FennicaCloud Managed Data Platform
Multi-AZ High Availability Active · SLA 99.99% · Endpoint fi-central-main.pool.db.finlandtrevel.xyz:6432

Connection Pool & VPC Peering

PgBouncer telemetry, firewall policy, IP allowlists and the hardened TLS connection specification for production-analytics-v2.

Pooler healthy
Active Clients

342

pool limit 600 · wait queue 0

Server Connections

48

reuse factor 7.1× · pool size 64 per db

pool_mode transaction · max_client_conn 600

Max Wait

0.1ms

p99 across all pools · avg 0.04 ms

0 timeouts / 24h query_wait_timeout 120s
Throughput

1 452txn/s

bytes out 612 MB/s

SCRam SCRAM-SHA-256 · prepared statements cached

Pool Detail

Per-database pool utilization from SHOW POOLS

uptime 41 d 06 h
Database / User cl_active cl_waiting sv_active sv_idle maxwait Pool
server_idle_timeout=600s · server_lifetime=3600s · server_reset_query=DISCARD ALL 0 pool saturation events

Pool Utilization

Client vs server side, last 60 s

sample 2 s
-60s-40s-20snow
  • Client connections342
  • Server connections48
  • Pool limit (per db)64
  • Headroom25%

Firewall Rules

Security groups on sg-0c41fennica attached to fi-central-main

Default action: DENY · rules evaluated top-down, first match wins · changes require dual approval by two platform operators.

IP Allowlist

CIDR entries permitted on port 6432

7 entries
    Allowlist is enforced by PgBouncer auth_file plus the security group; both must match for a connection to open.

    VPC Peering Topology

    Peerings from vpc-0af3eun1main (10.41.0.0/16, eu-north-1)

    4 active peerings 0 dropped flows

    Route table rtb-0fennica-main

    Destination Target Status

    Flow logs → /aws/vpc/fc-eun1-main, retention 90 days · NACL default allow, SG-to-SG references only.

    Secure Connection Specification

    Copy-ready parameters for psql, libpq clients, application drivers and BI tools

    Connection URI

    postgresql://analytics_app@fi-central-main.pool.db.finlandtrevel.xyz:6432/production-analytics-v2?sslmode=require&sslrootcert=/etc/ssl/certs/fennicacloud-eun1-ca.pem&sslcrl=/etc/ssl/certs/fennicacloud-eun1.crl&channel_binding=require&application_name=fc-console&options=-c%20statement_timeout%3D120000

    libpq parameters

    host=fi-central-main.pool.db.finlandtrevel.xyz
port=6432
dbname=production-analytics-v2
user=analytics_app
sslmode=require
sslrootcert=/etc/ssl/certs/fennicacloud-eun1-ca.pem
sslcrl=/etc/ssl/certs/fennicacloud-eun1.crl
ssl_min_protocol_version=TLSv1.3
channel_binding=require
target_session_attrs=read-write
application_name=fc-console
connect_timeout=10
keepalives=1
keepalives_idle=30

    psql one-liner

    PGSSLMODE=require \
PGSSLROOTCERT=/etc/ssl/certs/fennicacloud-eun1-ca.pem \
psql "host=fi-central-main.pool.db.finlandtrevel.xyz \
      port=6432 dbname=production-analytics-v2 \
      user=analytics_app"

    Node.js (pg)

    const pool = new Pool({
  host: 'fi-central-main.pool.db.finlandtrevel.xyz',
  port: 6432,
  database: 'production-analytics-v2',
  user: 'analytics_app',
  ssl: {
    rejectUnauthorized: true,
    ca: fs.readFileSync(
      '/etc/ssl/certs/fennicacloud-eun1-ca.pem'),
    minVersion: 'TLSv1.3'
  },
  max: 20
});