Migrating from SpiceDB to SpiceDB - Auth...
# spicedb
s
Hi. We have an RDS-backed spicedb instance and we'd like to migrate to an identical RDS-backed setup in a new AWS account. I saw this page https://authzed.com/docs/spicedb/ops/data/migrations warning against using pg_dump and pg_restore; is the AWS database migration service also unsupported (meaning we'd have to use the CLI tool)? I understand there are some tradeoffs with downtime where we'd probably be better off using the zed CLI + watch API, but DMS might be simpler for a few different reasons and I wanted to check if that was an option. Thanks!
y
> is the AWS database migration service also unsupported (meaning we'd have to use the CLI tool)? I don't know off the top of my head how that migration service works. If it's functionally doing physical replication + a failover, it should work just fine; if it's using logical replication it will fail in the same way as `pg_dump`/`pg_restore`.
s
I'm pretty sure it would be doing logical replication, but looks like they don't make it easy to find any actual information on what it does under the hood. Thanks!
Looks like the physical option would be something like: stop the writes, create a snapshot, move the snapshot to the new account, create a db from the snapshot, and restart the writes to that db.
y
iirc you can do physical replication + failover yourself on an RDS instance - it's all postgres-level functionality (assuming we're talking postgres?)
there will still be some write downtime, but it's in the spicedb cutover and the postgres-level cutover
s
Good point, that would be faster. Yes it's postgres
2 Views