Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions docs/_snippets/clickpipes/_changing_tls_settings.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
import tls_settings from '@site/static/images/integrations/data-ingestion/clickpipes/postgres/tls-settings.png';
import pipe_connection_settings from '@site/static/images/integrations/data-ingestion/clickpipes/postgres/pipe-connection-settings.png';
import pipe_edit_connection from '@site/static/images/integrations/data-ingestion/clickpipes/postgres/pipe-edit-connection.png';
import Image from '@theme/IdealImage';

By default, your ClickPipe will be created with TLS enabled and certificate verification. These defaults can be modified upon ClickPipe creation:

<Image img={tls_settings} alt="TLS settings" size="lg" border/>

Or edited at the _Connection settings_ section of your paused ClickPipe _Settings_ tab:

<Image img={pipe_connection_settings} alt="Connection settings -> Edit Connection" size="lg" border/>

<Image img={pipe_edit_connection} alt="Edit Connection" size="lg" border/>

Where:

- `Disable TLS` toggles TLS for the connection on or off. Turning TLS off means data is sent as plaintext over the network, potentially including secrets and sensitive data.

@ilidemi ilidemi Jun 22, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

When TLS is "disabled", at least for PG we'd do sslmode=prefer instead of require which would use TLS if available, right? Or are we trying to be extra scary

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oYeah, I did this on purpose. Actually "potentially" in potentially including secrets and sensitive data. hints this.

The only reason for PG to use prefer is to be consistent at PeerDB level. I think users should assume cleartext when they check this option regardless of TLS being possibly negotiated with prefer.

- `Skip certificate verification` toggles on or off the verification of the certificate presented by the source database. Take into consideration the security implications of skipping certificate verification.
- `TLS Host` (optional, defaults to the source _Host_) is the hostname the certificate's CN must match when certificate verification is enabled.
- `Upload CA` can be used to provide a CA used when certificate verification is enabled.
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,7 @@ import select_destination_db from '@site/static/images/integrations/data-ingesti
import ch_permissions from '@site/static/images/integrations/data-ingestion/clickpipes/postgres/ch-permissions.jpg'
import Image from '@theme/IdealImage';
import ssh_tunnel from '@site/static/images/integrations/data-ingestion/clickpipes/postgres/ssh-tunnel.jpg'
import ChangingTLSSettings from '@site/docs/_snippets/clickpipes/_changing_tls_settings.md';

<BetaBadge/>

Expand Down Expand Up @@ -73,6 +74,10 @@ Make sure you're logged in to your ClickHouse Cloud account. If you don't have a

<Image img={mongodb_connection_details} alt="Fill in connection details" size="lg" border/>

#### (Optional) Changing TLS settings {#optional-changing-tls-settings}

<ChangingTLSSettings/>

#### (Optional) Set up SSH Tunneling {#optional-set-up-ssh-tunneling}

You can specify SSH tunneling details if your source MongoDB database isn't publicly accessible.
Expand Down
5 changes: 5 additions & 0 deletions docs/integrations/data-ingestion/clickpipes/mysql/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,7 @@ import ssh_tunnel from '@site/static/images/integrations/data-ingestion/clickpip
import select_destination_db from '@site/static/images/integrations/data-ingestion/clickpipes/mysql/select-destination-db.png'
import ch_permissions from '@site/static/images/integrations/data-ingestion/clickpipes/postgres/ch-permissions.jpg'
import Image from '@theme/IdealImage';
import ChangingTLSSettings from '@site/docs/_snippets/clickpipes/_changing_tls_settings.md';

<BetaBadge/>

Expand Down Expand Up @@ -84,6 +85,10 @@ Make sure you're logged in to your ClickHouse Cloud account. If you don't have a

<Image img={mysql_connection_details} alt="Fill in connection details" size="lg" border/>

#### (Optional) Changing TLS settings {#optional-changing-tls-settings}

<ChangingTLSSettings/>

#### (Optional) Set up SSH Tunneling {#optional-set-up-ssh-tunneling}

You can specify SSH tunneling details if your source MySQL database isn't publicly accessible.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@ import select_replication_slot from '@site/static/images/integrations/data-inges
import select_destination_db from '@site/static/images/integrations/data-ingestion/clickpipes/postgres/select-destination-db.jpg'
import ch_permissions from '@site/static/images/integrations/data-ingestion/clickpipes/postgres/ch-permissions.jpg'
import Image from '@theme/IdealImage';
import ChangingTLSSettings from '@site/docs/_snippets/clickpipes/_changing_tls_settings.md';

You can use ClickPipes to ingest data from your source Postgres database into ClickHouse Cloud. The source Postgres database can be hosted on-premises or in the cloud including Amazon RDS, Google Cloud SQL, Azure Database for Postgres, Supabase and others.

Expand Down Expand Up @@ -91,6 +92,10 @@ You can use AWS Private Link to connect to your source Postgres database if it i
want to keep your data transfer private.
You can follow the [setup guide to set up the connection](/integrations/clickpipes/aws-privatelink).

#### (Optional) Changing TLS settings {#optional-changing-tls-settings}

<ChangingTLSSettings/>

#### (Optional) Setting up SSH tunneling {#optional-setting-up-ssh-tunneling}

You can specify SSH tunneling details if your source Postgres database isn't publicly accessible.
Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading