MOLT Fetch moves data from a source database into CockroachDB as part of a database migration.
MOLT Fetch uses IMPORT INTO
or COPY FROM
to move the source data to cloud storage (Google Cloud Storage, Amazon S3, or Azure Blob Storage), a local file server, or local memory. Once the data is exported, MOLT Fetch loads the data into a target CockroachDB database. For details, refer to Migration phases.
MOLT Fetch replication modes will be deprecated in favor of a separate replication workflow in an upcoming release. This includes the data-load-and-replication
, replication-only
, and failback
modes.
Supported databases
The following source databases are supported:
- PostgreSQL 11-16
- MySQL 5.7, 8.0 and later
- Oracle Database 19c (Enterprise Edition) and 21c (Express Edition)
Installation
To install MOLT, download the binary that matches your architecture and source database:
Operating System | Architecture | PostgreSQL/MySQL | Oracle (Preview) |
---|---|---|---|
Windows | AMD 64-bit | Download | N/A |
ARM 64-bit | Download | N/A | |
Linux | AMD 64-bit | Download | Download |
ARM 64-bit | Download | N/A | |
Mac | AMD 64-bit | Download | N/A |
ARM 64-bit | Download | N/A |
The following binaries are included:
molt
replicator
Both molt
and replicator
must be in your current working directory.
To display the current version of each binary, run molt --version
and replicator --version
.
For previous binaries, refer to the MOLT version manifest. For release details, refer to the MOLT changelog.
MOLT Fetch is supported on Red Hat Enterprise Linux (RHEL) 9 and above.
Docker images
MOLT Fetch
Docker multi-platform images containing both the AMD and ARM molt
and replicator
binaries are available. To pull the latest image for PostgreSQL and MySQL:
docker pull cockroachdb/molt
To pull a specific version (for example, 1.1.3
):
docker pull cockroachdb/molt:1.1.3
To pull the latest image for Oracle (note that only linux/amd64
is supported):
docker pull cockroachdb/molt:oracle-latest
For details on running in Docker, refer to Docker usage.
Setup
Complete the following items before using MOLT Fetch:
Follow the recommendations in Best practices.
Ensure that the source and target schemas are identical, unless you enable automatic schema creation with the
drop-on-target-and-recreate
option. If you are creating the target schema manually, review the behaviors in Mismatch handling.Ensure that the SQL user running MOLT Fetch has
SELECT
privileges on the source and target CockroachDB databases, along with the required privileges to runIMPORT INTO
orCOPY FROM
(depending on the command used for data movement) on CockroachDB, as described on their respective pages.
During a bulk load migration or when doing a one-time data export from a read replica, use the --ignore-replication-check
flag with MOLT Fetch. This flag instructs MOLT Fetch to skip querying for replication checkpoints (such as pg_current_wal_insert_lsn()
on PostgreSQL, gtid_executed
on MySQL, and CURRENT_SCN
on Oracle).
- If you plan to use cloud storage for the data migration, follow the steps in Secure cloud storage.
Docker usage
For details on pulling Docker images, refer to Docker images.
Performance
MOLT Fetch, Verify, and Replicator are likely to run more slowly in a Docker container than on a local machine. To improve performance, increase the memory or compute resources, or both, on your Docker container.
Authentication
When using MOLT Fetch with cloud storage, it is necessary to specify volumes and environment variables, as described in the following sections for Google Cloud Storage and Amazon S3.
No additional configuration is needed when running MOLT Fetch with a local file server or in direct copy mode:
docker run -it cockroachdb/molt fetch ...
For more information on docker run
, see the Docker documentation.
Google Cloud Storage
If you are using Google Cloud Storage for cloud storage:
Volume map the application_default_credentials.json
file into the container, and set the GOOGLE_APPLICATION_CREDENTIALS
environment variable to point to this file.
docker run \
-v ~/.config/gcloud/application_default_credentials.json:/gcp/creds.json:ro \
-e GOOGLE_APPLICATION_CREDENTIALS=/gcp/creds.json \
-it \
cockroachdb/molt fetch ...
In case the previous authentication method fails, you can volume map the entire Google Cloud configuration directory into the container. In addition to setting the GOOGLE_APPLICATION_CREDENTIALS
environment variable, set CLOUDSDK_CONFIG
to point to the configuration directory:
docker run \
-v ~/.config/gcloud:/gcp/config:ro \
-e CLOUDSDK_CONFIG=/gcp/config \
-e GOOGLE_APPLICATION_CREDENTIALS=/gcp/config/application_default_credentials.json \
-it \
cockroachdb/molt fetch ...
For details on Google Cloud Storage authentication, see Application Default Credentials.
Amazon S3
If you are using Amazon S3 for cloud storage:
Volume map the host's ~/.aws
directory to the /root/.aws
directory inside the container, and set the required AWS_REGION
, AWS_SECRET_ACCESS_KEY
, and AWS_ACCESS_KEY_ID
environment variables:
docker run \
-v ~/.aws:/root/.aws \
-e AWS_REGION=your-region \
-e AWS_SECRET_ACCESS_KEY=your-secret-access-key \
-e AWS_ACCESS_KEY_ID=your-access-key-id \
-it \
cockroachdb/molt fetch ...
Local connection strings
When testing locally, specify the host as follows:
For macOS, use
host.docker.internal
. For example:--source 'postgres://postgres:postgres@host.docker.internal:5432/molt?sslmode=disable' --target "postgres://root@host.docker.internal:26257/molt?sslmode=disable"
For Linux and Windows, use
172.17.0.1
. For example:--source 'postgres://postgres:postgres@172.17.0.1:5432/molt?sslmode=disable' --target "postgres://root@172.17.0.1:26257/molt?sslmode=disable"
Migration phases
MOLT Fetch operates in distinct phases to move data from source databases to CockroachDB. For details on available modes, refer to Fetch mode.
Data export phase
MOLT Fetch connects to the source database and exports table data to intermediate storage. Data is written to cloud storage (Amazon S3, Google Cloud Storage, Azure Blob Storage), a local file server, or directly to CockroachDB memory. Multiple tables and table shards can be exported simultaneously using --table-concurrency
and --export-concurrency
, with large tables divided into shards for parallel processing. For details, refer to:
Data import phase
MOLT Fetch loads the exported data into the target CockroachDB database. The process uses IMPORT INTO
(faster, tables offline during import) or COPY FROM
(slower, tables remain queryable) to move data. Data files are imported in configurable batches using --import-batch-size
, and target tables can be automatically created, truncated, or left unchanged based on --table-handling
settings. For details, refer to:
Commands
Command | Usage |
---|---|
fetch |
Start the fetch task. This loads data from a source database to a target CockroachDB database. |
Subcommands
Command | Usage |
---|---|
tokens list |
List active continuation tokens. |
Flags
Global flags
Flag | Description |
---|---|
--source |
(Required) Connection string used to connect to the Oracle PDB (in a CDB/PDB architecture) or to a standalone database (non‑CDB). For details, refer to Source and target databases. |
--source-cdb |
Connection string for the Oracle container database (CDB) when using a multitenant (CDB/PDB) architecture. Omit this flag on a non‑multitenant Oracle database. For details, refer to Source and target databases. |
--target |
(Required) Connection string for the target database. For details, refer to Source and target databases. |
--allow-tls-mode-disable |
Allow insecure connections to databases. Secure SSL/TLS connections should be used by default. This should be enabled only if secure SSL/TLS connections to the source or target database are not possible. |
--assume-role |
Service account to use for assume role authentication. --use-implicit-auth must be included. For example, --assume-role='user-test@cluster-ephemeral.iam.gserviceaccount.com' --use-implicit-auth . For details, refer to Cloud Storage Authentication. |
--bucket-path |
The path within the cloud storage bucket where intermediate files are written (e.g., 's3://bucket/path' or 'gs://bucket/path' ). Only the URL path is used; query parameters (e.g., credentials) are ignored. To pass in query parameters, use the appropriate flags: --assume-role , --import-region , --use-implicit-auth . |
--case-sensitive |
Toggle case sensitivity when comparing table and column names on the source and target. To disable case sensitivity, set --case-sensitive=false . If = is not included (e.g., --case-sensitive false ), the flag is interpreted as --case-sensitive (i.e., --case-sensitive=true ).Default: false |
--cleanup |
Whether to delete intermediate files after moving data using cloud or local storage. Note: Cleanup does not occur on continuation. |
--compression |
Compression method for data when using IMPORT INTO (gzip /none ).Default: gzip |
--continuation-file-name |
Restart fetch at the specified filename if the task encounters an error. --fetch-id must be specified. For details, see Fetch continuation. |
--continuation-token |
Restart fetch at a specific table, using the specified continuation token, if the task encounters an error. --fetch-id must be specified. For details, see Fetch continuation. |
--crdb-pts-duration |
The duration for which each timestamp used in data export from a CockroachDB source is protected from garbage collection. This ensures that the data snapshot remains consistent. For example, if set to 24h , each timestamp is protected for 24 hours from the initiation of the export job. This duration is extended at regular intervals specified in --crdb-pts-refresh-interval .Default: 24h0m0s |
--crdb-pts-refresh-interval |
The frequency at which the protected timestamp's validity is extended. This interval maintains protection of the data snapshot until data export from a CockroachDB source is completed. For example, if set to 10m , the protected timestamp's expiration will be extended by the duration specified in --crdb-pts-duration (e.g., 24h ) every 10 minutes while export is not complete. Default: 10m0s |
--direct-copy |
Enables direct copy, which copies data directly from source to target without using an intermediate store. |
--export-concurrency |
Number of shards to export at a time per table, each on a dedicated thread. This controls how many shards are created for each individual table during the data export phase and is distinct from --table-concurrency , which controls how many tables are processed simultaneously. The total number of concurrent threads is the product of --export-concurrency and --table-concurrency . Tables can be sharded with a range-based or stats-based mechanism. For details, refer to Table sharding.Default: 4 |
--filter-path |
Path to a JSON file defining row-level filters for the data import phase. Refer to Selective data movement. |
--fetch-id |
Restart fetch task corresponding to the specified ID. If --continuation-file-name or --continuation-token are not specified, fetch restarts for all failed tables. |
--flush-rows |
Number of rows before the source data is flushed to intermediate files. Note: If --flush-size is also specified, the fetch behavior is based on the flag whose criterion is met first. |
--flush-size |
Size (in bytes) before the source data is flushed to intermediate files. Note: If --flush-rows is also specified, the fetch behavior is based on the flag whose criterion is met first. |
--ignore-replication-check |
Skip querying for replication checkpoints such as pg_current_wal_insert_lsn() on PostgreSQL, gtid_executed on MySQL, and CURRENT_SCN on Oracle. This option is intended for use during bulk load migrations or when doing a one-time data export from a read replica. |
--import-batch-size |
The number of files to be imported at a time to the target database during the data import phase. This applies only when using IMPORT INTO for data movement. Note: Increasing this value can improve the performance of full-scan queries on the target database shortly after fetch completes, but very high values are not recommended. If any individual file in the import batch fails, you must retry the entire batch.Default: 1000 |
--import-region |
The region of the cloud storage bucket. This applies only to Amazon S3 buckets. Set this flag only if you need to specify an AWS_REGION explicitly when using IMPORT INTO for data movement. For example, --import-region=ap-south-1 . |
--local-path |
The path within the local file server where intermediate files are written (e.g., data/migration/cockroach ). --local-path-listen-addr must be specified. |
--local-path-crdb-access-addr |
