PostgreSQL 又一防火墙 sql_firewall by 2nd - 插件变现的春天来了?

digoal 2020-03-20

810

digoal

2020-03-20

背景

PG 的sql防火墙很多, 可以定义的规则也比较多, 从pg_hba.conf的配置(来源IP, 用户, 库, 认证方法等)到 SQL层面的防火墙.

基于where条件的过滤, 基于sql代价的过滤, 基于白名单、黑名单的过滤, 基于学习模式的过滤等等.

2nd也推出了一款防火墙, 大同小异, 插件形式使用. PG这些核心committer企业提供的插件, 还是有保障的. 所以PG这些口碑企业除了服务, 又找到了另一条致富之路, 卖企业级插件(通用行业, or 垂直行业).

https://www.2ndquadrant.com/en/resources/postgresql-security-firewall/

Firewall – Block unwanted SQL statements from executing against your database.
Controlled access – Whitelist statements at an individual user level.
Automated training – SQL Firewall can be trained to whitelist SQL statements simply by running your application’s test suite.
Import/Export Whitelists – Import or export whitelists to your PostgreSQL database. This allows you to use the same whitelist across multiple servers. It also allows you to train SQL Firewall in a controlled environment and then export the resulting whitelist to your production server for the launch of a new/updated application.
Logging & Alerts – SQL Firewall logs each blocked query, allowing you to analyze and alert on possible threats. It also allows you to retrain your whitelist if needed.