PostgreSQL 17 with PgBouncer Connection Pooler on Ubuntu 24.04 LTS by cloudimg
by cloudimg
PostgreSQL 17 with the PgBouncer connection pooler, secured and pooled on first boot
PostgreSQL 17 with the PgBouncer connection pooler
A production ready PostgreSQL 17 database fronted by PgBouncer, the lightweight connection pooler maintained by the PostgreSQL community, on a hardened, fully patched Ubuntu 24.04 LTS base. Applications connect through PgBouncer in transaction pooling mode on port 6432; the pooler multiplexes many short lived client connections onto a small pool of backend PostgreSQL sessions, so a connection heavy or serverless workload stays fast without exhausting the database with one backend process per client. PostgreSQL itself remains directly reachable on port 5432 for administration and migrations.
Secure by default, no baked credential
There are two built in accounts and neither carries a password in the image. On first boot each VM generates a unique password for the PostgreSQL superuser, a unique password for the PgBouncer admin console user, and a unique self signed TLS certificate, writing them to a root only credentials file. Remote clients are accepted only over TLS with scram-sha-256, and the pooler will not even start until first boot has written its per VM user list. On box administration stays password less through the local unix socket.
What you get
- PostgreSQL 17 and PgBouncer from the official PostgreSQL PGDG repository, running under systemd
- PgBouncer in transaction pooling mode on port 6432, pooling to the local PostgreSQL backend
- A default database ready to use through the pooler or directly on 5432
- Per VM passwords for the database superuser and the pooler admin, plus a per VM TLS certificate, generated on first boot with no default login
- Unattended security upgrades left enabled, and 24/7 cloudimg support
Licensing
PostgreSQL is distributed under the PostgreSQL License and PgBouncer under the ISC License, both permissive and free to redistribute. The cloudimg charge ($0.04 per vCPU/hour) covers packaging, security patching, image maintenance and 24/7 expert support.