Skip to content

Commit cbf286d

Browse files
Merge pull request #239720 from GennadNY/gennadk900
Gennadk900
2 parents d77eb1c + 1d05834 commit cbf286d

File tree

2 files changed

+3
-8
lines changed

2 files changed

+3
-8
lines changed

articles/postgresql/flexible-server/concepts-data-encryption.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -149,7 +149,7 @@ Avoid issues while setting up customer-managed data encryption during restore or
149149
- On the restored/replica server, you can change the customer-managed key and\or Azure Active Directory (Azure AD) identity used to access Azure Key Vault in the data encryption settings. Ensure that the newly created server is given list, wrap and unwrap permissions to the key stored in Key Vault.
150150

151151
- Don't revoke the original key after restoring, as at this time we don't support key revocation after restoring CMK enabled server to another server
152-
-
152+
153153
## Using Azure Key Vault Managed HSM
154154

155155
**Hardware security modules (HSMs)** are hardened, tamper-resistant hardware devices that secure cryptographic processes by generating, protecting, and managing keys used for encrypting and decrypting data and creating digital signatures and certificates. HSMs are tested, validated and certified to the highest security standards including FIPS 140-2 and Common Criteria. Azure Key Vault Managed HSM (Hardware Security Module) is a fully managed, highly available, single-tenant, standards-compliant cloud service that enables you to safeguard cryptographic keys for your cloud applications, using FIPS 140-2 Level 3 validated HSMs.

articles/postgresql/flexible-server/concepts-pgbouncer.md

Lines changed: 2 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -51,13 +51,6 @@ By using the benefits of built-in PgBouncer with Flexible Server, users can enjo
5151
* The built-in PgBouncer in Flexible Server provides support for both public and private connections. This functionality allows users to establish secure connections over private networks or connect externally, depending on their specific requirements.
5252
* In the event of a failover, where a standby server is promoted to the primary role, PgBouncer seamlessly restarts on the newly promoted standby without any changes required to the application connection string. This ability ensures continuous availability and minimizes disruption to the application's connection pool.
5353

54-
There are following limitations with using this feature today:
55-
* PgBouncer is currently not supported with Burstable server compute tier.
56-
* Transaction and statement connection pooling modes can't be used along with prepared statements.
57-
* Only a subset of configuration parameters is available with built-in PGBouncer vs. standalone product.
58-
* Whenever the server is restarted, the PgBouncer is also restarted along with the server. Hence, existing connections must be re-established.
59-
60-
For those customers that are looking for simplified management, built-in high availability, easy connectivity with containerized applications and are interested in utilizing most popular configuration parameters with PGBouncer built-in PGBouncer feature is good choice. For customers looking for full control of all parameters and debugging experience another choice could be setting up PGBouncer on Azure VM as an alternative.
6154
## Monitoring PgBouncer
6255

6356
### PgBouncer Metrics
@@ -127,6 +120,8 @@ Utilizing an application side pool together with PgBouncer on the database serve
127120
* Transaction and statement pool modes can't be used along with prepared statements. Refer to the [PgBouncer documentation](https://www.pgbouncer.org/features.html) to check other limitations of chosen pool mode.
128121

129122

123+
For those customers that are looking for simplified management, built-in high availability, easy connectivity with containerized applications and are interested in utilizing most popular configuration parameters with PGBouncer built-in PGBouncer feature is good choice. For customers looking for full control of all parameters and debugging experience another choice could be setting up PGBouncer on Azure VM as an alternative.
124+
130125
## Next steps
131126

132127
- Learn about [networking concepts](./concepts-networking.md)

0 commit comments

Comments
 (0)