Skip to content

Releases: klouddb/klouddbshield

v2.3

01 Oct 07:21
929ab0f

Choose a tag to compare

Official Release Artifacts (v2.3)

Linux

For detailed installation instructions and packaged versions, visit our installation documentation.

Need a different artifact? Feel free to open an issue on our GitHub repository.


Changelog (v2.3)

Key Enhancements and Updates:

  1. PostgreSQL 17 Support

We're excited to announce comprehensive support for PostgreSQL 17, the latest major release of PostgreSQL. This update brings full security auditing capabilities for PostgreSQL 17 across all security categories:

  • Installation Verification: New systemd service checks specifically for PostgreSQL 17
  • Authentication & Permissions: Enhanced security checks for PostgreSQL 17 authentication mechanisms
  • Connection Security: Advanced SSL/TLS validation for PostgreSQL 17 connections
  • Configuration Compliance: Updated settings validation for PostgreSQL 17-specific parameters
  • Replication Security: Enhanced replication security checks for PostgreSQL 17
  • Special Security Validations: Comprehensive security checks tailored for PostgreSQL 17

This ensures that organizations using the latest PostgreSQL version can maintain the highest security standards with KloudDB Shield.

  1. Enhanced SSL Handling & Connection Management

Significant improvements to SSL/TLS connection handling and database connectivity:

  • Improved SSL Connection Handling: Enhanced SSL/TLS connection management for PostgreSQL databases with better error handling and validation
  • Ping Check Functionality: Added ping check flags for better connection validation and health monitoring
  • Execution Structure Improvements: Optimized execution flow for better performance and reliability
  • Enhanced Log Parsing: Improved log parsing capabilities with better SSL context handling and analysis
  • Comprehensive Connection Testing: Added 311 new test cases for robust connection validation and testing
  1. Configuration & Infrastructure Enhancements
  • Enhanced Configuration Management: Updated configuration handling with new SSL and ping check options
  • Template Updates: Updated HTML report templates for better SSL and connection reporting
  • Integration Testing: Improved integration test structure and coverage
  • Documentation: Updated README and configuration examples with new features
  1. Performance & Reliability Improvements
  • Connection Performance: Optimized database connection handling for better performance
  • Log Processing: Improved log parsing performance and accuracy
  • Memory Usage: Optimized memory usage in connection handling
  • Error Handling: Enhanced error handling and logging across all components
  1. Testing & Quality Assurance
  • Comprehensive Test Coverage: Added 311 new test cases for PostgreSQL connections
  • Enhanced Integration Testing: Improved integration test structure and coverage
  • Better Error Handling: Implemented comprehensive error handling improvements across multiple components

These updates significantly enhance functionality, security coverage, and performance, making v2.3 a crucial upgrade for organizations using PostgreSQL 17 and requiring enhanced SSL security.


Thank you for being an integral part of our journey. For discussions, questions please email us at [email protected]

v2.2

19 Dec 17:13
81b0eb6

Choose a tag to compare

Official Release Artifacts (v2.2)

Linux

For detailed installation instructions and packaged versions, visit our installation documentation.

Need a different artifact? Feel free to open an issue on our GitHub repository.


Changelog (v2.2)

Key Enhancements and Updates:

  1. Backup Audit Tool

With this release, we’re introducing a powerful new feature: Backup Compliance Checks. This feature currently supports the following three backup tools:

  • pgBackRest
  • pg_basebackup
  • pg_dump

Backup compliance is critical for many organizations, and this new functionality allows you to generate continuous, scheduled backup reports effortlessly.

  1. PostgreSQL Configuration Enhancements

We're excited to announce the release of our Postgres Config Generator, the result of months of dedicated research and development. PostgreSQL comes with hundreds of configuration parameters, many of which have suboptimal default values that can lead to performance and stability issues.

Here are a few examples:

  • shared_buffers is often set far too low by default, along with other critical memory settings like work_mem and effective_cache_size.
  • log_line_prefix is typically set to an unhelpful value.
  • Defaults for statement_timeout and idle_in_transaction_timeout can lead to inefficiencies.
  • max_wal_size has a default value that can cause significant issues during high transaction workloads.

And these are just the tip of the iceberg—there are over 40 scenarios where default settings can create challenges.

  1. Dependency Updates

    • Upgraded Go module dependencies to enhance compatibility and overall performance.
  2. Automated Workflows

    • Developed a GitHub Actions workflow dedicated to PostgreSQL configuration testing for continuous integration.
  3. HTML Report Templates

    • Created customizable HTML templates for presenting backup audit results in a clear, professional format.
  4. Improved Error Handling

    • Implemented comprehensive error handling improvements across multiple components, boosting system reliability and user experience.

These updates significantly enhance functionality, usability, and performance, solidifying v2.2 as a vital upgrade for our users.


Thank you for being an integral part of our journey. For discussions, questions please email us at [email protected]

v2.1

04 Dec 05:27

Choose a tag to compare

Changelog

61d34cd Enhance configuration management and reporting features

  • Added handling to run each features using flags
  • Added handling for create ssl report for postgres
  • Added handling New Labels in PII scanner
  • Improved logic for custom time range for logparser
  • custom config path support added
  • json output format for output file for all features
  • improved HTML structure for all reports
  • Added support for JSON output in various report generation functions.
  • Updated .gitignore to include new report formats and configuration files.
  • Improved error handling and logging in database connection functions.
  • Updated dependencies in go.mod for better compatibility.

These changes aim to improve the overall functionality and usability of the configuration management and reporting tools.

v2.0

13 Aug 18:20
8d0c5cf

Choose a tag to compare

Changelog

  • da62978 added handling for pii scanner and custom template fixes
  • e55c1c3 added handling for all log parser at once with postgres report added password leak in log parser improved html report handling and design added log parser in html report create text based output format added custom template feature for postgres checks added new manual checks in postgres
  • 0311abf Postgres checks upgraded and improved html report handling.
  • 4c5e89b upgraded go version for Vuln check fix

v1.9

09 Jul 03:19

Choose a tag to compare

Changelog

  • 843954e removed critical flag
  • e55c1c3 added handling for all log parser at once with postgres report added password leak in log parser improved html report handling and design added log parser in html report create text based output format added custom template feature for postgres checks added new manual checks in postgres
  • 0311abf Postgres checks upgraded and improved html report handling.
  • 4c5e89b upgraded go version for Vuln check fix

v1.8

16 May 17:08
b4df85f

Choose a tag to compare

Changelog

  • 2496cee added hba unused line handling in logparser

v1.7

27 Mar 04:19

Choose a tag to compare

Changelog

  • 9966270 Add password manager functionality

v1.6

11 Mar 19:36

Choose a tag to compare

Changelog

  • 92411b0 - log parser integrated - fixed html report and merged json reports - added workflow for vuln check and integration test - added new badges in readme
  • 2f6548b Update LICENSE
  • 90f256a RDS changes.

v1.5

28 Aug 20:39

Choose a tag to compare

Changelog

  • 11a69cd - print sourcetype is report - fix checking for sourcetype - print output as table - add and fix 4.4.0 - fix all test cases - fix test cases - fix 4.3.0 failures for empty category list - fix 4.2.0 - fix parsing sourceIDlist - fix test cases as manual - make manual as fail

v1.4

12 Apr 12:07

Choose a tag to compare

Changelog