Bulletproofing your YugabyteDB Infrastructure to Reduce Risk
summary
Checklist of concrete controls and tradeoffs: enforce MFA everywhere and replace MD5 with SCRAM-SHA-256 for passwords, use LDAP and host-based IP filters for auth, enable cluster‑wide encryption with key rotation and consider column encryption via pgcrypto (AES recommended), require TLS1.2/ TLS1.3 and strong cipher suites, run authenticated vulnerability scans plus external pen tests, deploy file integrity monitoring or frequent repaving, keep backups offsite with regular restore tests and use YSQL dump and PITR for restores.
AI-written summary · about
chapters (8)
- 0:00Securing YugabyteDB intro
- 1:28Access control best practices
- 4:17Encryption strategies
- 8:10Vulnerability and risk management
- 11:20File integrity monitoring
- 12:25Backup and restoration
- 15:14Auditing and compliance
- 17:21Summary and closing
related talks
19mTop Security Questions: Delight Your CISO and Protect Your Business
50mSecuring PostgreSQL
35mSecuring PostgreSQL From External Attack
50mSecuring PostgreSQL From External Attack
30mPerformance: Tips & Tricks to Optimize the Speed of Your Mission-Critical Database
54mConfiguration and Authentication
24mImproving Security and Observability of YugabyteDB on Kubernetes
32mPostgreSQL Security: Defending Against External Attacks