Would you care to elaborate on what bugs you're seeing?

AAJR Would you care to elaborate on what bugs you're seeing?

Thank you I elaborated about issues here: Deployment Issues on Cloudflare Pages with SvelteKit 5

But I am helping here also another people from Discord community, if they have any difficulties. Feel free to give me any questions.

Focux•12/12/24, 2:50 PM

i would love to being able to connect to a remote db from local

Focux•12/12/24, 2:50 PM

is there any eta about when that's gonna be supported?

FFocux is there any eta about when that's gonna be supported?

AJROP•12/12/24, 2:51 PM

No hard ETA, I'm afraid. We took a shot at adding it recently and ran into some pretty serious unexpected behavior, so we are gonna have to come back to that when we have some real time to dedicate to it. It is still something we are hoping to add, but it is (apparently) more complicated than it sounds.

AAJR No hard ETA, I'm afraid. We took a shot at adding it recently and ran into some...

Rastislav₡ore•12/12/24, 2:53 PM

I am here for assistance, because other community members reach me out to help with it. Unfortunately I am block now, but helping them as much as I can.

FFocux is there any eta about when that's gonna be supported?

Rastislav₡ore•12/12/24, 2:54 PM

Do you have any connectors in your App? I am doing it using Drizzle

Focux•12/12/24, 2:58 PM

yeah, i'm using drizzle as well so i think i will need to fallback to an env var when developing locally

Rastislav₡ore•12/12/24, 3:06 PM

I did some trick with it. If you are using database as service quite easy to configure when running on

process.env.NODE_ENV === 'development'

process.env.NODE_ENV === 'development'

then fallback to local. But implementation can differ on your app.

Picolé•12/12/24, 10:19 PM

is Hyperdrive included in the $5 plan for account wide or each website must have the $20 pro?

PPicolé is Hyperdrive included in the $5 plan for account wide or each website must have...

Isaac McFadyen•12/12/24, 10:29 PM

It's on the Workers Paid plan so the $5 account-wide.

kchro3•12/13/24, 2:03 AM

Hi folks, is anyone seeing unusually high latency right now? I am seeing issues in prod when making DB queries. I'm on the latest wrangler versions, and I haven't had issues w Hyperdrive recently

Hello, I’m Allie!•12/13/24, 7:04 AM

Does Hyperdrive cache in multiple locations, or only near your DB?

HHello, I’m Allie!Does Hyperdrive cache in multiple locations, or only near your DB?

AJROP•12/13/24, 12:43 PM

Multiple locations. How many is increasing, but we have to briefly pause the rollout of that

moody 💭•12/13/24, 2:20 PM

i'm seeing random hyperdrive error spikes corresponding with 500s for specific routes on my api that i can't reproduce locally

moody 💭•12/13/24, 2:21 PM

it would be really nice to see what these errors are somehow

Mmoody 💭it would be really nice to see what these errors are somehow

AJROP•12/13/24, 4:59 PM

What's getting fed back to your postgres client? Is there at least useful information there?

We have a track of work for improving error reporting in our dashboard. It's definitely something that needs more polish. Just a matter of balancing priorities.

dave•12/13/24, 5:09 PM

For Google Cloud SQL, has anyone here gotten IAM based auth working instead with a Worker?

dave•12/13/24, 5:11 PM

ah, seems like I can.. https://cloud.google.com/sql/docs/postgres/iam-logins?authuser=1#logging-in-as-a-user

dave•12/13/24, 5:11 PM

question though, how do I tell Hyperdrive that the password is gonna expire after x amount of hours?

dave•12/13/24, 5:26 PM

https://developers.cloudflare.com/workers/databases/connecting-to-databases/#_top:~:text=For%20services%20that%20require%20mTLS%20authentication%2C%20use%20mTLS%20certificates%20to%20present%20a%20client%20certificate.

Does this mean I can connect via mTLS?

Cloudflare Docs

Connect to databases · Cloudflare Workers docs

Learn about the different kinds of database integrations Cloudflare supports.

AAJR What's getting fed back to your postgres client? Is there at least useful inform...

moody 💭•12/13/24, 5:35 PM

hard to tell, i enabled the new cloudflare logging that will hopefully help

moody 💭•12/13/24, 5:37 PM

ah yeah there are many 'connection terminated unexpectedly' errors in the worker log

moody 💭•12/13/24, 5:37 PM

dave•12/13/24, 5:46 PM

✘ [ERROR] PostgresError: pg_hba.conf rejects connection for host "1.2.3.4", user "demo", database "eh", no encryption

✘ [ERROR] PostgresError: pg_hba.conf rejects connection for host "1.2.3.4", user "demo", database "eh", no encryption

dave•12/13/24, 5:46 PM

hmm

dave•12/13/24, 5:48 PM

export WRANGLER_HYPERDRIVE_LOCAL_CONNECTION_STRING_HYPERDRIVE="postgres://REMOVED:REMOVED@1.2.3.4:5432/eh?sslmode=require"

export WRANGLER_HYPERDRIVE_LOCAL_CONNECTION_STRING_HYPERDRIVE="postgres://REMOVED:REMOVED@1.2.3.4:5432/eh?sslmode=require"

dave•12/13/24, 5:48 PM

aren't I already doing it?

