On the Additional Settings tab, you can specify the backup retention period and some security features.
Backups
Change the default database backup retention period of 30 days using the Retention Period controls in the Backups section. You can configure the retention period in days, weeks, or months. Set a retention period between 1 and 180 days, 1 and 25 weeks, or 1 and 6 months.
Backup compression
HM compresses backups by default using the Barman Cloud plugin — no additional configuration is required. Compression reduces storage consumption and can improve backup performance, helping to prevent WAL storage full incidents.
The default compression algorithms are:
- Base backups: Snappy
- WAL archiving: zstd
You can change the compression algorithm for base backups and WAL archiving independently, as each supports a different set of algorithms:
- Base backups: none, Snappy, gzip, bzip2
- WAL archiving: none, Snappy, gzip, bzip2, lz4, xz, zstd
Warning
Disabling WAL compression is strongly discouraged. For PGD clusters (AHA and DHA), which continuously generate WAL files, selecting "none" for WAL compression is particularly inadvisable and may lead to WAL storage full incidents.
Because performance characteristics vary by environment, test the available algorithms against your specific workload to determine which works best before changing from the defaults.
Note
Changing the compression algorithm applies to subsequent backups only. Existing backups aren't affected.
Security
You can encrypt your cluster's data, if required.
This option is available for EDB Postgres Advanced Server and EDB Postgres Extended Server for versions 15 and later.
Use the Transparent Data Encryption (TDE) toggle to enable TDE.
Note
You can't enable, disable, or modify the TDE configuration after the cluster is created.
You can set the following options:
Enter a Passphrase. This option secures the data encryption key created by Hybrid Manager (HM) with a passphrase when you create a TDE-enabled cluster.
If the administrator of your HM instance previously enabled a key from a key management system, you can also select Customer Key Management. Then select one of the configured keys to secure the data encryption key created by the Hybrid Manager.
To learn more about TDE, see Transparent Data Encryption.