In a significant advancement for database management, TencentDB for PostgreSQL has introduced a suite of robust security measures aimed at ensuring compliance with international standards. These enhancements include data encryption, Virtual Private Cloud (VPC) isolation, and meticulous process monitoring, all designed to fortify data integrity and security.
Core Capability Upgrades in PostgreSQL 17.0
The latest version of PostgreSQL, 17.0, brings forth several core capability upgrades that enhance its functionality and performance:
- Enhanced Logical Replication: The introduction of logical replication slot failover allows for the retention of slots during major version upgrades via ‘pg_upgrade’, thereby improving data synchronization reliability.
Performance Optimizations
Performance has been a focal point in this update, with several optimizations implemented:
- Batch I/O Page Read/Write: This optimization significantly boosts efficiency.
- WAL Write Performance: Improvements in Write-Ahead Logging enhance performance under high concurrency scenarios.
- VACUUM Enhancements: A new memory management mechanism has been adopted, leading to better performance while simultaneously reducing memory consumption.
Operational Enhancements
Operational capabilities have also seen notable enhancements:
- Incremental Backups: The ‘pg_basebackup’ tool now supports incremental backups, which reduces both storage requirements and time costs.
- Transaction Timeout Parameter: The addition of a ‘transaction_timeout’ parameter enables the termination of long-running transactions, preventing potential blocks.
Tencent Cloud Self-Developed Features & Scenario-Specific Solutions
Tencent has also rolled out self-developed features tailored to specific scenarios, enhancing resource management and operational efficiency:
Fine-Grained Multi-Tenant Resource Management
- Resource Isolation: This feature allows for precise control of CPU resources at the database level, with dynamic configuration options for adjustments.
- Process-Level Monitoring: Real-time monitoring of tenant processes’ CPU and memory usage is facilitated through the ‘tencentdb_process_system_usage’ view, aiding in health assessments.
- SQL Throttling: This function limits real-time SQL concurrency based on specific SQL statements or ‘queryid’, effectively preventing resource abuse.
Cold/Hot Data Separation Solutions
- Option 1: Utilize the ‘cos_fdw’ plugin for transparent access to cold data, such as archived information stored in COS, achieving efficient storage tiering.
- Option 2: Integrate the ‘starocks_fdw’ plugin to connect with the StarRocks analytics engine, facilitating cold data storage either on-premises or in object storage while unifying transaction processing and analytics capabilities.
Enterprise-Grade Security Auditing
Security auditing has been enhanced to meet varying business needs:
- Express Edition: This edition addresses basic auditing requirements while maintaining high performance.
- Advanced Edition: An upgrade to the ‘pgaudit’ plugin broadens audit coverage to include function execution and object types/names, offering performance that surpasses native PostgreSQL full-log auditing.
Business Value
The strategic enhancements not only bolster performance but also deliver significant business value:
- Balanced Performance & Cost: The separation of cold and hot data reduces storage costs while supporting hybrid HTAP workloads on a single node.
- Maximized Resource Efficiency: Precise resource control in multi-tenant environments ensures high utilization and stability.
- Strengthened Compliance: Flexible auditing modes can adapt to various security requirements, showcasing substantial performance advantages in stress tests.