Ddave ```sh export WRANGLER_HYPERDRIVE_LOCAL_CONNECTION_STRING_HYPERDRIVE="postgres://...

AJROP•12/13/24, 5:51 PM

We currently cannot support SSL handshake from local dev. It's on our roadmap, but a recent attempt to add that support uncovered some pretty serious complications we need to work through.

AAJR We currently cannot support SSL handshake from local dev. It's on our roadmap, ...

dave•12/13/24, 5:53 PM

yikes, that's uh, not great.

So I'm going to have to do my database stuff unencrypted over the internet for a remote database?

dave•12/13/24, 5:56 PM

@AJR is there a github ticket I can follow for it?

Ddave yikes, that's uh, not great. 😅 So I'm going to have to do my database stuff un...

AJROP•12/13/24, 5:57 PM

It's not my favorite thing right now. You can use

wrangler dev --remote

wrangler dev --remote

which will still want a

localConnectionString

localConnectionString

but will use the actual Hyperdrive binding you give it and otherwise work like a normal worker.

Ddave @AJR is there a github ticket I can follow for it?

AJROP•12/13/24, 5:57 PM

It's mostly internal work we think, so no such luck. If you file an issue on GitHub, link it here and I'll see to it that it gets updated when there's updates to be had.

dave•12/13/24, 5:59 PM

hmm, I guess I can try to use cloud-sql-proxy..

Ddave hmm, I guess I can try to use cloud-sql-proxy..

dave•12/13/24, 6:55 PM

Ended up doing this. Much safer now that I can do local dev with SSL upstream, while wrangler doesn't need to use ssl locally.

cloud-sql-proxy --port 59435 --address 127.0.0.1 'MY_CLOUD_ID:us-east4:INSTANCE_NAME'

cloud-sql-proxy --port 59435 --address 127.0.0.1 'MY_CLOUD_ID:us-east4:INSTANCE_NAME'

Ddave Ended up doing this. Much safer now that I can do local dev with SSL upstream, w...

Isaac McFadyen•12/13/24, 7:00 PM

Also allows IAM auth if you wanted to.

IIsaac McFadyen Also allows IAM auth if you wanted to.

dave•12/13/24, 7:01 PM

Aren't I still supplying the username/password manually for Hyperdrive?

Ddave Aren't I still supplying the username/password manually for Hyperdrive?

Isaac McFadyen•12/13/24, 7:06 PM

Yes, but what I mean is that if you use IAM auth locally you can have a crazy long password that's stored only in Hyperdrive (to prevent accidentally leaking it somehow)

IIsaac McFadyen Yes, but what I mean is that if you use IAM auth locally you can have a crazy lo...

dave•12/13/24, 7:26 PM

Not sure I understand, I’m already using a crazy long password.

dave•12/13/24, 7:27 PM

I would like to prevent leaking it though.

Ddave Not sure I understand, I’m already using a crazy long password.

Isaac McFadyen•12/13/24, 7:27 PM

Any time you have a password used for production infrastructure, using that same password for local development means that it's much easier to make mistakes.

IIsaac McFadyen Any time you have a password used for production infrastructure, using that same...

dave•12/13/24, 7:27 PM

Oh, I’m using a totally different database.

Isaac McFadyen•12/13/24, 7:27 PM

E.g you forget to

gitignore

gitignore

.env

.env

file, or it appears in your clipboard history, etc.

Isaac McFadyen•12/13/24, 7:27 PM

Oh OK, great.

IIsaac McFadyen Oh OK, great.

dave•12/13/24, 7:28 PM

Could I avoid using a password locally?

dave•12/13/24, 7:45 PM

hmm I think I might be on the right track..

IIsaac McFadyen Yes, but what I mean is that if you use IAM auth locally you can have a crazy lo...

dave•12/13/24, 7:46 PM

                      ^ You must provide a password - e.g.
  'user:password@database.example.com:port/databasename'

                      ^ You must provide a password - e.g.
  'user:password@database.example.com:port/databasename'

Seems like CF enforces having a password

dave•12/13/24, 7:53 PM

eh, couldn't get

--auto-iam-authn

--auto-iam-authn

to work

IIsaac McFadyen Any time you have a password used for production infrastructure, using that same...

dave•12/13/24, 8:49 PM

well, one good news is that with

cloud-sql-proxy

cloud-sql-proxy

, I can remove

0.0.0.0/0

0.0.0.0/0

in the allow IPs list in Google Cloud SQL.

dave•12/13/24, 9:00 PM

@Isaac McFadyen Do you have any opinions on what managed PostgreSQL options are the "best"? Google Cloud SQL seems to be really nice, the cost is reasonable ish, and has near zero downtime even during upgrades.

Ddave @Isaac McFadyen Do you have any opinions on what managed PostgreSQL options are ...

Isaac McFadyen•12/13/24, 9:10 PM

Not particularely. I use Cloud SQL for another project and it is quite nice, yeah.

Would you care to elaborate on what bugs you're seeing?

Similar Threads