Re: How to select the source ip address for a connection to the database server

Поиск
Список
Период
Сортировка
От Greg Stark
Тема Re: How to select the source ip address for a connection to the database server
Дата
Msg-id 407d949e0909030551x4d5374bo4311583d80e67eb2@mail.gmail.com
обсуждение исходный текст
Ответ на Re: How to select the source ip address for a connection to the database server  (Andrew McMillan <andrew@morphoss.com>)
Ответы Re: How to select the source ip address for a connection to the database server  ("Dimitris Sakellarios" <dimitris.sakellarios@telesuite.gr>)
Список pgsql-php
On Thu, Sep 3, 2009 at 12:31 PM, Andrew McMillan<andrew@morphoss.com> wrote:
> Nope, unless you're root you're unlikely to be able to choose the source
> address for your connection, and even then it would be tricky.

I don't think you need to be root to select a source address. But
that's not helpful since libpq doesn't support binding to a particular
interface. That would be a useful feature and we should probably add
it to the TODO.

You should note that the source address isn't actually a very secure
way to protect your connections since any other host on that network
could spoof your address.

It sounds like what you're looking for is to control the interface the
packets are routed through. This is separate from the source address
as packets are often routed through multiple hosts along their way.
Routing rules are not something individual applications normally get
involved in. If the connections are being routed through the wrong
interface then you have a global problem, not just with the database
and it requires system-wide configuration changes.

--
greg
http://mit.edu/~gsstark/resume.pdf

В списке pgsql-php по дате отправления:

Предыдущее
От: Andrew McMillan
Дата:
Сообщение: Re: How to select the source ip address for a connection to the database server
Следующее
От: "Dustin Butler"
Дата:
Сообщение: Re: How to select the source ip address for a connection to the database server