System Requirements for Microsoft Azure Database for PostgreSQL

To back up and restore PostgreSQL data on an Azure database, verify that your environment has the required software and a firewall.

Software Requirements

• Packages required on access nodes:

  • Virtual Server Agent

  • PostgreSQL Agent

• Access nodes that you run backup and restore operations on must have one of the following operating systems:

  • CentOS 9.x, 8.x

  • Oracle Linux Enterprise 9.x, 8.x

  • Red Hat Enterprise Linux 9.x, 8.x

  • Rocky Linux 9.x, 8.x

  • Windows 2022, 2019, 2016

Database Port Requirements

Ensure that the following ports are open and accessible for communication between the access nodes and the PostgreSQL database:

• Default port: PostgreSQL uses port 5432/TCP by default. Ensure this port is open for TCP traffic between your access nodes (backup/restore hosts) and the Azure Database for PostgreSQL server.

• Custom ports: If your PostgreSQL server is configured to use a non-default port, update your firewall rules and access-node configurations to permit that port instead of 5432.

• Azure firewall and networking: On Azure, add the required port to the server firewall and virtual network rules so that the access node IPs or subnets can connect.

• High-availability and replication: Replication and high-availability traffic typically use the same PostgreSQL port. Confirm any additional ports required by your High-availability solution, and open them accordingly.

User Account Requirements

• For DumpBasedBackupSet, verify that the PostgreSQL instance has a user account with sufficient privileges to perform the following:

  • Perform backup and restore operations of the database objects as part of the subclient content

    The following table illustrates the necessary privileges the user account should have to perform backup and restore operations:

    Operations	Privileges PostgreSQL User Should Have
    Backup	LOGIN
    Restore	CREATEDB, CREATEROLE, INHERIT, LOGIN

    CONNECTION LIMIT, if set, should at least have a value of 2.

    Initially, the user account credentials are provided during the instance configuration after the installation of the agent. You can change the user account at the instance level.

    Note

    • You may need to grant other privileges to the postgreSQL backup user to secure the objects in the database. To know more about database roles and privileges, see PostgreSQL documentation.

• You do not require a root user account to install or operate the export-based backup and recovery solution. Use a non-root user account with sudo privileges for the installation and operations. For more information, see installation of UNIX agents by a non-root user with sudo privileges.

• You require SELECT privileges on all tables and objects within the schema or databases being backed up.

  The following statements are valid for PostgreSQL:

  • Version 14 or above

    • GRANT pg_read_all_data to user_name;

  • Version 13 or below

    • GRANT SELECT ON ALL TABLES IN SCHEMA schema_name TO user_name;

Supported PostgreSQL Versions

From PostgreSQL version 12.x to version 18.x.

SSL and TLS Support

The supported TLS versions to create Azure SSL encrypted PostgreSQL instances are TLS 1.0, 1.1 and 1.2.