Cloudflare Developers•4y ago

Yeah. With both of those your only option is to use Prisma's Data Proxy.

Isaac McFadyenOP•5/7/22, 2:56 AM

It's still in beta but supports both of those providers IIRC.

Isaac McFadyenOP•5/7/22, 2:56 AM

(it proxies database connections over HTTP using Prisma's client)

Erwin•5/7/22, 2:57 AM

The other challenge however is that Postgres creates a transaction context per connection. So if you open up a lot of connections, you kill your Postgres instance with OOM

Isaac McFadyenOP•5/7/22, 2:57 AM

Prisma's Data Proxy and PostgREST both solve that issue by using a single TCP connection and using HTTP to connect with your Worker.

IIsaac McFadyen Yeah. With both of those your only option is to use Prisma's Data Proxy.

Sebi•5/7/22, 2:58 AM

I'm currently using Prisma's dataproxy, but there's incompatibility with my fullstack framework of choice
Thanks for pointing out that Prisma's dataproxy is the only option, I will consider changing fullstack framework

SSebi I'm currently using Prisma's dataproxy, but there's incompatibility with my full...

Isaac McFadyenOP•5/7/22, 2:58 AM

Yeah, if you must use CockroachDB or PlanetScale then that's the only way, although I have heard both of those providers are looking into how best create an HTTP API on their end.

EErwin The other challenge however is that Postgres creates a transaction context per c...

Sebi•5/7/22, 3:03 AM

I'm very skeptical about Supabase's claims about their scalability, because it's pure Postgres underneath, and PG requires elbow grease to scale (it's far from the predictable scaling model that NewSQL databases such as CRDB offer
I know CF uses Postgres internally, so perhaps I'm wrong

IIsaac McFadyen Yeah, if you must use CockroachDB or PlanetScale then that's the only way, altho...

Sebi•5/7/22, 3:09 AM

Yes, and out of the two, CRDB IMHO taking the cake because it offers referential integrity while Planetscale doesn't
Planetscale has got a great developer experience, with rollbacks and branches, but my use case greatly benefits from referential integrity
I doubt Prisma's emulation of referential integrity for PlanetScale is reliable, because it is emulated on the client side and isolates can be killed AFAIK
I was thinking about using Deno Deploy in-between CF workers and CRDB, but Deno Deploy has some rough limits during their beta: https://deno.com/deploy/docs/pricing-and-limits

SSebi I'm very skeptical about Supabase's claims about their scalability, because it's...

Isaac McFadyenOP•5/7/22, 3:09 AM

The way I understand it, the max scalability of Postgres is dependent upon how powerful the master node is. For reads you can just add more replicas but for writes it's based on the master node's power.

IIsaac McFadyen The way I understand it, the max scalability of Postgres is dependent upon how p...

Sebi•5/7/22, 3:11 AM

There's a hard limit to how powerful the master can be, albeit high, it is a fundamental brick wall
Am looking for a solution that doesn't sacrifice the long term for the short term, to get more buy-in from stakeholders

Ddbdplayer might be a better question for Cloudflare staff here since it's such a sensitive...

Erwin•5/7/22, 3:34 AM

My first answer to that question is to do everything in your power to never be in that situation. Same with credit cards.

Erwin•5/7/22, 3:35 AM

Auth0 works great. Is free for small usage and reasonably priced for medium to large.

Erwin•5/7/22, 3:38 AM

Yeah.. we have a worker demo for that

Erwin•5/7/22, 3:39 AM

If I could remember what it was called..

Erwin•5/7/22, 3:39 AM

O-something. Need to find my work laptop I guess

Erwin•5/7/22, 3:41 AM

Well.. you still need to save something, that could derive the password if it isn’t secure enough.

Erwin•5/7/22, 3:42 AM

But let me go find my work laptop..

Ddbdplayer might be a better question for Cloudflare staff here since it's such a sensitive...

Hello, I’m Allie!•5/7/22, 3:45 AM

If possible, try to have the client hash & salt the password on their end, and then use it in your Worker.

Ddbdplayer there's only this really really ~really~ insecure authentication code lmao https...

Erwin•5/7/22, 3:58 AM

Oh gods.. I thought we added a big fat warning on that page..

Erwin•5/7/22, 4:00 AM

Yup! you can certainly do that too

Erwin•5/7/22, 4:01 AM

I would encrypt them with a symmetric key that you save as an environment variable to be safe

Ddbdplayer my preferred option would be to give the user a phone/desktop app that handles a...

Erwin•5/7/22, 4:01 AM

In the end we almost always go back to emails..

Erwin•5/7/22, 4:03 AM

So yeah.. save email securely.. create a short-lived token and store that in KV with an expiry of a few minutes.. on login, check if the token is in KV.

Ddbdplayer my preferred option would be to give the user a phone/desktop app that handles a...

Hello, I’m Allie!•5/7/22, 4:08 AM

You can always use the TOTP API for that?

Yeah. With both of those your only option is to use Prisma's Data Proxy.

Similar Threads

Similar Threads

Similar Threads