How-to guides

• 1: Managing DB Service
• 2: DB Backup and Restore
• 3: Configuring Read Replica
• 4: Connecting to DB Server
• 5: Using Extensions

1 - Managing DB Service

Users can manage PostgreSQL(DBaaS) through the Samsung Cloud Platform Console.

Managing Parameters

Provides functionality to easily view and modify database configuration parameters.

Viewing Parameters

Follow these steps to view configuration parameters.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to view and modify parameters. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the Parameter Management button. The Parameter Management popup window will open.
5. In the Parameter Management popup window, click the View button. The View Notification popup window will open.
6. When the View Notification popup window opens, click the Confirm button. Viewing may take some time.

Modifying Parameters

Follow these steps to modify configuration parameters.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to view and modify parameters. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the Parameter Management button. The Parameter Management popup window will open.
5. In the Parameter Management popup window, click the View button. The View Notification popup window will open.
6. When the View Notification popup window opens, click the Confirm button. Viewing may take some time.
7. If modification is needed, click the Modify button and enter the modification in the custom value area of the Parameter to be modified.
8. When input is complete, click the Complete button.

Managing DB Users

Provides management functionality to view DB user information and change status information.

Viewing DB Users

Follow these steps to view DB users.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to view DB users. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the DB User Management button. You will move to the DB User Management page.
5. On the DB User Management page, click the View button. Viewing may take some time.

Changing DB User Status

Follow these steps to change the status of viewed DB users.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to modify DB users. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the DB User Management button. You will move to the DB User Management page.
5. On the DB User Management page, click the View button. Viewing may take some time.
6. If modification is needed, click the Modify button and change the status area value or enter remarks.
7. When input is complete, click the Complete button.

Managing DB Access Control

Provides IP-based DB user access control management functionality. Users can directly specify IPs that can access the database, allowing access only from permitted IPs.

Viewing DB Access Control

Follow these steps to view DB users with IP access control set.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to manage access control. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the DB Access Control Management button. You will move to the DB Access Control Management page.
5. On the DB Access Control Management page, click the View button. Viewing may take some time.

Adding DB Access Control

Follow these steps to add IP access control.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to add IP access control. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the DB Access Control Management button. You will move to the DB Access Control Management page.
5. On the DB Access Control Management page, click the View button. Viewing may take some time.
6. When viewing is complete, click the Add button. The Add DB Access Control popup window will open.
7. In the Add DB Access Control popup window, select the DB user name and enter the IP Address.
8. When input is complete, click the Complete button.

Deleting DB Access Control

Follow these steps to delete IP access control.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to delete IP access control. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the DB Access Control Management button. You will move to the DB Access Control Management page.
5. On the DB Access Control Management page, click the View button. Viewing may take some time.
6. When viewing is complete, click the Delete button. The Delete popup window will open.
7. In the Delete popup window, click the Confirm button.

Managing Archive

Provides functionality to set Archive mode and Archive Log retention period, allowing users to flexibly configure Archive log management policies according to their operating environment. Additionally, provides functionality to manually delete Archive logs, enabling users to organize unnecessary log data and effectively manage system resources.

Setting Archive Mode

Follow these steps to set Archive mode.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to set Archive mode. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the Archive Settings Management button. You will move to the Archive Settings Management page.
5. On the Archive Settings Management page, click the View button. Viewing may take some time.
6. Click the Modify button and select usage and retention period.
7. When modification is complete, click the Complete button.

Deleting Archive Files

Follow these steps to delete Archive files.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to set Archive mode. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the Archive Settings Management button. You will move to the Archive Settings Management page.
5. On the Archive Settings Management page, click Delete All Archive if you want to delete all Archive files, or click Delete Backed Up Archive if you want to delete only backed up Archive files.

Modifying Audit Settings

You can change the Audit log storage settings for PostgreSQL(DBaaS).

Follow these steps to change the Audit log storage settings for PostgreSQL(DBaaS).

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to view the service status. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the Modify icon in Audit Settings at the bottom of the detailed information. The Modify Audit Settings popup window will open.
5. In the Modify Audit Settings popup window, modify the usage and then click the Confirm button.
   • Selecting Use sets the Audit log function. Setting Audit logs may degrade DB performance.
   • Disabling Use deletes the Audit log storage file. Please back up the Audit log file separately before disabling use.

Exporting DB Log

Supports exporting audit(Audit) log data that requires long-term retention to Object Storage. Users can directly set the log type to be saved, the destination Bucket to export to, and the cycle for exporting logs. Logs are copied and stored to the specified Object Storage according to the set criteria. Additionally, to efficiently manage disk space, provides an option to automatically delete original log files while exporting logs to Object Storage. Using this option allows you to effectively secure storage capacity while safely storing necessary log data for long-term retention.

Setting DB Log Export Mode

Follow these steps to set DB Log export mode.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to export DB Log. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the DB Log Export button. You will move to the DB Log Export page.
5. On the DB Log Export page, click the Register button. You will move to the Register DB Log Export page.
6. On the Register DB Log Export page, enter the corresponding information and then click the Complete button.

   Category	Required	Detailed Description
   Log Type	Required	Log type to save
   Storage Bucket Name	Required	Object Storage Bucket name to save
   Authentication Key > Access key	Required	Access key to access the Object Storage to save
   Authentication Key > Secret key	Required	Secret key to access the Object Storage to save
   File Creation Cycle	Required	Cycle for creating files in Object Storage
   Delete Original Log	Optional	Whether to delete original logs while exporting to Object Storage

   Table. PostgreSQL(DBaaS) DB Log Export Configuration Items

Managing DB Log Export

Follow these steps to modify, cancel, or immediately export DB Log export settings.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource for which you want to manage DB Log export. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the DB Log Export button. You will move to the DB Log Export page.
5. On the DB Log Export page, click the More button according to the log type you want to manage and click the Immediate Export, Modify, or Cancel button.
   • Immediate Export: The selected log is exported to the Bucket of the previously set Object Storage.
   • Modify: Modifies the DB Log export mode settings.
   • Cancel: Cancels the DB Log export mode settings.

Upgrading Minor Version

Provides version upgrade functionality for some feature improvements and security patches. Only Minor version upgrades within the same Major version are supported.

Follow these steps to upgrade Minor Version.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource to upgrade the version. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the Modify button in the Image version item. The Version Upgrade popup window will open.
5. In the Version Upgrade popup window, select the modified version and backup setting, then click the Confirm button.
6. In the Version Upgrade Notification popup window, click the Confirm button.

Configuring Migration

Provides Migration functionality that replicates in real-time while synchronizing with the operating database, without service interruption, using Replication method.

Follow these steps to configure Migration.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource to migrate. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the Migration Configuration button. The Migration Configuration popup window will open.
5. In the Migration Configuration popup window, check the instructions and click the Confirm button. You will move to the Migration Configuration page.
6. On the Migration Configuration page, enter the corresponding information and then click the Connection Check button.
7. When connection is complete, click the Complete button.

   Category	Required	Detailed Description
   Source DB Database Name	Required	Database name of the Source DB to be migrated
   Source DB IP	Required	IP of the Source DB to be migrated
   Source DB Port	Required	Port of the Source DB to be migrated
   Source DB Username	Required	Username of the Source DB to be migrated
   Source DB Password	Required	Password of the Source DB to be migrated

   Table. PostgreSQL(DBaaS) Migration Configuration Items

Promoting Migration Cluster to Master Cluster

You can promote a configured Migration Cluster to Master Cluster.

Follow these steps to promote Migration Cluster to Master.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource to promote to Master. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the Master Promotion button. The Master Promotion Notification popup window will open.
5. In the Master Promotion Notification popup window, click the Confirm button.

Upgrading OS Kernel

You can upgrade the OS Kernel to improve operating database functionality and apply security patches.

Follow these steps to upgrade OS Kernel.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource to upgrade OS Kernel. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the OS(Kernel) Upgrade button. The OS(Kernel) Upgrade Notification popup window will open.
5. In the OS(Kernel) Upgrade Notification popup window, check the instructions and click the Confirm button.

2 - DB Backup and Restore

Users can set up PostgreSQL(DBaaS) backup through the Samsung Cloud Platform Console and restore using backed up files.

Backing Up PostgreSQL(DBaaS)

PostgreSQL(DBaaS) provides data backup functionality based on its own backup commands. Additionally, through backup history viewing and backup file deletion functionality, it provides a backup environment optimized for data protection and management.

Setting Up Backup

For PostgreSQL(DBaaS) backup setup method, please refer to Creating PostgreSQL(DBaaS).

Follow these steps to modify backup settings for created resources.

Follow these steps to set up backup.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource to set backup. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the Modify button in the backup item. The Backup Settings popup window will open.
5. To set backup, click Use in the Backup Settings popup window, select retention period, backup start time, and Archive backup cycle, then click the Confirm button.
   • To stop backup settings, uncheck Use in the Backup Settings popup window and click the Confirm button.

Viewing Backup History

Follow these steps to view backup history.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource to view backup history. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the Backup History button. The Backup History popup window will open.
5. In the Backup History popup window, you can check backup status, version, backup start datetime, backup completion datetime, and capacity.

Deleting Backup Files

Follow these steps to delete backup history.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource to view backup history. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the Backup History button. The Backup History popup window will open.
5. In the Backup History popup window, check the file to delete and then click the Delete button.

Restoring PostgreSQL(DBaaS)

In case of failure or data loss requiring restoration from backup files, you can restore based on a specific point in time through the restore function. When PostgreSQL(DBaaS) restore is performed, a new server is created with the OS image at the initial provisioning time, DB is installed with the version of that backup time, and restoration proceeds with DB configuration information and data.

Follow these steps to restore PostgreSQL(DBaaS).

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) Resource List page, click the resource to restore. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the Database Restore button. You will move to the Database Restore page.
5. Enter the corresponding information in the Database Restore Configuration area and then click the Complete button.

   Category	Required	Detailed Description
   Restore Type	Required	Setting the point in time user wants to restore Backup Point(Recommended): Restore based on backup file. Select from the list of backup file time points displayed in the list User-Specified Point: Restore to a point user wants within the backupable time range. The recoverable period can restore from the initial backup start time to 1 hour/30 minutes/10 minutes/5 minutes before current time according to Archive backup cycle setting value. Select the date and time to backup
   Server Name Prefix	Required	Server name of restore DB Enter 3~16 characters starting with lowercase English letters, using lowercase letters, numbers, and special characters(-) Actual server name is created with a postfix like 001, 002 attached based on server name
   Cluster Name	Required	Cluster name of restore DB Enter 3 ~ 20 characters using English letters Cluster is a unit that groups multiple servers
   Service Type > Server Type	Required	Server type where restore DB will be installed Standard: Standard specifications commonly used High Capacity: Large-capacity servers with 24vCore or more
   Service Type > Planned Compute	Optional	Status of resources with Planned Compute set In Use: Number of resources with Planned Compute set that are currently in use Set: Number of resources with Planned Compute set Coverage Preview: Amount applied by Planned Compute per resource Create Planned Compute Service: Moves to Planned Compute service application page For details, refer to Applying for Planned Compute
   Service Type > Block Storage	Required	Block Storage settings used by restore DB Basic OS: Area where DB engine is installed DATA: Storage area for table data and archive files, etc. Applied identically with Storage type set in original cluster Enter capacity as a multiple of 8 in the range of 16 ~ 5,120 Additional: Storage area for DATA, Archive, TEMP, Backup data Applied identically with Storage type set in original cluster Only DATA, TEMP, Archive purposes can be added in restore DB. Select Use and then enter storage purpose and capacity To add storage, click the + button, to delete, click the x button Capacity can be entered as a multiple of 8 in the range of 16 ~ 5,120, and can create up to 9
   Database Username	Required	Database username set in original DB
   Database Port Number	Required	Database Port number set in original DB
   IP Access Control	Optional	IP address to access restore DB Enter in IP format (example: 192.168.10.1) or CIDR format (example: 192.168.10.1/32, 192.168.10.1/32) and click the Add button To delete entered IP, click the x button next to the entered IP
   Maintenance Period	Optional	DB maintenance period When Use is selected, set day of week, start time, and duration It is recommended to set a maintenance period for stable DB management. Patching is performed at the set time and service interruption occurs If set to Not Used, Samsung SDS is not responsible for problems caused by unapplied patches.
   Tags	Optional	Add tags Click the Add Tag button and then enter or select Key, Value values

   Table. PostgreSQL(DBaaS) Restore Configuration Items

3 - Configuring Read Replica

Users can enter required information for Read Replica through the Samsung Cloud Platform Console and create the service through detailed options.

Configuring Replica

Through Replica configuration, you can create replica servers for read-only or disaster recovery purposes. You can create up to 5 Replicas per Database.

Follow these steps to configure Replica.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource to configure Replica. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the Configure Replica button. You will move to the Configure Replica page.
5. Enter information in the Configure Replica area and then click the Complete button.

