You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: content/docs/internals/data-storage.md
+15-1
Original file line number
Diff line number
Diff line change
@@ -31,10 +31,18 @@ To prevent early session loss in production deployments, persistent storage back
31
31
32
32
## Backends
33
33
34
-
Configuration options for each backend are detailed in [databroker configuration reference](/docs/reference/databroker).
34
+
The **Databroker Service** stores user session data, and uses an in-memory databroker by default.
35
35
36
36
Pomerium encrypts record values only for the Redis storage backend (not for the in-memory or Postgres storage backends). When using the Postgres backend we recommend that users configure their own encryption at rest, for example by using full-disk encryption on the volume where Postgres data is stored.
37
37
38
+
:::tip
39
+
40
+
You can create your own databroker by implementing Pomerium's [**databroker gRPC interface**](https://github.com/pomerium/pomerium/blob/main/pkg/grpc/databroker/databroker.proto). For an example implementation, see the in-memory database used by the databroker service:
When using multiple hosts make sure to specify `target_session_attrs=read-write` so that the Databroker does not attempt to write to a read-only replica.
80
88
89
+
:::note
90
+
91
+
Configuration options for each backend are detailed in the [**databroker configuration reference**](/docs/reference/databroker) page.
92
+
93
+
:::
94
+
81
95
## Troubleshooting
82
96
83
97
Most issues with the Databroker service are caused by a [`shared_secret`](/docs/reference/shared-secret) mismatch between services. See [Troubleshooting - Shared Secret Mismatch](/docs/reference/shared-secret) for details.
The **Databroker Service** stores user session data.
29
-
30
-
### How to configure {#databroker-service-how-to-configure}
31
-
32
-
By default, the `databroker` service uses an in-memory databroker.
33
-
34
-
To create your own databroker, implement Pomerium's [databroker gRPC interface](https://github.com/pomerium/pomerium/blob/main/pkg/grpc/databroker/databroker.proto).
35
-
36
-
For an example implementation, see the in-memory database used by the databroker service here:
## Databroker Service URL {#databroker-service-url}
41
15
42
16
**Databroker Service URL** points to a data broker which is responsible for storing associated authorization context (for example, sessions, users, and user groups).
0 commit comments