Using pgsql-check with TLS

[BernardesPedro]

Do you need to make some additional adjustments to the database that requires an SSL connection?

[gplv2]

This will not work on encrypted connections. It's made to be fast and lightweight. Implementing SSL protocol on haproxy custom checks aren't possible afaik.

[gplv2]

Hi,

I've been thinking about this and I believe that this can work. I will have to test soon to be sure. but by allowing both secure and insecure connections we can establish SSL for clients and perform the haproxy check without SSL internally.

haproxy reroutes to pgbouncer and that one is capable. The only thing I verified with haproxy docs is that you cannot terminate SSL on haproxy for postgres protocol. But an stunnel solution there is possible.

However, this SSL should almost function right out of the box with careful pg_hba config changes.

I'll look into this as there is more interest in this.