Skip to content
CBN data localisation deadline, 1 Jan 2027: 99d 00h 31m left.Talk to us
NuxFamily

Official support for the open source databases that already run the core of the bank.

Databases & In-Memory

PostgreSQL, MySQL, Valkey and Tanzu GemFire / Apache Geode, deployed inside Nigeria and backed by an SLA your auditor can read. We design the topology, run the failover drills and patch the CVEs, so your team owns the platform without carrying the risk alone.

  • PostgreSQL
  • MySQL
  • Valkey
  • Tanzu GemFire
  • Apache Geode

The technologies we cover

Products in this family

  • PostgreSQL

    The relational database of record for transactional systems, with Patroni-managed high availability.

    Bare metalVirtual machinesKubernetesPrivate cloudAir-gapped

    Official support

  • MySQL

    InnoDB Cluster and Group Replication for the channel, CRM and web workloads that already depend on MySQL.

    Bare metalVirtual machinesKubernetesPrivate cloud

    Official support

  • Valkey

    The Linux Foundation fork of Redis: in-memory cache, session store and rate limiter under a BSD licence.

    Virtual machinesKubernetesPrivate cloudAir-gapped

    Official support

  • Tanzu GemFire

    Commercial in-memory data grid for transaction authorisation, with WAN replication between data centres.

    Virtual machinesKubernetesPrivate cloud

    Official support

  • Apache Geode

    The open source core of GemFire: partitioned regions, continuous queries and event listeners.

    Virtual machinesKubernetesPrivate cloudAir-gapped

    Official support

Why it matters for data localisation

Where this family meets the CBN directive

Databases are the first line on any data-localisation inventory. The CBN directive requires primary processing of payment and customer data, the databases that hold it, their backups, the identity systems that guard access, the encryption keys and the audit logs to reside in Nigeria by 1 January 2027, with no dependency on a foreign cloud provider.

The journey with NuxFamily

  1. 01Assess
  2. 02Design
  3. 03Build
  4. 04Migrate
  5. 05Operate
  6. 06Evolve

Every family is delivered through the same six-stage journey, with official 24×7 support and knowledge transfer built in.

Our expertise

Credentials, not adjectives

Our engineers ran PostgreSQL and in-memory grids for European banks and insurers before managed cloud databases existed, which means we know how to operate them without one. We have moved core ledgers from proprietary databases to PostgreSQL under regulatory audit, built GemFire authorisation grids for card issuers, and tuned Valkey clusters for retail platforms with seasonal peaks. That experience comes to Nigeria with the same runbooks, the same drills and the same people on the escalation path.

Sectors

  • Banking
  • Insurance
  • Retail
  • Industry

18+

Years with these technologies

60+

Production deployments

40 TB PostgreSQL estate at 12,000 transactions per second

Largest scale delivered

Official vendor support

Support tiers for this family

Essential

Coverage
8×5, Nigeria business hours
P1 response
4 h
  • Corrective support on PostgreSQL, MySQL, Valkey and GemFire/Geode
  • Security patches and CVE advisories for your installed versions
  • Knowledge base, runbooks and ticket portal

Business

Coverage
24×7
P1 response
1 h
  • Everything in Essential
  • Proactive monitoring review and quarterly health checks
  • Minor version and patch lifecycle management
  • Backup restore and failover drill reviews

Mission Critical

Most chosen
Coverage
24×7 with named engineer
P1 response
15 min
  • Everything in Business
  • Designated engineer who knows your estate and topology
  • Architecture review, capacity planning and query tuning
  • Major upgrade support, for example PostgreSQL 14 to 17
  • CBN audit accompaniment and evidence preparation

CVE commitment

Version policy

Response times and tier names are indicative and confirmed contractually.

Use cases

How it is used in a regulated bank

Use case 01

PostgreSQL high availability with automatic failover

A bank's core ledger cannot depend on a manual failover at three in the morning. The requirement is a topology that promotes a replica automatically, keeps RPO at zero for committed transactions and lets applications reconnect without human intervention. Patroni on PostgreSQL delivers this with quorum-based leader election on etcd.

Technologies

  • PostgreSQL
  • Patroni
  • etcd
  • HAProxy
  • pgBackRest

Expected outcome

The bank gets an automatic failover that has been rehearsed, documented and measured rather than assumed. Every drill leaves a report the CBN inspector can read.

Metric: Failover under 30 s with RPO 0 for synchronous commits

PostgreSQL high availability with automatic failoverA bank's core ledger cannot depend on a manual failover at three in the morning. The requirement is a topology that promotes a replica automatically, keeps RPO at zero for committed transactions and lets applications reconnect without human intervention. Patroni on PostgreSQL delivers this with quorum-based leader election on etcd. The bank gets an automatic failover that has been rehearsed, documented and measured rather than assumed. Every drill leaves a report the CBN inspector can read.1Primary accepts writesPostgreSQL2Patroni holds the leasePatroni3Quorum detects failureetcd4Sync replica promotedPatroni5Traffic follows new primaryHAProxy6Old primary rejoinspgBackRest
  1. 1Primary accepts writes. All transactions land on the primary. WAL is streamed to a synchronous replica in the same data centre and an asynchronous replica in the DR site.
  2. 2Patroni holds the lease. Each node runs a Patroni agent that renews a leader lease in etcd. The lease is the single source of truth about which node is primary.
  3. 3Quorum detects failure. If the primary stops renewing its lease, the etcd quorum expires it. A node that cannot reach quorum demotes itself, so there is no split brain.
  4. 4Sync replica promoted. Patroni promotes the replica that has confirmed every committed transaction. Nothing acknowledged to the application is lost.
  5. 5Traffic follows new primary. HAProxy or the Kubernetes service checks Patroni's REST endpoint and routes writes to the new leader within seconds.
  6. 6Old primary rejoins. When the failed node returns, pg_rewind aligns its timeline and it re-enters the cluster as a follower. Backups continue from pgBackRest without interruption.

Use case 02

Session cache and transaction authorisation with Valkey and GemFire

Use case 03

Migration from a managed cloud database to on-prem PostgreSQL

Reference architecture

What a compliant deployment looks like

Highly available PostgreSQL with in-memory tier and national DRCore components under NuxFamily supportSupporting componentsDisaster recovery site

Migration path

From where you are to a compliant platform

  1. 01

    2-3 weeks

    Assess

    Activities

    • Inventory every database, extension, size and application dependency
    • Classify data by CBN scope: payment, customer, backups, keys, audit logs
    • Review licences and costs of Oracle, SQL Server and managed cloud services
    • Define target topology, RPO and RTO per service tier
  2. 02

    3-4 weeks

    Design and build

    Activities

    • Deploy Patroni clusters, Valkey and GemFire with encryption at rest and in transit
    • Configure pgBackRest, monitoring, pgAudit and LDAP or Keycloak integration
    • Automate provisioning with Ansible or Kubernetes operators
    • Build the DR site replica and write the failover runbooks
  3. 03

    4-8 weeks, in waves

    Migrate

    Activities

    • Set up logical replication or dump-and-restore for each database wave
    • Run validation suites: row counts, checksums and application tests
    • Execute cutovers in agreed windows with a rollback path per database
    • Record evidence of residency and cloud decommissioning
  4. 04

    Ongoing

    Operate

    Activities

    • 24×7 support under the chosen tier with CVE patching by severity
    • Quarterly failover and restore drills with written reports
    • Capacity and query performance reviews
  5. 05

    From month 6

    Evolve

    Activities

    • Major version upgrades with logical replication and minimal downtime
    • Consolidation of instances and right-sizing of hardware
    • Knowledge transfer so the bank's DBAs run day-to-day operations

FAQ

Questions architects ask us

Yes. The directive covers primary processing, the databases themselves, backups, IAM, encryption keys and audit logs. A replica or snapshot in a foreign region is still customer data outside Nigeria. Our designs keep primary, replicas, WAL archives and backups in two Nigerian data centres. This is general guidance, not legal advice; your compliance team should confirm the interpretation with the regulator.

Over two decades

Built by the team behind the platforms of Santander, ING, Bankinter, Mapfre and Inditex

More than twenty years designing, building and operating private clouds for institutions that cannot afford to fail, and a delivery model where we stay with you from assessment to operation.

See our track record

20+

Years building private clouds

40+

Private clouds delivered

Talk to an architect about this family

Tell us where you are today and we will come back with a first view of the target architecture and the migration path.

No mailing lists, no automated follow-ups. We reply personally within one working day.