   Category	Required	Detailed Description
   Region	Required	Region to configure Replica Only exposed when Replica Configuration(Other Region) is selected
   Replica Count	Required	Number of Replicas to configure Can configure up to 5 per cluster When selecting a value of 2 or more, additional input is required for Replica name and service type information
   Replica Name	Required	Replica server name Enter 3 ~ 19 characters starting with lowercase English letters, using lowercase letters, numbers, and special characters(-) The entered Replica name is displayed as cluster name in the list
   Service Type > Server Type	Required	Replica server type Standard: Standard specifications commonly used High Capacity: Large-capacity servers with 24vCore or more
   Service Type > Planned Compute	Optional	Status of resources with Planned Compute set In Use: Number of resources with Planned Compute set that are currently in use Set: Number of resources with Planned Compute set Coverage Preview: Amount applied by Planned Compute per resource Create Planned Compute Service: Moves to Planned Compute service application page For details, refer to Applying for Planned Compute
   Service Type > Block Storage	Required	Block Storage settings for Replica DB Basic OS: Area used on the server where DB is installed Applied identically according to the Storage type set in the original DB Capacity setting is not possible DATA: Storage area for table data and archive files, etc. Applied identically according to the Storage type set in the original DB Capacity setting is not possible Additional: Storage area for DATA, Archive, TEMP, Backup data Applied identically according to the Storage type set in the original DB Only DATA, TEMP purposes can be added in Replica Select Use and then enter the storage purpose and capacity. Enter capacity in the range of 16 ~ 5,120 as a multiple of 8 To add storage, click the + button, to delete, click the x button. Can add up to 9.
   IP Access Control	Optional	Service access policy setting Sets access policy for IPs entered on the page, so no separate Security Group policy setting is required Enter in IP format (example: 192.168.10.1) or CIDR format (example: 192.168.10.0/24, 192.168.10.1/32) and click the Add button To delete entered IP, click the x button next to the entered IP
   Maintenance Period	Optional	DB maintenance period When Use is selected, set day of week, start time, and duration It is recommended to set a maintenance period for stable DB management. Patching is performed at the set time and service interruption occurs If set to Not Used, Samsung SDS is not responsible for problems caused by unapplied patches.
   Tags	Optional	Add tags Click the Add Tag button and then enter or select Key, Value values

   Table. PostgreSQL(DBaaS) Replica Configuration Items

Reconfiguring Replica

In case of network failure or Replication delay with Master Cluster, you can replicate Master Cluster data again through the Replica reconfiguration function.

Follow these steps to reconfigure Replica.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource to reconfigure Replica. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the Reconfigure Replica button. The Reconfigure Replica Notification popup window will open.
5. In the Reconfigure Replica Notification popup window, click the Confirm button.

Promoting Replica Cluster to Master Cluster

You can promote a configured Replica Cluster to Master Cluster.

Follow these steps to promote Replica Cluster to Master.

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS) List page.
3. On the PostgreSQL(DBaaS) List page, click the resource to promote to Master. You will move to the PostgreSQL(DBaaS) Detail page.
4. Click the More button and click the Master Promotion button. The Master Promotion Notification popup window will open.
5. In the Master Promotion Notification popup window, click the Confirm button.

4 - Connecting to DB Server

Scenario Overview

The PostgreSQL(DBaaS) Server Connection scenario involves creating a Bastion host(Virtual Server) and Database service, and accessing the DB service through the Bastion host. To stably access PostgreSQL(DBaaS) in the Samsung Cloud Platform environment, you need to create a Bastion host and configure network connections using it. To maintain stable and high security levels, it is recommended to configure the Database service in a Private Subnet environment and the Bastion host in a restricted Public Subnet environment.

This scenario explains the process of creating a Bastion host and Database service, configuring the network environment for Bastion host and Database access, and connecting through a DB connection client.

Scenario Components

You can configure this scenario using the following services.

Scenario Configuration Method

Create the necessary services to configure the scenario through the following procedure.

1. Configuring Network

This explains the process of configuring the network environment for accessing Bastion Host and Database service.

1-1. Creating VPC

1. Click the All Services > Networking > VPC menu. You will move to the VPC’s Service Home page.
2. On the Service Home page, click the Create VPC button. You will move to the Create VPC page.
3. On the Create VPC page, enter the necessary information for service creation.
   • Enter the IP range as 192.168.x.0/16.
4. On the Summary panel, check the detailed creation information and estimated billing amount, then click the Complete button.
   • When creation is complete, check the created resource on the VPC List page.

1-2. Creating Subnet

1. Click the All Services > Networking > VPC menu. You will move to the VPC’s Service Home page.
2. On the Service Home page, click the Subnet menu. You will move to the Subnet List page.
3. Click the Create Subnet button. You will move to the Create Subnet page.
4. On the Create Subnet page, enter the necessary information for service creation.
   • Select General as the Subnet type.
   • Select the previously created VPC.
   • Enter the IP range as 192.168.x.0/24.
5. On the Summary panel, check the detailed creation information and estimated billing amount, then click the Complete button.
   • When creation is complete, check the created resource on the Subnet List page.

1-3. Creating Internet Gateway

1. Click the All Services > Networking > VPC menu. You will move to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway menu. You will move to the Internet Gateway List page.
3. Click the Create Internet Gateway button. You will move to the Create Internet Gateway page.
4. On the Create Internet Gateway page, enter the required information for service creation.
   • Select the previously created VPC.
   • Select Use for the Firewall usage item.
5. On the Summary panel, check the detailed creation information and estimated billing amount, then click the Complete button.
   • When creation is complete, check the created resource on the Internet Gateway List page.

1-4. Creating Public IP

1. Click the All Services > Networking > VPC menu. You will move to the VPC’s Service Home page.
2. On the Service Home page, click the Public IP menu. You will move to the Public IP List page.
3. Click the Reserve Public IP button. You will move to the Reserve Public IP page.
4. On the Reserve Public IP page, enter the required information for service reservation.
5. On the Summary panel, check the detailed creation information and estimated billing amount, then click the Complete button.
   • When creation is complete, check the created resource on the Public IP List page.

1-5. Creating Security Group

1. Click the All Services > Networking > Security Group menu. You will move to the Security Group’s Service Home page.
2. On the Service Home page, click the Create Security Group button. You will move to the Create Security Group page.
3. On the Create Security Group page, enter the required information for service creation.
4. Check the entered information and click the Complete button.
   • When creation is complete, check the created resource on the Security Group List page.

2. Creating Bastion Host

This explains the process of configuring the Bastion Host where the DB connection client should be installed.

2-1. Creating Server Keypair

1. Click the All Services > Compute > Virtual Server menu. You will move to the Virtual Server’s Service Home page.
2. On the Service Home page, click the Keypair menu. You will move to the Keypair List page.
3. Click the Create Keypair button. You will move to the Create Keypair page.
4. On the Create Keypair page, enter the required information for service creation.
5. Check the creation information and click the Complete button.
   • Key download is only possible on the first attempt, and re-issuance is not provided.
   • Please store the downloaded key in a safe place.

2-2. Creating Bastion Host

1. Click the All Services > Compute > Virtual Server menu. You will move to the Virtual Server’s Service Home page.
2. On the Service Home page, click the Create Virtual Server button. You will move to the Create Virtual Server page.
3. On the Create Virtual Server page, enter the required information for service creation.
   • Select Windows for the image.
   • Select the previously created VPC and Subnet.
   • Click Use NAT and select the Public IP reserved in 1-4. Creating Public IP.
   • Connect the Keypair created in 2-1. Creating Server Keypair.
4. On the Summary panel, check the detailed creation information and estimated billing amount, then click the Complete button.
   • When creation is complete, check the created resource on the Virtual Server List page.

2-3. Checking Bastion Host Connection ID and Password

1. Click the All Services > Compute > Virtual Server menu. You will move to the Virtual Server’s Service Home page.
2. On the Service Home page, click the Virtual Server menu. You will move to the Virtual Server List page.
3. On the Virtual Server List page, click the resource created in 2-2. Creating Bastion Host. You will move to the detailed information page of that resource.
4. On the detailed information page, click the RDP password lookup button in the Keypair name item. The RDP password lookup popup window will open.
5. In the RDP password lookup popup window, attach the keypair file downloaded in 2-1. Creating Server Keypair.
6. After attaching, click the Password check button. The ID and Password for accessing that resource will be displayed.
   • The ID and Password will be used as information for accessing the Bastion host later in 5-1. Connecting to Bastion Host.

3. Creating Database

This explains the process of creating the Database service.

3-1. Creating PostgreSQL(DBaaS) Service

1. Click the All Services > Database > PostgreSQL(DBaaS) menu. You will move to the PostgreSQL(DBaaS)’s Service Home page.
2. On the Service Home page, click the Create PostgreSQL(DBaaS) button. You will move to the Create PostgreSQL(DBaaS) page.
3. On the Create PostgreSQL(DBaaS) page, enter the required information for service creation.
   • Select and connect the previously created VPC and Subnet.
   • Enter Database-related creation information in the required information input screen.
   • Add the Bastion host IP in the IP access control item.
   • The Database Port defaults to 2866, but users can specify it.
4. On the Summary panel, check the detailed creation information and estimated billing amount, then click the Complete button.
   • When creation is complete, check the created resource on the PostgreSQL(DBaaS) List page.

