PostgreSQL at Percona
We build open source tools for PostgreSQL, contribute patches upstream, and sponsor community projects. If you work with Postgres, we probably have something useful for you.
What We Build for PostgreSQL
Percona builds and maintains open source tools for PostgreSQL - from encryption extensions and query analytics to Kubernetes operators. We also contribute patches upstream and sponsor projects like Hackorum that are useful for the whole community.
Percona Distribution for PostgreSQL
A collection of open source tools that work well together for running PostgreSQL in production. Everything is tested as a set, so you don't have to figure out compatibility yourself.
The core is Percona Server for PostgreSQL - a drop-in replacement for stock Postgres, fully binary-compatible. It exposes storage and WAL APIs that make extensions like pg_tde (transparent encryption) possible. Percona is working to get these APIs merged upstream.
What's in the box:
- Patroni + ETCD + HAProxy - high availability
- pgBackRest - backup and point-in-time recovery
- PgBouncer - connection pooling
- pg_stat_monitor + PMM - query analytics and monitoring
- PostGIS - spatial data support
- Percona Operator - if you're on Kubernetes
pg_tde - Transparent Data Encryption
A PostgreSQL extension that encrypts data at rest - data files and WAL records - without touching your application code. It hooks into the storage layer via the APIs added in Percona Server for PostgreSQL.
It's under active development and already usable. If you're dealing with compliance requirements (HIPAA, PCI DSS, GDPR) and can't encrypt at the app layer, this is worth a look.
- Encrypts data files and WAL records at the storage level
- Works with external KMS or local keyring files
- Transparent to applications - no code changes needed
- Supports PostgreSQL 17 and 18
Curious how it works or want to try it? Talk to Kai or Jan - they're happy to help.
pg_tde is actively evolving - a GitHub star shows us it matters to youPercona Operator for PostgreSQL
A Kubernetes operator that automates the full lifecycle of PostgreSQL clusters - from initial provisioning to backups, restores, scaling, upgrades, and TLS setup. Based on the Percona Distribution for PostgreSQL.
Runs on GKE, EKS, AKS, OpenShift, Minikube, and generic Kubernetes. Also supported on Open Everest.
- Cluster provisioning, scaling, rolling upgrades
- Scheduled and on-demand backups with point-in-time recovery
- Standby clusters for disaster recovery
- TLS, LDAP, PostgreSQL extension management
- PMM integration for dashboards and query analytics
Hackorum - for PostgreSQL Developers
A mailing list archive and discussion platform for the PostgreSQL developer community. Searchable archives of the hackers, bugs, and docs lists, with patch tracking tied directly to CommitFest.
Built and maintained by Percona as a contribution to the PostgreSQL community. Open source, Rails 8, running on PostgreSQL.
- Searchable archive of all major PostgreSQL mailing lists
- Patch tracking with CommitFest integration and CI scores
- Contributor profiles with committer status
Have feedback or ideas? Kai is happy to chat - he's closely involved and always interested in hearing from the community.
It's open source and free to use - a star on GitHub would make Kai's day
Monitoring - pg_stat_monitor & PMM
pg_stat_monitor is a PostgreSQL extension and a drop-in replacement for pg_stat_statements. The key difference: it groups statistics into time buckets, so you can see not just overall averages but what happened during a specific interval. It also captures actual query parameters and execution plans.
Percona Monitoring and Management (PMM) is an open source monitoring tool with built-in PostgreSQL dashboards, query analytics (QAN), and alerting. pg_stat_monitor plugs directly into PMM's QAN, so you can see slow queries with their actual parameters and execution plans.
- Time-bucket stats - see what changed, not just lifetime averages
- Captures actual parameter values and execution plans
- PMM: dashboards, QAN, alerting for PostgreSQL out of the box

pg_oidc_validator - OIDC Authentication
A PostgreSQL extension that validates JWTs issued by any OIDC-compliant provider, letting you use your existing identity system (Keycloak, Microsoft Entra ID, etc.) instead of managing separate Postgres passwords.
Also supports the OAuth 2 device flow through libpq - useful for CLI tools and applications that can't open a browser.
- JWT validation against any OIDC provider
- OAuth 2 device flow via libpq
- Configurable identity mapping via JWT fields
- Supports PostgreSQL 18















