Обсуждение: Allow connections by IP address?

Поиск
Список
Период
Сортировка

Allow connections by IP address?

От
Ron Johnson
Дата:
PG 17.latest

My server has two IP addresses:
10.1.2.3.4
10.1.2.3.5 (a VIP)

Some connections should only come in through the VIP, while others (like replication) must come in through .4 and others (f.e. administrators, can come in from .4 or .5).

Is there any way to restrict that?  I don't see anything in https://www.postgresql.org/docs/17/auth-pg-hba-conf.html but may be overlooking something.

(Why don't we use a connection pooler?  The 3rd party application has only been validated against direct connections to PG. Bugs in PgPool caused problems in prod.)

--
Death to <Redacted>, and butter sauce.
Don't boil me, I'm still alive.
<Redacted> lobster!

Re: Allow connections by IP address?

От
李明
Дата:

Maybe you can set the allowed ips with listen_address in postgresql.conf.

More,through network admin can achieve your aim more efficiency.

在 2025年9月12日,00:21,Ron Johnson <ronljohnsonjr@gmail.com> 写道:


PG 17.latest

My server has two IP addresses:
10.1.2.3.4
10.1.2.3.5 (a VIP)

Some connections should only come in through the VIP, while others (like replication) must come in through .4 and others (f.e. administrators, can come in from .4 or .5).

Is there any way to restrict that?  I don't see anything in https://www.postgresql.org/docs/17/auth-pg-hba-conf.html but may be overlooking something.

(Why don't we use a connection pooler?  The 3rd party application has only been validated against direct connections to PG. Bugs in PgPool caused problems in prod.)

--
Death to <Redacted>, and butter sauce.
Don't boil me, I'm still alive.
<Redacted> lobster!

Re: Allow connections by IP address?

От
kaido vaikla
Дата:


Maybe this way.
Create a roles like 
gr_4
gr_5
gr_4_5

grant roles by needs to users and define roles in pg_hba.conf (USER: +gr_4).


br
Kaido

Re: Allow connections by IP address?

От
kaido vaikla
Дата:
@Ron, ignore my last email, i misunderstand your problem.

br
Kaido