Skip to content

Commit 84e5191

Browse files
committed
Improve and expand pg_tde information in PSP
This PR aims to improve a gap in our Information Architecture, specifically we are missing a slight clarification paragraph regarding pg_tde's capability to enforce encryption at the database level as well. To fix this, three chapters have been expanded and improved with additional information around this topic.
1 parent 4794dbb commit 84e5191

3 files changed

Lines changed: 34 additions & 16 deletions

File tree

docs/percona-ext.md

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,13 @@
11
# Percona-authored extensions
22

3+
Percona-authored extensions provide additional capabilities that go beyond upstream PostgreSQL, enabling advanced observability and data-at-rest encryption. These extensions are developed and maintained by Percona and are designed to integrate seamlessly with Percona Server for PostgreSQL and Percona Distribution for PostgreSQL.
4+
5+
This page provides a high-level overview of the available Percona-authored extensions and the problems they are intended to solve. For detailed configuration and usage instructions, follow the documentation links provided for each extension below.
6+
37
<div data-grid markdown>
48
<div data-banner markdown>
59

6-
### :octicons-graph-16: pg_stat_monitor
10+
## :octicons-graph-16: pg_stat_monitor
711

812
A query performance monitoring tool for PostgreSQL that brings more insight and details around query performance, planning statistics and metadata. It improves observability, enabling users to debug and tune query performance with precision.
913

@@ -12,13 +16,13 @@ A query performance monitoring tool for PostgreSQL that brings more insight and
1216

1317
<div data-banner markdown>
1418

15-
### :material-file-key-outline: pg_tde
16-
17-
An open-source extension designed to enhance PostgreSQL’s security by encrypting data files on disk. The encryption is transparent for users allowing them to access and manipulate the data and not to worry about the encryption process.
19+
## :material-file-key-outline: pg_tde
1820

21+
An open-source extension designed to enhance PostgreSQL’s security by encrypting data files on disk. The encryption is transparent for users, allowing them to access and manipulate data without managing encryption details.
1922

20-
[pg_tde documentation :octicons-link-external-16:](https://docs.percona.com/pg-tde/index.html){.md-button}
23+
You can also use `pg_tde` to enforce encryption at the database level, ensuring that all newly created data is encrypted without requiring per-table changes.
2124

25+
[For configuration details, see the pg_tde documentation. :octicons-link-external-16:](https://docs.percona.com/pg-tde/index.html){.md-button}
2226

2327
</div>
2428
</div>

docs/postgresql-server.md

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,11 @@
11
# Percona Server for PostgreSQL
22

3-
Percona Server for PostgreSQL is a binary-compatible, open source drop-in replacement for PostgreSQL {{pgversion}}. It introduces additional features to the upstream server, including:
3+
Percona Server for PostgreSQL is a binary-compatible, open source drop-in replacement for PostgreSQL {{pgversion}}. It functions identically to upstream PostgreSQL, allowing you to [migrate](migration.md) seamlessly between the two.
44

5-
* Storage Manager (SMGR) API Exposure: Allows PostgreSQL extensions to integrate custom storage managers. This change was inspired by the [patchset](https://www.postgresql.org/message-id/flat/CAJ7c6TOqqrzjYsU6LgDkcJ0yVgzdkx2juJjgAjzP2jPOpZ1qUA%40mail.gmail.com#8e68cfc57fcac14c8e24b00b41e61baf) introduced to the community.
6-
* WAL Read/Write API Exposure to hook into WAL read and write functions.
5+
It provides the foundation for additional capabilities, including data-at-rest encryption such as index-level and Write-Ahead Logging (WAL) encryption.
76

8-
These modifications have no impact on existing use cases and operation of PostgreSQL. They are required to enable additional encryption capabilities such as index-level and Write-Ahead Logging (WAL) encryption of indexes through the [`pg_tde` :octicons-link-external-16:](https://docs.percona.com/pg-tde/index.html) extension. These encryption features provided by the `pg_tde` are still under active development and are planned for future releases.
7+
For more information on Percona Server for PostgreSQL extensions that enable such capabilities, see the [Percona-authored extensions topic](percona-ext.md).
98

10-
Percona Server and upstream PostgreSQL function identically enabling you to migrate from one to another.
9+
For an overview of Percona Server for PostgreSQL solutions, such as high availability, backup and disaster recovery, spatial data handling, authentication, and data-at-rest encryption, see the [Percona Distribution for PostgreSQL solutions topic](solutions.md).
1110

12-
[Get started :material-arrow-right:](installing.md){.md-button}
11+
[Get started :material-arrow-right:](installing.md){.md-button}

docs/solutions.md

Lines changed: 20 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,13 @@
11
# Percona Distribution for PostgreSQL solutions
22

3-
Find the right solution to help you achieve your organization's goals.
3+
Find the right solution to help you achieve your organization's goals, such as high availability, backup and disaster recovery, spatial data handling, authentication, and [data-at-rest encryption :octicons-link-external-16:](https://docs.percona.com/pg-tde/index.html).
4+
5+
These solutions are enabled by additional capabilities that extend the upstream server, such as:
6+
7+
* Storage Manager (SMGR) API exposure that allows PostgreSQL extensions to integrate custom storage managers. This change was inspired by the following [patchset :octicons-link-external-16:](https://www.postgresql.org/message-id/flat/CAJ7c6TOqqrzjYsU6LgDkcJ0yVgzdkx2juJjgAjzP2jPOpZ1qUA%40mail.gmail.com#8e68cfc57fcac14c8e24b00b41e61baf) introduced to the community.
8+
* WAL Read/Write API exposure that allows extensions to hook into WAL read and write functions.
9+
10+
Explore the available solutions below:
411

512
<div data-grid markdown><div data-banner markdown>
613

@@ -12,6 +19,14 @@ Check out how you can ensure continuous access to your database.
1219

1320
</div><div data-banner markdown>
1421

22+
### :material-backup-restore: Backup and disaster recovery
23+
24+
Protect your database against accidental or malicious data loss or data corruption.
25+
26+
[Backup and disaster recovery :material-arrow-right:](solutions/backup-recovery.md){.md-button}
27+
28+
</div><div data-banner markdown>
29+
1530
### :octicons-globe-24: Spatial data handling
1631

1732
Dealing with spatial data? Learn how you can store and manipulate it.
@@ -20,11 +35,11 @@ Dealing with spatial data? Learn how you can store and manipulate it.
2035

2136
</div><div data-banner markdown>
2237

23-
### :material-backup-restore: Backup and disaster recovery
38+
### :material-account-lock: LDAP authentication
2439

25-
Protect your database against accidental or malicious data loss or data corruption.
40+
Need a central authentication solution? Learn how you can manage users and access control using LDAP directories.
2641

27-
[Backup and disaster recovery :material-arrow-right:](solutions/backup-recovery.md){.md-button}
42+
[LDAP authentication :material-arrow-right:](ldap.md){.md-button}
2843

2944
</div>
30-
</div>
45+
</div>

0 commit comments

Comments
 (0)