Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Neon keeps an NVME cache in the Pageservers, and it also keeps copies of the data in S3, one for the main storage, and one for the backup case. The data also gets stored on special replicated storage (Safekeepers). So it might be in 6 different places at the same time (3 safekeepers, 1 pageserver, 2 S3 buckets), details depending on the data's lifecycle through the system.

This architecture delivers really good safety: Once your transaction commits, the data is already replicated across different AZs, and this is done without there being an S3 request each time. It also means that Neon can deliver features like branching.

(Neon engineer)



> So it might be in 6 different places at the same time (3 safekeepers, 1 pageserver, 2 S3 buckets), details depending on the data's lifecycle through the system.

I hope it is encrypted on S3 at least? :)


Yes, it's encrypted at rest both on the NVME drives as well as on S3.

https://neon.tech/docs/introduction/architecture-overview

There is no system of per-project encryption keys though.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: