AWS RDS Postgres connected to REI3?

clocksoneverywall

Have run into an install issue where my work site no longer allows local, on-prem databases as we have migrated to AWS RDS. Started a new PostgreSQL RDS instance, can connect to it from my REI3 server no problem via psql, however, failing the install as the REI3 install code checks for the pg_hba.conf file on the Postgres server, can't find it, and exits out of the install. There is no mechanism on the AWS side to modify or edit a pg_hba.conf file.

Any guidelines or anyone else perform an AWS RDS install of REI3?

gabriel

Hello and welcome to the forum 🙂

r3 does not interact with Postgres configuration files or binaries, unless it´s running an embedded DB (eg. runs its own internal DB). With a seperate DB service, please make sure that the option embedded is set to false inside the config.json file.

If you are using the Windows Installer, you want to install it in the dedicated deployment mode.

clocksoneverywall

Thanks! And yes, embedded is set to false, and ssl is true, however, from aws linux command line, psql connections to the RDS instance over 5432 work totally fine, no issues. Still troubleshooting but it looks like this might be a cert verification issue (even though sslSkipVerify=true).

Will report back if I figure it out! Was just hoping someone had already attempted an RDS connection to REI3.

gabriel

Since I do not know your configuration, the first thing I would check is whether postgres has SSL enabled. Psql works either way.

If sslSkipVerify is true cert issues should not play a role, if a SSL connection can be established at all.

clocksoneverywall

Got it working! And yes, tested putting the AWS RDS custom parameter "rds.force_ssl" to 0 and checking via cmd line psql connection with: SELECT name as "Parameter name", setting as value, short_desc FROM pg_settings WHERE name LIKE '%ssl%';
That will show you the current ssl settings on your RDS instance.

Then just follow the RDS instructions for adding the AWS RDS root certs on your REI3 server on:
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html

Specifically for PostgreSQL RDS: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/PostgreSQL.Concepts.General.SSL.html

Thanks for the quick replies Gabriel! Tschüss!