4. Setting Rules

This explains the process of setting rules for users to access the Bastion host and for the Bastion host to access the Database.

4-1. Adding Security Group Security Rules

1. Click the All Services > Networking > Security Group menu. You will move to the Security Group’s Service Home page.
2. On the Service Home page, click the Security Group menu. You will move to the Security Group List page.
3. Select the Security Group resource created in [1-5. Creating Security Group]. You will move to the detailed information page of that resource.
4. On the detailed information page, click the Rules tab. You will move to the Rules tab.
5. On the Rules tab, click the Add Rule button. You will move to the Add Rule popup window.
6. In the Add Rule popup window, enter the following rules and click the Confirm button.

   Direction	Remote	Destination Address	Protocol	Port	Description
   Inbound	CIDR	User PC IP	TCP	3389 (RDP)	Bastion connection PC → Bastion host
   Outbound	CIDR	DB IP	TCP	Database Port (Direct Input)	Bastion host → Database

   Table. Security Group Security Rules to be Added

4-2. Adding IGW Firewall Rules

1. Click the All Services > Networking > Firewall menu. You will move to the Firewall’s Service Home page.
2. On the Service Home page, click the Firewall menu. You will move to the Firewall List page.
3. On the Firewall List page, select the Internet Gateway resource name created in 1-3. Creating Internet Gateway. You will move to the detailed information page of that resource.
4. On the detailed information page, click the Rules tab. You will move to the Rules tab.
5. On the Rules tab, click the Add Rule button. You will move to the Add Rule popup window.
6. In the Add Rule popup window, enter the following rules and click the Confirm button.

   Source Address	Destination Address	Protocol	Port	Action	Direction	Description
   Bastion connection PC IP	Bastion host IP	TCP	3389(RDP)	Allow	Inbound	User PC → Bastion host

   Table. Internet Gateway Firewall Rules to be Added

5. Connecting to Database

This explains the process of connecting to the Database through a DB connection client program.

This guide explains how to connect using pgAdmin. There are various Database client programs and CLI utilities, so users can install and use the appropriate tool.

5-1. Connecting to Bastion Host

1. Run Remote Desktop Connection in the Windows environment of the PC that wants to connect to the Bastion host, enter the NAT IP of the Bastion Host, and click the Connect button.
2. When Remote Desktop Connection succeeds, the User credential input window will open. Enter the ID and Password confirmed in 2-3. Checking Bastion Host Connection ID and Password and click the Confirm button.

5-2. Installing DB Connection Client Program (pgAdmin) on Bastion Host

1. Go to the pgAdmin official page and download the pgAdmin program.
   • pgAdmin program download path: https://www.pgadmin.org/download/
2. Connect the user PC’s hard drive to upload the file to the Bastion host.
3. On the Local Resources tab of Remote Desktop Connection, click the More button in the local devices and resources item.
4. Select the local disk of the location where the file was downloaded and click the Confirm button.
5. Copy the downloaded file to upload it to the Bastion Host, then click the pgAdmin installation file to install it.

5-3. Connecting to Database Using DB Connection Client Program (pgAdmin)

1. Run pgAdmin and click the Add New Server button.
2. In the Register - Server popup window, enter the Database server information created in 3-1. Creating PostgreSQL(DBaaS) Service in the General tab and Connection tab, then click the Save button.

   Screen(Tab)	Required Input Item	Input Value
   General	Name	User-defined (ex. service name)
   Connection	Host name/address	Database server IP
   Connection	Port	Database Port
   Connection	Maintenance database	Database name
   Connection	Password	Database password

   Table. DB Connection Client Program Input Items
3. Click the database name created in pgAdmin to perform the connection.
   • After connection, you can perform simple queries, etc.

5 - Using Extensions

PostgreSQL(DBaaS) Extension usage

The list of extensions that can be installed in the current database can be checked with the following SQL statement.

SQL> select * from pg_available_extensions;

PostgreSQL(DBaaS) has the following additional installation items outside of the default extension by version:

In addition to the above items, if additional Extension installation is required, please refer to Support Center > Inquiry and inquire.

• Once the inquiry is received, we will proceed with the installation after review. Please note that some Extensions may not work normally during Replica configuration and recovery.