CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.
Optimizing
Performance and
Security with
Platform Native
Packaging
Devrim Gündüz, Principal Systems Engineer
Bruce Momjian, Postgres Evangelist
Marc Linster, SVP Product Development and
Support
1
Welcome – Housekeeping
Items
• Slides and recording will be available in next 48 hours
• Submit questions via GotoWebinar – will be answering at end
• We will be sharing info about EDB and Postgres later
3
Webinar Series
4
Feb 19 2020 Conquering Data Migration from Oracle to Postgres
March 4 2020 Using Terraform to deploy highly available Postgres
March 18 2020 How to use postgresql.conf
April 1 2020
Optimizing Performance and Security with Platform Native
Packaging
April 15 2020 Window Functions in Postgres
April 29 2020 My favorite Postgres books
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.5
INTRODUCTION
● Using Red Hat (and then Fedora) since 1996.
● Using PostgreSQL since 1998.
● Started building RPMs in 2002, took over the project in 2004.
● Planet PostgreSQL: 2004 → https://planet.PostgreSQL.org
● Responsible for PostgreSQL YUM and ZYPP repositories.
● Working at EnterpriseDB since 2011
● Designed EDB RPM and Debian/Ubuntu repositories
● PostgreSQL Major Contributor
● Living in London, UK.
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.6
AGENDA
● Life before native packaging
● What is “native packaging?”
● Benefits of native packaging
● EDB Postgres and community PostgreSQL native package repositories
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.7
Life before native packaging
Compiling from source code, and installers
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.8
LIFE BEFORE NATIVE PACKAGING
● Compiling from source
● Security issues: “Compilers”
● Maintenance issues
● 1-click installers
● Security issues: Common libraries for all platforms
● The lowest common denominator
● Performance issues
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.9
What is native packaging?
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.10
NATIVE PACKAGING
● Bundling binaries, libraries, documentation, etc. for easy installation
● “Precompiled”
● Built for that operating system
● Easily delivered software
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.11
Benefits of native packaging
Maintenance
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.12
BENEFITS OF NATIVE PACKAGING:
MAINTENANCE
● Uses the OS libraries
− No separate update requirements
● Easily compile programs against EPAS
− Better linking with libpq
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.13
Benefits of native packaging
Integration
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.14
BENEFITS OF NATIVE PACKAGING:
INTEGRATION
● Uses OS package management tools
● One monitoring platform for all packages
● Integration with Puppet, Chef, Satellite, Ansible, etc.
● Create feasible SELinux policies
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.15
Benefits of native packaging
Ease of use
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.16
BENEFITS OF NATIVE PACKAGING: EASE
OF UPDATE
● Use the OS package manager to update EPAS:
● dnf/yum/apt/zypper ...
● Easier than ever!
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.17
Benefits of native packaging
Performance
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.18
BENEFITS OF NATIVE PACKAGING:
PERFORMANCE
● OS-supplied libc
● OS-supplied compiler
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.19
Benefits of native packaging
Security
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.20
BENEFITS OF NATIVE PACKAGING:
SECURITY
● An important item
● Really secure?
● What about 3rd party repositories?
● Applying patches
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.21
BENEFITS OF NATIVE PACKAGING:
SECURITY
● “Source RPMs”
● One can easily rebuild binary RPMs from SRPM, and
verify
● Ease of customization
● Signing of the packages
● No malicious code!
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.22
EnterpriseDB Native Package repos
YUM/ZYPP/DNF
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020 All rights reserved.23
EDB POSTGRES REPOS
Available via EDB portal:
● Since 2012
● Started with RHEL/CentOS RPMs
● https://yum.enterprisedb.com
● SLES 12 RPMS
● https://zypp.enterprisedb.com
● Debian/Ubuntu packages
● https://apt.enterprisedb.com”
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.24
Community native package repos
YUM/ZYPP/DNF
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.25
COMMUNITY POSTGRESQL NATIVE
PACKAGE REPOSITORIES
● RHEL/CentOS/Fedora: https://yum.postgresql.org
● Ubuntu/Debian: https://apt.postgresql.org
● SLES 12: https://zypp.postgresql.org
ONLY OPEN
SOURCE BASED
RDBMS IN
GARTNER MQ
EDB Recognized 7 Years
In A Row on Gartner’s
Magic Quadrant
26
27
Customers working SMARTER, reducing RISK and being more PRODUCTIVE with EDB.
