WAL-G is an archival restoration tool for Postgres.
WAL-G is the successor of WAL-E with a number of key differences. WAL-G uses LZ4, LZMA or Brotli compression, multiple processors and non-exclusive base backups for Postgres. More information on the design and implementation of WAL-G can be found on the Citus Data blog post "Introducing WAL-G by Citus: Faster Disaster Recovery for Postgres".
Table of Contents
A precompiled binary for Linux AMD 64 of the latest version of WAL-G can be obtained under the Releases tab.
To decompress the binary, use:
tar -zxvf wal-g.linux-amd64.tar.gz
For other incompatible systems, please consult the Development section for more information.
One of these variables is required
To connect to Amazon S3, WAL-G requires that this variable be set:
s3://bucket/path/to/folder) (alternative form
WAL-G determines AWS credentials like other AWS tools. You can set
AWS_SECRET_ACCESS_KEY (optionally with
~/.aws/credentials (optionally with
AWS_PROFILE), or you can set nothing to automatically fetch credentials from the EC2 metadata service.
To store backups in Google Cloud Storage, WAL-G requires that this variable be set:
WALG_GS_PREFIXto specify where to store backups (eg.
WAL-G determines Google Cloud credentials using application-default credentials like other GCP tools. You can set
GOOGLE_APPLICATION_CREDENTIALS to point to a service account json key from GCP. If you set nothing, WAL-G will attempt to fetch credentials from the GCE/GKE metadata service.
To store backups in Azure Storage, WAL-G requires that this variable be set:
WALG_AZ_PREFIXto specify where to store backups in Azure storage (eg.
WAL-G determines Azure Storage credentials using azure default credentials. You can set
AZURE_STORAGE_ACCESS_KEY to provide azure storage credentials.
WAL-G sets default upload buffer size to 64 Megabytes, and uses 3 buffers by default. However, users can choose to override these values by setting optional environment variables.
To store backups in Swift object storage, WAL-G requires that this variable be set:
WALG_SWIFT_PREFIXto specify where to store backups in Swift object storage (eg.
WAL-G determines Swift object storage credentials using openStack default credentials. You can use any of V1, V2, V3 of the SwiftStack Auth middleware to provide Swift object storage credentials.
To store backups on files system, WAL-G requires that these variables be set:
Please, keep in mind that by default storing backups on disk along with database is not safe. Do not use it as a disaster recovery plan.
WAL-G can automatically determine the S3 bucket's region using
s3:GetBucketLocation, but if you wish to avoid this API call or forbid it from the applicable IAM policy, specify this variable.
Overrides the default hostname to connect to an S3-compatible service. i.e,
To enable path-style addressing(i.e.,
http://s3.amazonaws.com/BUCKET/KEY) when connecting to an S3-compatible service that lack of support for sub-domain style bucket URLs (i.e.,
http://BUCKET.s3.amazonaws.com/KEY). Defaults to
Overrides the default
upload buffer size of 67108864 bytes (64 MB). Note that the size of the buffer must be specified in bytes. Therefore, to use 32 MB sized buffers, this variable should be set to 33554432 bytes.
Overrides the default
maximum number of upload buffers. By default, at most 3 buffers are used concurrently.
1024) Overrides the default
number of WAL files to upload during one scan. By default, at most 32 wal files will be uploaded.
Example: Using Minio.io S3-compatible storage
AWS_ACCESS_KEY_ID: "<minio-key>" AWS_SECRET_ACCESS_KEY: "<minio-secret>" WALE_S3_PREFIX: "s3://my-minio-bucket/sub-dir" AWS_ENDPOINT: "http://minio:9000" AWS_S3_FORCE_PATH_STYLE: "true" AWS_REGION: us-east-1 WALG_S3_CA_CERT_FILE: "/path/to/custom/ca/file"
To configure the S3 storage class used for backup files, use
WALG_S3_STORAGE_CLASS. By default, WAL-G uses the "STANDARD" storage class. Other supported values include "STANDARD_IA" for Infrequent Access and "REDUCED_REDUNDANCY" for Reduced Redundancy.
To enable S3 server-side encryption, set to the algorithm to use when storing the objects in S3 (i.e.,
If using S3 server-side encryption with
aws:kms, the KMS Key ID to use for object encryption.
To configure AWS KMS key for client side encryption and decryption. By default, no encryption is used. (AWS_REGION or WALG_CSE_KMS_REGION required to be set when using AWS KMS key client side encryption)
To configure AWS KMS key region for client side encryption and decryption (i.e.,
To configure compression method used for backups. Possible options are:
lz4, 'lzma', 'brotli'. Default method is
lz4. LZ4 is the fastest method, but compression ratio is bad. LZMA is way much slower, however it compresses backups about 6 times better than LZ4. Brotli is a good trade-off between speed and compression ratio which is about 3 times better than LZ4.
More options are available for chosen database. See it in Databases
WAL-G currently supports these commands for all type of databases:
Lists names and creation time of available backups.
--pretty flag prints list in a table
--json flag prints list in json format, pretty-printed if combined with
--detail flag prints extra backup details, pretty-printed if combined with
--pretty , json-encoded if combined with
Is used to delete backups and WALs before them. By default
delete will perform dry run. If you want to execute deletion you have to add
--confirm flag at the end of the command. Backups marked as permanent will not be deleted.
delete can operate in three modes:
retain [FULL|FIND_FULL] %number%
if FULL is specified keep 5 full backups and everything in the middle
before [FIND_FULL] %name%
if FIND_FULL is specified WAL-G will calculate minimum backup needed to keep all deltas alive. If FIND_FULL is not specified and call can produce orphaned deltas - call will fail with the list.
everything all backups will be deleted (if there is no permanent backups)
everything FORCE all backups, include permanent, will be deleted
retain 5 will fail if 5th is delta
retain FULL 5 will keep 5 full backups and all deltas of them
retain FIND_FULL will find necessary full for 5th
before base_000010000123123123 will fail if base_000010000123123123 is delta
before FIND_FULL base_000010000123123123 will keep everything after base of base_000010000123123123
More commands are available for chosen database. See it in Databases
It is specified for your type of database.
WAL-G relies heavily on unit tests. These tests do not require S3 configuration as the upload/download parts are tested using mocked objects. Unit tests can be run using
WAL-G will perform a round-trip compression/decompression test that generates a directory for data (eg. data...), compressed files (eg. compressed), and extracted files (eg. extracted). These directories will only get cleaned up if the files in the original data directory match the files in the extracted one.
Test coverage can be obtained using:
This command generates
coverage.out file and opens HTML representation of the coverage.
Development on Windows
See also the list of contributors who participated in this project.
This project is licensed under the Apache License, Version 2.0, but the lzo support is licensed under GPL 3.0+. Please refer to the LICENSE.md file for more details.
WAL-G would not have happened without the support of Citus Data
WAL-G came into existence as a result of the collaboration between a summer engineering intern at Citus, Katie Li, and Daniel Farina, the original author of WAL-E who currently serves as a principal engineer on the Citus Cloud team. Citus Data also has an open source extension to Postgres that distributes database queries horizontally to deliver scale and performance.
WAL-G development is supported by Yandex Cloud