Table of Contents What is klouddb_Shield ? Klouddb_Shield is an open source security tool that checks for CIS compliance . Currently we check for 8 RDS controls , 40 controls(Postgres) , 46 MySQL controls – a total of 94 checks as of today and we plan to add more checks soon Please see previous blog […]
The post HBA Checker – KloudDB Shield 1.4 first appeared on KloudDB.
HBA Checker – KloudDB Shield 1.4 appeared first on MariaDB.org
In this release we are introducing hba scanner feature . We perform about 9 different checks and generate a report (Total of 40 checks for Postgres)


Internally we use pg_hba_file_rules to perform these checks . Please ensure that proper permissions are given to the user
For example a query like below can be used to check for presence of ‘all’ under database section

By default it uses pg_hba_file_rules and if this method fails it can use file scanner method. It can scan hba file and detect issues automatically (Our recommendation is to use pg_hba_file_rues method)
Sample run - How to produce hba report ?After installing the package or cloning the repo , please run below command . Pick option 1 for Postgres , it will then prompt you ‘Do you also want to run HBA Scanner’ for which you will input ‘y’ as reply


HTML Report enhances user experience . Once you generate html report, you need to open it with a web browser . NOTE- Currently there are two different html reports being generated 1) postgressecreport.html 2) hbascannerreport.html
Below is sample output for hba scanner html report

Another very useful addon in this release is the + button . You can get detailed info about a particular control using + button

Please try hba scanner and html report today – You will definitely like it. Please stay tuned – More exciting features coming up
ConclusionWe released KloudDB Shield 1.4 today . Please give it a try and pass your feedback . We spent ton of time to develop this tool and we plan to enhance this tool based on user feedback
Also check our performance articles –Pg_fincore and pg_buffercache to troubleshoot performance issues , Pgbouncer multiple instances(How we increased our TPS using multiple instances) , Postgres and temporary files , Pgpool and performance tuning, How we improved Lambda performance by 130x etc..
| # | Наименование новости | Тональность | Информативность | Дата публикации |
|---|---|---|---|---|
| 1 | KloudDB Shield 1.3 – HTML Feature | 0 | 12.85 | 20-03-2023 |
| 2 | KloudDB Shield 1.2 – RDS CIS Benchmarks | 0 | 12.16 | 06-03-2023 |
| 3 | CIS Benchmarks for Postgres – KloudDBShield 1.1 | 0 | 11.62 | 28-02-2023 |
| 4 | Hardening MySQL: Practical Security Strategies for DBAs | 0 | 5.76 | 02-03-2026 |
| 5 | Is it possible for a DBA/DBE to earn 1 million USD annual compensation ? | 0 | 7.46 | 28-09-2023 |
| 6 | Comprehensive Self-Service Backups for Continuous Data Protection in MariaDB Cloud | 0 | 8.56 | 09-06-2026 |
| 7 | MariaDB Privacy-First Stack: Nextcloud, Passbolt and MariaDB Server | 0 | 8.35 | 26-06-2026 |
| 8 | ClusterControl 2.5.0 brings ClickHouse support to on-prem, cloud and hybrid environments | 0 | 8.26 | 05-08-2026 |
| 9 | MariaDB R2DBC Connector 1.4.1 now available | 0 | 13.16 | 16-06-2026 |
| 10 | dbstat for MariaDB (and MySQL) | 0 | 6.05 | 14-03-2024 |