The Elephant Has No Clothes
summary
Percona provides an open-source TDE extension for PostgreSQL that encrypts table and index storage, integrates with external KMS, supports online encryption and replication, and ships as a tech preview on a patched Postgres build. Implementation moves encryption to the storage manager (earlier access-method prototype encrypts before shared buffers and hits performance), so current prototype shows ~50% overhead while the target is 5–20% overhead. Code and builds live on GitHub but the extension is not yet production-ready.
AI-written summary · about
chapters (7)
- 0:00Introduction and speaker background
- 3:36Emperor’s New Clothes analogy
- 7:10Why TDE is needed for PostgreSQL
- 17:48Comparison with other databases
- 25:21Implementation approach and challenges
- 31:03Call to action and future plans
- 31:47Q&A session
related talks
34mSave the Elephants - Secure Your PostgreSQL Databases with TDE
45mTDE as an Extension: A Different Path for PostgreSQL Encryption
29mA comparison of PostgreSQL Encryption Options
48mGetting To Know SQL Server Encryption Capabilities
54mLessons from two decades of hacking the proprietary value into open so
35mSecuring PostgreSQL From External Attack
38mWhat we built with Open Source
29mBuilding Enterprise Grade PostgreSQL using Percona distribution for PostgreSQL