No hard ETA, I'm afraid. We took a shot at adding it recently and ran into some pretty serious unex

No hard ETA, I'm afraid. We took a shot at adding it recently and ran into some pretty serious unexpected behavior, so we are gonna have to come back to that when we have some real time to dedicate to it. It is still something we are hoping to add, but it is (apparently) more complicated than it sounds.

AAJR No hard ETA, I'm afraid. We took a shot at adding it recently and ran into some...

Rastislav₡ore•12/12/24, 2:53 PM

I am here for assistance, because other community members reach me out to help with it. Unfortunately I am block now, but helping them as much as I can.

FFocux is there any eta about when that's gonna be supported?

Rastislav₡ore•12/12/24, 2:54 PM

Do you have any connectors in your App? I am doing it using Drizzle

Focux•12/12/24, 2:58 PM

yeah, i'm using drizzle as well so i think i will need to fallback to an env var when developing locally

Rastislav₡ore•12/12/24, 3:06 PM

I did some trick with it. If you are using database as service quite easy to configure when running on

process.env.NODE_ENV === 'development'

process.env.NODE_ENV === 'development'

then fallback to local. But implementation can differ on your app.

Picolé•12/12/24, 10:19 PM

is Hyperdrive included in the $5 plan for account wide or each website must have the $20 pro?

PPicolé is Hyperdrive included in the $5 plan for account wide or each website must have...

Isaac McFadyen•12/12/24, 10:29 PM

It's on the Workers Paid plan so the $5 account-wide.

kchro3•12/13/24, 2:03 AM

Hi folks, is anyone seeing unusually high latency right now? I am seeing issues in prod when making DB queries. I'm on the latest wrangler versions, and I haven't had issues w Hyperdrive recently

Hello, I’m Allie!•12/13/24, 7:04 AM

Does Hyperdrive cache in multiple locations, or only near your DB?

HHello, I’m Allie!Does Hyperdrive cache in multiple locations, or only near your DB?

AJROP•12/13/24, 12:43 PM

Multiple locations. How many is increasing, but we have to briefly pause the rollout of that

moody 💭•12/13/24, 2:20 PM

i'm seeing random hyperdrive error spikes corresponding with 500s for specific routes on my api that i can't reproduce locally

moody 💭•12/13/24, 2:21 PM

it would be really nice to see what these errors are somehow

Mmoody 💭it would be really nice to see what these errors are somehow

AJROP•12/13/24, 4:59 PM

What's getting fed back to your postgres client? Is there at least useful information there?

We have a track of work for improving error reporting in our dashboard. It's definitely something that needs more polish. Just a matter of balancing priorities.

dave•12/13/24, 5:09 PM

For Google Cloud SQL, has anyone here gotten IAM based auth working instead with a Worker?

dave•12/13/24, 5:11 PM

ah, seems like I can.. https://cloud.google.com/sql/docs/postgres/iam-logins?authuser=1#logging-in-as-a-user

dave•12/13/24, 5:11 PM

question though, how do I tell Hyperdrive that the password is gonna expire after x amount of hours?

dave•12/13/24, 5:26 PM

https://developers.cloudflare.com/workers/databases/connecting-to-databases/#_top:~:text=For%20services%20that%20require%20mTLS%20authentication%2C%20use%20mTLS%20certificates%20to%20present%20a%20client%20certificate.

Does this mean I can connect via mTLS?

Cloudflare Docs

Connect to databases · Cloudflare Workers docs

Learn about the different kinds of database integrations Cloudflare supports.

AAJR What's getting fed back to your postgres client? Is there at least useful inform...

moody 💭•12/13/24, 5:35 PM

hard to tell, i enabled the new cloudflare logging that will hopefully help

moody 💭•12/13/24, 5:37 PM

ah yeah there are many 'connection terminated unexpectedly' errors in the worker log

moody 💭•12/13/24, 5:37 PM

dave•12/13/24, 5:46 PM

✘ [ERROR] PostgresError: pg_hba.conf rejects connection for host "1.2.3.4", user "demo", database "eh", no encryption

✘ [ERROR] PostgresError: pg_hba.conf rejects connection for host "1.2.3.4", user "demo", database "eh", no encryption

dave•12/13/24, 5:46 PM

hmm

dave•12/13/24, 5:48 PM

export WRANGLER_HYPERDRIVE_LOCAL_CONNECTION_STRING_HYPERDRIVE="postgres://REMOVED:REMOVED@1.2.3.4:5432/eh?sslmode=require"

export WRANGLER_HYPERDRIVE_LOCAL_CONNECTION_STRING_HYPERDRIVE="postgres://REMOVED:REMOVED@1.2.3.4:5432/eh?sslmode=require"

dave•12/13/24, 5:48 PM

aren't I already doing it?

Ddave ```sh export WRANGLER_HYPERDRIVE_LOCAL_CONNECTION_STRING_HYPERDRIVE="postgres://...

AJROP•12/13/24, 5:51 PM

We currently cannot support SSL handshake from local dev. It's on our roadmap, but a recent attempt to add that support uncovered some pretty serious complications we need to work through.

AAJR We currently cannot support SSL handshake from local dev. It's on our roadmap, ...

dave•12/13/24, 5:53 PM

yikes, that's uh, not great.

