https://dagster.io/ logo
p

Peter B

04/07/2021, 5:46 AM
Hi all, If I choose a remote PostgresSQL database for Dagster's logs etc, that's accessed over the public internet (i.e. not sitting in a VPC), does anyone know if Dagster automatically encrypts the data with TLS during transit? I assume it does, but I thought I would check Thanks
n

Noah K

04/07/2021, 6:31 AM
What does your connection string look like?
https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING goes over the parameters available in libpq, sslmode is the important starting one
And that defaults to
prefer
(meaning it will try for an opportunistic upgrade but will accept unencrypted)
You would likely want
sslmode=verify-full
instead 🙂
p

Peter B

04/07/2021, 7:16 AM
oh great, thanks so much, really appreciate it
6 Views