3 ms·

> In contrast to many other database management systems, SQLite is not a client-server database engine, but you actually very rarely need that. If your applicat

> In contrast to many other database management systems, SQLite is not a client-server database engine, but you actually very rarely need that. If your application software runs on the same physical machine as the database, which is what most small to medium sized web applications does, then you probably only need SQLite. Disagree. If you think about it from an attack surface perspective, there are numerous advantages to isolating the database. There are performance, availability, sharding, and columnar options out there also that may better meet the use-case (just to name a few). I have ran Postgres on endpoints when developing with performance akin to SQLite. Further, there are numerous ways in which to increase performance, availability, or to pursue some of the more customized versions of Postgres depending on use-case. One of the times I used Postgres was with Oracle DBAs, and they found the transition pretty simple. Various customizations / extensions / versions of PG There are security versions e.g. https://www.crunchydata.com/products/hardened-postgres https://www.crunchydata.com/products/hardened-postgres Columnar / high performance Parallelized extensions e.g. https://www.citusdata.com/product https://www.citusdata.com/product General Purpose / Oracle transitions e.g. https://www.citusdata.com/product https://www.citusdata.com/product Yandex even has an embedded Postgres https://github.com/yandex-qatools/postgresql-embedded https://github.com/yandex-qatools/postgresql-embedded If you'd like to see a full list of features see https://www.postgresql.org/about/featurematrix/ https://www.postgresql.org/about/featurematrix/ More than this though, PG has a really excellent community with a large amount of talented folks, available both individually and through OSS oriented companies https://www.postgresql.org/support/professional_support/ https://www.postgresql.org/support/professional_support/ and willing to help out on Libera https://www.postgresql.org/about/news/migration-of-postgresql-irc-channels-2216/ https://www.postgresql.org/about/news/migration-of-postgresq...

infamia 4y ago
> If you think about it from an attack surface perspective, there are numerous advantages to isolating the database. The attack surface on PG or MySQL is a lot larger and there are a lot more moving parts than SQLite (which is just a file). Notably, there is no service exposed to the network that someone can attack, which is a huge attack vector with lots of different types of vulnerabilities that don't exist in SQLite.

infamia 4y ago

> If you think about it from an attack surface perspective, there are numerous advantages to isolating the database. The attack surface on PG or MySQL is a lot larger and there are a lot more moving parts than SQLite (which is just a file). Notably, there is no service exposed to the network that someone can attack, which is a huge attack vector with lots of different types of vulnerabilities that don't exist in SQLite.