Slide 1

Slide 1 text

Postgres Network Filter for EnvoyProxy @fabriziomello PostgreSQL Network Filter for EnvoyProxy Fabrízio de Royes Mello @fabriziomello

Slide 2

Slide 2 text

Postgres Network Filter for EnvoyProxy @fabriziomello ` whoami ` Fabrízio Mello ● 25+ years on IT ● PostgreSQL Developer at OnGres ● PostgreSQL Contributor

Slide 3

Slide 3 text

Postgres Network Filter for EnvoyProxy @fabriziomello Enhancing Postgres Observability

Slide 4

Slide 4 text

Postgres Network Filter for EnvoyProxy @fabriziomello Postgres monitoring ● Not in-core integrated solution. ● Postgres provides catalog views with rich monitoring information. ● But that means making queries to gather monitoring data. ● Eg. Prometheus exporter: dozens/hundreds/... of queries per monitoring cycle. ● Postgres monitoring extensions: ○ may require restart -> downtime. ○ may require configuration / external binaries-> complexity But, can we do better?

Slide 5

Slide 5 text

Postgres Network Filter for EnvoyProxy @fabriziomello Yes, we can! Introducing EnvoyProxy into Postgres deployments

Slide 6

Slide 6 text

Postgres Network Filter for EnvoyProxy @fabriziomello Envoy: offloading monitoring and SSL What if we could offload from Postgres certain workloads? And avoid restarts? ● Envoy is a CNCF Proxy ● With a Postgres specific filter ● Decodes the wire protocol: protocol metrics -> Prometheus ● Terminates Postgres SSL ● And more functionalities to come in the future… https://www.cncf.io/blog/2020/08/13/envoy-1-15-introduces-a-n ew-postgres-extension-with-monitoring-support/

Slide 7

Slide 7 text

Postgres Network Filter for EnvoyProxy @fabriziomello Envoy: offloading monitoring and SSL

Slide 8

Slide 8 text

Postgres Network Filter for EnvoyProxy @fabriziomello Envoy: offloading monitoring and SSL

Slide 9

Slide 9 text

Postgres Network Filter for EnvoyProxy @fabriziomello Envoy: offloading monitoring and SSL

Slide 10

Slide 10 text

Postgres Network Filter for EnvoyProxy @fabriziomello Envoy: offloading monitoring and SSL

Slide 11

Slide 11 text

Postgres Network Filter for EnvoyProxy @fabriziomello Envoy: offloading monitoring and SSL

Slide 12

Slide 12 text

Postgres Network Filter for EnvoyProxy @fabriziomello Demo https://github.com/ongres/envoy-postgres-stats-example

Slide 13

Slide 13 text

Postgres Network Filter for EnvoyProxy @fabriziomello Envoy: offloading monitoring and SSL

Slide 14

Slide 14 text

Postgres Network Filter for EnvoyProxy @fabriziomello StackGres: The Innovative Postgres Platform on Kubernetes

Slide 15

Slide 15 text

Postgres Network Filter for EnvoyProxy @fabriziomello Thank you Join our Community in Slack and/or Discord to stay up to date! slack.stackgres.io discord.stackgres.io