So I'm going to have to do my database stuff unencrypted over the internet for a remote database?

dave•12/13/24, 5:56 PM

@AJR is there a github ticket I can follow for it?

Ddave yikes, that's uh, not great. 😅 So I'm going to have to do my database stuff un...

AJROP•12/13/24, 5:57 PM

It's not my favorite thing right now. You can use

wrangler dev --remote

wrangler dev --remote

which will still want a

localConnectionString

localConnectionString

but will use the actual Hyperdrive binding you give it and otherwise work like a normal worker.

Ddave @AJR is there a github ticket I can follow for it?

AJROP•12/13/24, 5:57 PM

It's mostly internal work we think, so no such luck. If you file an issue on GitHub, link it here and I'll see to it that it gets updated when there's updates to be had.

dave•12/13/24, 5:59 PM

hmm, I guess I can try to use cloud-sql-proxy..

Ddave hmm, I guess I can try to use cloud-sql-proxy..

dave•12/13/24, 6:55 PM

Ended up doing this. Much safer now that I can do local dev with SSL upstream, while wrangler doesn't need to use ssl locally.

cloud-sql-proxy --port 59435 --address 127.0.0.1 'MY_CLOUD_ID:us-east4:INSTANCE_NAME'

cloud-sql-proxy --port 59435 --address 127.0.0.1 'MY_CLOUD_ID:us-east4:INSTANCE_NAME'

Ddave Ended up doing this. Much safer now that I can do local dev with SSL upstream, w...

Isaac McFadyen•12/13/24, 7:00 PM

Also allows IAM auth if you wanted to.

IIsaac McFadyen Also allows IAM auth if you wanted to.

dave•12/13/24, 7:01 PM

Aren't I still supplying the username/password manually for Hyperdrive?

Ddave Aren't I still supplying the username/password manually for Hyperdrive?

Isaac McFadyen•12/13/24, 7:06 PM

Yes, but what I mean is that if you use IAM auth locally you can have a crazy long password that's stored only in Hyperdrive (to prevent accidentally leaking it somehow)

IIsaac McFadyen Yes, but what I mean is that if you use IAM auth locally you can have a crazy lo...

dave•12/13/24, 7:26 PM

Not sure I understand, I’m already using a crazy long password.

dave•12/13/24, 7:27 PM

I would like to prevent leaking it though.

Ddave Not sure I understand, I’m already using a crazy long password.

Isaac McFadyen•12/13/24, 7:27 PM

Any time you have a password used for production infrastructure, using that same password for local development means that it's much easier to make mistakes.

IIsaac McFadyen Any time you have a password used for production infrastructure, using that same...

dave•12/13/24, 7:27 PM

Oh, I’m using a totally different database.

Isaac McFadyen•12/13/24, 7:27 PM

E.g you forget to gitignoregitignore an

.env

.env

file, or it appears in your clipboard history, etc.

Isaac McFadyen•12/13/24, 7:27 PM

Oh OK, great.

IIsaac McFadyen Oh OK, great.

dave•12/13/24, 7:28 PM

Could I avoid using a password locally?

dave•12/13/24, 7:45 PM

hmm I think I might be on the right track..

IIsaac McFadyen Yes, but what I mean is that if you use IAM auth locally you can have a crazy lo...

dave•12/13/24, 7:46 PM

                      ^ You must provide a password - e.g.
  'user:password@database.example.com:port/databasename'

                      ^ You must provide a password - e.g.
  'user:password@database.example.com:port/databasename'

Seems like CF enforces having a password

dave•12/13/24, 7:53 PM

eh, couldn't get --auto-iam-authn--auto-iam-authn to work

IIsaac McFadyen Any time you have a password used for production infrastructure, using that same...

dave•12/13/24, 8:49 PM

well, one good news is that with cloud-sql-proxycloud-sql-proxy, I can remove 0.0.0.0/00.0.0.0/0 in the allow IPs list in Google Cloud SQL.

dave•12/13/24, 9:00 PM

@Isaac McFadyen Do you have any opinions on what managed PostgreSQL options are the "best"? Google Cloud SQL seems to be really nice, the cost is reasonable ish, and has near zero downtime even during upgrades.

Ddave @Isaac McFadyen Do you have any opinions on what managed PostgreSQL options are ...

Isaac McFadyen•12/13/24, 9:10 PM

Not particularely. I use Cloud SQL for another project and it is quite nice, yeah.

IIsaac McFadyen Not particularely. I use Cloud SQL for another project and it is quite nice, yea...

dave•12/14/24, 4:05 AM

Thanks! We use Cloud SQL for two other projects; this is the first time we’re using it for something that runs outside of Google Cloud though.

Gerbuuun•12/15/24, 10:28 AM

I'm having trouble connecting to my supabase database wether I'm using a pooler connection or a direct connection via hyperdrive. The Hyperdrive binding is

null

null

and the pooler connection times out without ever connecting. Anyone know what might be going wrong?

Gerbuuun•12/15/24, 12:07 PM

Fixed it. I used an example where the binding was not accessed correctly

alex (he/him)•12/16/24, 7:45 AM

Hyperdrive down?

No hard ETA, I'm afraid. We took a shot at adding it recently and ran into some pretty serious unex

Similar Threads