python - 与 Postgres 数据库通信时如何保护 Pandas 方法？

Question

Python Pandas 有一个 to_sql和 read_sql可用于与数据库通信的方法。

我正在连接到 Postgres 数据库。 Pandas 似乎使用 SQL Alchemy and psycopg2执行通信。

当使用 create_engine('mysql+mysqlconnector://user:password@amazon_endpoint:port/database_name',connect_args={'sslmode':'require'}, echo=True) 我收到了AttributeError: Unsupported argument 'sslmode' 错误。

然后我看到了以下帖子:1 , 2并将代码修改为 create_engine('mysql+mysqlconnector://user:password@amazon_endpoint:port/database_name?ssl_ca=/home/user/Downloads/rds-combined-ca-bundle.pem')。现在连接正常，我可以连接到数据库了。这是否意味着连接现在是安全的？有什么方法可以确认这一点吗？

Answer 1

我不认为默认情况下连接是安全的，除非您的 Postgres 实例已配置为需要安全连接。首先，您的实例需要使用 SSL 支持构建，然后告诉客户端安全连接是一件简单的事情。来自 the documentation :

PostgreSQL has native support for using SSL connections to encrypt client/server communications for increased security. This requires that OpenSSL is installed on both client and server systems and that support in PostgreSQL is enabled at build time (see Chapter 15).

With SSL support compiled in, the PostgreSQL server can be started with SSL enabled by setting the parameter ssl to on in postgresql.conf. The server will listen for both normal and SSL connections on the same TCP port, and will negotiate with any connecting client on whether to use SSL. By default, this is at the client's option; see Section 19.1 about how to set up the server to require use of SSL for some or all connections.

当您使用 to_sql 或 read_sql 时，向其传递一个使用 sslmode=require 设置的 SQLAlchemy 连接。 This question提供了用于设置连接的完整代码段:

db = create_engine(
  'postgresql+pg8000://user:pass@hostname/dbname',
  connect_args={'sslmode':'require'},
  echo=True
).connect()