9.5 − http://www.enterprisedb.com/products-services-training/ products/postgres-plus-advanced-server/downloads • Download EDB Postgres Enterprise Manger 6.0 − http://www.enterprisedb.com/products/postgres-enterprise- manager • Subscription Plans − http://www.enterprisedb.com/products-services-training/ subscriptions • Stay informed through EDB’s blog − http://www.enterprisedb.com/postgres-plus-edb-blog • Follow us on Twitter! @EnterpriseDB • Questions? Email sales@enterprisedb.com Resources
- 20. © 2015 EnterpriseDBCorporation. All rights reserved. 20