Live data from Hacker News

Thin PostgreSQL Clones

github.com

21–30 of 37 posts

Re: Thin PostgreSQL Clones

#21
post #10
post #5

Is this advocating the use of production data in dev/test/qa environments? I am struggling to come up with scenarios where that would be a good idea.

I have always made clones of production data on my dev machine for testing -- it has the added benefit of also regularly testing my DB backup restoration process. How else do you test and optimize SQL queries that are only slow with production-size data? If the data is too big to fit on my machine, I might clone to a nearby colocated server. Testing your DB backup and restoration mechanism becomes even MORE important…

Do you also store customer personal details and credit cards locally too?

Re: Thin PostgreSQL Clones

#22
post #10

Earlier quoted context omitted.

I have always made clones of production data on my dev machine for testing -- it has the added benefit of also regularly testing my DB backup restoration process. How else do you test and optimize SQL queries that are only slow with production-size data? If the data is too big to fit on my machine, I might clone to a nearby colocated server. Testing your DB backup and restoration mechanism becomes even MORE important…

Do you also store customer personal details and credit cards locally too?

Not every database has customer secrets in it. But you are not wrong that it should at least be understood what is sensitive before cloning.

Re: Thin PostgreSQL Clones

#23
post #10

Earlier quoted context omitted.

I have always made clones of production data on my dev machine for testing -- it has the added benefit of also regularly testing my DB backup restoration process. How else do you test and optimize SQL queries that are only slow with production-size data? If the data is too big to fit on my machine, I might clone to a nearby colocated server. Testing your DB backup and restoration mechanism becomes even MORE important…

Do you also store customer personal details and credit cards locally too?

You can buy a hardware appliance that encrypts credit card numbers for database storage. Then if someone accidentally (or maliciously on purpose) copies your database, you are not exposed to PCI liability.

Re: Thin PostgreSQL Clones

#24
post #14

This looks like a really useful tool for staging and development environments, and it's even OSS that can be self-hosted! Does anybody here have any real-life experiences with it they could to share?

I implemented a similar idea for a few companies. The response was always very positive.

In one company, it grew into a cluster of a few servers for higher capacity and availability. This load balancing and management code is a quite more complex than the original single-server snapshotting script. Unfortunately, it's not open source. For several years, the single server was enough. Go for it. :-)

Re: Thin PostgreSQL Clones

#25

Earlier quoted context omitted.

> How else do you test and optimize SQL queries that are only slow with production-size data? With something like this https://www.getsynth.com/docs/blog/2021/03/09/postgres-data-... (disclaimer: no affiliation with them, I've not used their product but it appears to be fully open source)

I agree that this is a possible way. The main difficulty of the generated data is related to their quality and structure. Namely, how artificial data correspond (quantitatively and qualitatively) to real data. Random data may give incorrect results when optimizing a query.

Yep! The idea of that is to generate data that isn't just random but has the right structure. But, I don't know if they deliver.

Re: Thin PostgreSQL Clones

#26
post #5

Is this advocating the use of production data in dev/test/qa environments? I am struggling to come up with scenarios where that would be a good idea.

I generate "backtests" of a stock trading model, IE I see how it would have done historically. Each backtest reads lots of vendor data from Postgres, and writes some output to Postgres. I can't run a backtest on a "dev" version of the vendor data, I need all of it to make my results correct. The vendor data is too big to easily have two copies.

To make this more complex, it's not a simple process where I read vendor data then generate analysis. My model is generated in several steps, which involves reading vendor data, generating output, then combining the output I generated in a previous step with more vendor data to generate the next step of output.

Backtests are "prod-like" in that they must use real vendor data and must generate correct results that drive business decisions. But they are "dev-like" since I don't want my backtest to interfere with my production system, which generates the version of the model that I currently trade. For a backtest I might want to make a new database table, or change the behavior of an existing process that generates data.

I've tried 2 solutions to this: One is have classes to handle all data reads and writes, and configuration that causes functions to read or write from a dev or production DB as needed. This is a pain to set up, but works well.

The other solution is DB clones. One advantage of DB clones is that it lets me write SQL that joins data I've generated on vendor data. I don't love having business logic in SQL for the obvious reasons, but it can be very performant and easy to maintain. Using classes for data access means that I can't easily do a SQL join between vendor data (which is always on the production DB) and data I generate (which might be on the dev DB.)

Re: Thin PostgreSQL Clones

#28
Does this have something to handle potential PII? One of the problems with using prod data for development and testing is that it is often contains sensitive strings which need to be scrubbed somehow.

Re: Thin PostgreSQL Clones

#29
I just came across testcontainers this week, which seems to solve similar problems. Has anyone tried both solutions and can comment about their experiences with them?

Re: Thin PostgreSQL Clones

#30

Does this have something to handle potential PII? One of the problems with using prod data for development and testing is that it is often contains sensitive strings which need to be scrubbed somehow.

There are several ways to process PII for use in the Database Lab, including masking and data obfuscation. The main approaches can be found here: https://postgres.ai/docs/database-lab/masking.
Post reply on HN