Backup · Aiven PostgreSQL

Back up Aiven for PostgreSQL, and prove it restores

Restore-tested backups of your Aiven for PostgreSQL, written to storage you control. Paste the service URI with a read-only role, and every backup can prove it restores.

Service URI as-isRead-only roleRestore-tested backupsStandard pg_dump archives

A second copy, outside Aiven

An off-site backup is the one you can still reach when something goes wrong with the platform or the account. Norcube keeps it outside Aiven, in storage you control, and proves it restores.

Off-site, in storage you control

Norcube runs a full pg_dump on your schedule and writes the encrypted archive to Norcube-managed storage in Frankfurt or to your own S3-compatible bucket.

Proven to restore

Every backup can be restore-tested: Norcube restores it into a throwaway database and confirms your schemas, tables and rows come back.

Yours, in a standard format

Download any backup and restore it with standard Postgres tools, independent of Norcube. No proprietary format, no lock-in.

Connect Aiven, step by step

The Aiven-specific settings, from the connection string to network access. Everything after that is the standard Protect form: schedule, retention and restore testing.

  1. Copy the service URI

    In the Aiven Console, open the PostgreSQL service and copy the Service URI from Connection information on the Overview page. It carries the host, the service's own port (in the 12000s or 13000s), defaultdb and the avnadmin user.

  2. Create a read-only role

    avnadmin has elevated rights. Connect once and create a role such as backup_ro with CONNECT, schema USAGE, SELECT and default privileges, then use it in the URI.

  3. Paste it into Norcube with SSL required

    Choose Protect a database, pick PostgreSQL, paste the URI and keep SSL mode on require. Aiven's CA certificate is only needed for verify-ca and verify-full.

  4. Allow Norcube's IP if you've narrowed access

    An Aiven service is reachable from anywhere by default (0.0.0.0/0). If you've narrowed Allowed IP addresses under Service settings, add 18.196.207.101.

What Norcube adds

Restore testing

Prove each backup restores, not just that the dump ran. A Passed badge per backup and a restore-health score per database show recoverability at a glance.

Failure and missed-backup alerts

Get notified when a backup fails, a restore test can't confirm your data, or a schedule silently stops. By email, Slack or a signed webhook, on every plan.

Your own bucket

Keep backups in Norcube-managed storage in Frankfurt, or in your own Amazon S3, Cloudflare R2, Backblaze B2, Wasabi or MinIO bucket.

Standard archives

Every backup is a standard pg_dump archive, gzip-compressed by default. Download it any time.

Aiven backups, answered

The questions that come up when backing up Aiven for PostgreSQL. The full guide is in the docs.

Why isn't the port 5432?
Aiven assigns each service its own port in the 12000s or 13000s. Use whatever port your service URI shows.
Why does a restore test mention aiven_extras?
Only if you ran CREATE EXTENSION aiven_extras. It's Aiven's platform tooling and can't be created on a generic engine, so a restore test notes its absence as expected and still records a clean Passed.
What if my database uses PostGIS or TimescaleDB?
Point restore tests at a scratch target that already has the extension, rather than the managed test engine.

Your Aiven data, backed up and tested

Start on the Free plan. No credit card required. Connect Aiven, pick a schedule and let the first restore test prove it.

  • Free plan
  • No credit card
  • Standard formats
  • Restore-tested
// tick. tick. tick.
0 ticks since founding
Coming soon

Join the PromptHub waitlist

PromptHub is in active development. Leave your email and we'll invite you as soon as it opens, with a free tier and no credit card.

One email when access opens. No newsletter, no spam.