OVER 4,000 CUSTOMERS
U.S Customers
EMEA Customers APAC Customers
102
of the
Fortune 500
337
of the Forbes
Global 2000
EDB OPEN SOURCE LEADERSHIP
NAMED EDB OPEN SOURCE COMMITTERS AND CONTRIBUTORS
28
CORE TEAM MAJOR CONTRIBUTORS CONTRIBUTORS
Akshay
Joshi
Amul
Sul
Ashesh
Vashi
Dilip
Kumar
Jeevan
Ladhe
Mithun
Cy
Devrim
Gündüz
Amit
Kapila
Bruce
Momjian
Dave
Page
Robert
Haas
Ashutosh
Sharma
Rushabh
Lathia
- designates committers
29
EDB Postgres Database
24/7 Global Support
Professional Services Postgres Contributions
Tools & Innovation Security/performance
Tuning concerns or
operational worries?
Optimize your in-house
resources for other projects
● DBA services in the cloud or your data centre
● Advice and consulting for Postgres deployments
● Technical account management
Email info@enterprisedb.com to request a
Remote DBA readiness review
© Copyright EnterpriseDB Corporation, 2020. All rights reserved.31
QUESTIONS
CONFIDENTIAL © Copyright EnterpriseDB Corporation, 2020. All rights reserved.
THANK YOU
info@enterprisedb.com
www.enterprisedb.com
32

Why you should use native packages to install PostgreSQL on Linux

  • 1.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved. Optimizing Performance and Security with Platform Native Packaging Devrim Gündüz, Principal Systems Engineer Bruce Momjian, Postgres Evangelist Marc Linster, SVP Product Development and Support 1
  • 3.
    Welcome – Housekeeping Items •Slides and recording will be available in next 48 hours • Submit questions via GotoWebinar – will be answering at end • We will be sharing info about EDB and Postgres later 3
  • 4.
    Webinar Series 4 Feb 192020 Conquering Data Migration from Oracle to Postgres March 4 2020 Using Terraform to deploy highly available Postgres March 18 2020 How to use postgresql.conf April 1 2020 Optimizing Performance and Security with Platform Native Packaging April 15 2020 Window Functions in Postgres April 29 2020 My favorite Postgres books
  • 5.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.5 INTRODUCTION ● Using Red Hat (and then Fedora) since 1996. ● Using PostgreSQL since 1998. ● Started building RPMs in 2002, took over the project in 2004. ● Planet PostgreSQL: 2004 → https://planet.PostgreSQL.org ● Responsible for PostgreSQL YUM and ZYPP repositories. ● Working at EnterpriseDB since 2011 ● Designed EDB RPM and Debian/Ubuntu repositories ● PostgreSQL Major Contributor ● Living in London, UK.
  • 6.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.6 AGENDA ● Life before native packaging ● What is “native packaging?” ● Benefits of native packaging ● EDB Postgres and community PostgreSQL native package repositories
  • 7.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.7 Life before native packaging Compiling from source code, and installers
  • 8.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.8 LIFE BEFORE NATIVE PACKAGING ● Compiling from source ● Security issues: “Compilers” ● Maintenance issues ● 1-click installers ● Security issues: Common libraries for all platforms ● The lowest common denominator ● Performance issues
  • 9.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.9 What is native packaging?
  • 10.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.10 NATIVE PACKAGING ● Bundling binaries, libraries, documentation, etc. for easy installation ● “Precompiled” ● Built for that operating system ● Easily delivered software
  • 11.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.11 Benefits of native packaging Maintenance
  • 12.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.12 BENEFITS OF NATIVE PACKAGING: MAINTENANCE ● Uses the OS libraries − No separate update requirements ● Easily compile programs against EPAS − Better linking with libpq
  • 13.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.13 Benefits of native packaging Integration
  • 14.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.14 BENEFITS OF NATIVE PACKAGING: INTEGRATION ● Uses OS package management tools ● One monitoring platform for all packages ● Integration with Puppet, Chef, Satellite, Ansible, etc. ● Create feasible SELinux policies
  • 15.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.15 Benefits of native packaging Ease of use
  • 16.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.16 BENEFITS OF NATIVE PACKAGING: EASE OF UPDATE ● Use the OS package manager to update EPAS: ● dnf/yum/apt/zypper ... ● Easier than ever!
  • 17.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.17 Benefits of native packaging Performance
  • 18.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.18 BENEFITS OF NATIVE PACKAGING: PERFORMANCE ● OS-supplied libc ● OS-supplied compiler
  • 19.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.19 Benefits of native packaging Security
  • 20.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.20 BENEFITS OF NATIVE PACKAGING: SECURITY ● An important item ● Really secure? ● What about 3rd party repositories? ● Applying patches
  • 21.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.21 BENEFITS OF NATIVE PACKAGING: SECURITY ● “Source RPMs” ● One can easily rebuild binary RPMs from SRPM, and verify ● Ease of customization ● Signing of the packages ● No malicious code!
  • 22.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.22 EnterpriseDB Native Package repos YUM/ZYPP/DNF
  • 23.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020 All rights reserved.23 EDB POSTGRES REPOS Available via EDB portal: ● Since 2012 ● Started with RHEL/CentOS RPMs ● https://yum.enterprisedb.com ● SLES 12 RPMS ● https://zypp.enterprisedb.com ● Debian/Ubuntu packages ● https://apt.enterprisedb.com”
  • 24.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.24 Community native package repos YUM/ZYPP/DNF
  • 25.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved.25 COMMUNITY POSTGRESQL NATIVE PACKAGE REPOSITORIES ● RHEL/CentOS/Fedora: https://yum.postgresql.org ● Ubuntu/Debian: https://apt.postgresql.org ● SLES 12: https://zypp.postgresql.org
  • 26.
    ONLY OPEN SOURCE BASED RDBMSIN GARTNER MQ EDB Recognized 7 Years In A Row on Gartner’s Magic Quadrant 26
  • 27.
    27 Customers working SMARTER,reducing RISK and being more PRODUCTIVE with EDB. OVER 4,000 CUSTOMERS U.S Customers EMEA Customers APAC Customers 102 of the Fortune 500 337 of the Forbes Global 2000
  • 28.
    EDB OPEN SOURCELEADERSHIP NAMED EDB OPEN SOURCE COMMITTERS AND CONTRIBUTORS 28 CORE TEAM MAJOR CONTRIBUTORS CONTRIBUTORS Akshay Joshi Amul Sul Ashesh Vashi Dilip Kumar Jeevan Ladhe Mithun Cy Devrim Gündüz Amit Kapila Bruce Momjian Dave Page Robert Haas Ashutosh Sharma Rushabh Lathia - designates committers
  • 29.
    29 EDB Postgres Database 24/7Global Support Professional Services Postgres Contributions Tools & Innovation Security/performance
  • 30.
    Tuning concerns or operationalworries? Optimize your in-house resources for other projects ● DBA services in the cloud or your data centre ● Advice and consulting for Postgres deployments ● Technical account management Email info@enterprisedb.com to request a Remote DBA readiness review
  • 31.
    © Copyright EnterpriseDBCorporation, 2020. All rights reserved.31 QUESTIONS
  • 32.
    CONFIDENTIAL © CopyrightEnterpriseDB Corporation, 2020. All rights reserved. THANK YOU info@enterprisedb.com www.enterprisedb.com 32