Address of a local file server that is publicly accessible. This flag is only necessary if CockroachDB cannot reach the local address specified with --local-path-listen-addr (e.g., when moving data to a CockroachDB Cloud deployment). --local-path and --local-path-listen-addr must be specified.Default: Value of --local-path-listen-addr . |
--local-path-listen-addr |
Write intermediate files to a local file server at the specified address (e.g., 'localhost:3000' ). --local-path must be specified. |
--log-file |
Write messages to the specified log filename. If no filename is provided, messages write to fetch-{datetime}.log . If "stdout" is provided, messages write to stdout . |
--logging |
Level at which to log messages (trace /debug /info /warn /error /fatal /panic ).Default: info |
--metrics-listen-addr |
Address of the Prometheus metrics endpoint, which has the path {address}/metrics . For details on important metrics to monitor, see Monitoring and observability.Default: '127.0.0.1:3030' |
--mode |
Configure the MOLT Fetch behavior: data-load , export-only , or import-only . For details, refer to Fetch mode.Default: data-load |
--non-interactive |
Run the fetch task without interactive prompts. This is recommended only when running molt fetch in an automated process (i.e., a job or continuous integration). |
--pprof-listen-addr |
Address of the pprof endpoint. Default: '127.0.0.1:3031' |
--row-batch-size |
Number of rows per shard to export at a time. For details on sharding, refer to Table sharding. See also Best practices. Default: 100000 |
--schema-filter |
Move schemas that match a specified regular expression. Default: '.*' |
--skip-pk-check |
Skip primary-key matching to allow data load when source or target tables have missing or mismatched primary keys. Disables sharding and bypasses --export-concurrency and --row-batch-size settings. Refer to Skip primary key matching.Default: false |
--table-concurrency |
Number of tables to export at a time. The number of concurrent threads is the product of --export-concurrency and --table-concurrency .Default: 4 |
--table-exclusion-filter |
Exclude tables that match a specified POSIX regular expression. This value cannot be set to '.*' , which would cause every table to be excluded. Default: Empty string |
--table-filter |
Move tables that match a specified POSIX regular expression. Default: '.*' |
--table-handling |
How tables are initialized on the target database (none /drop-on-target-and-recreate /truncate-if-exists ). For details, see Target table handling.Default: none |
--transformations-file |
Path to a JSON file that defines transformations to be performed on the target schema during the fetch task. Refer to Transformations. |
--type-map-file |
Path to a JSON file that contains explicit type mappings for automatic schema creation, when enabled with --table-handling drop-on-target-and-recreate . For details on the JSON format and valid type mappings, see type mapping. |
--use-console-writer |
Use the console writer, which has cleaner log output but introduces more latency. Default: false (log as structured JSON) |
--use-copy |
Use COPY FROM to move data. This makes tables queryable during data load, but is slower than using IMPORT INTO . For details, refer to Data movement. |
--use-implicit-auth |
Use implicit authentication for cloud storage URIs. |
--use-stats-based-sharding |
Enable statistics-based sharding for PostgreSQL sources. This allows sharding of tables with primary keys of any data type and can create more evenly distributed shards compared to the default numerical range sharding. Requires PostgreSQL 11+ and access to pg_stats . For details, refer to Table sharding. |
tokens list
flags
Flag | Description |
---|---|
--conn-string |
(Required) Connection string for the target database. For details, see List active continuation tokens. |
-n , --num-results |
Number of results to return. |
Usage
The following sections describe how to use the molt fetch
flags.
Source and target databases
Follow the recommendations in Connection strings.
--source
--source
specifies the connection string of the source database.
PostgreSQL or CockroachDB:
--source 'postgresql://{username}:{password}@{host}:{port}/{database}'
MySQL:
--source 'mysql://{username}:{password}@{protocol}({host}:{port})/{database}'
Oracle:
--source 'oracle://{username}:{password}@{host}:{port}/{service_name}'
In Oracle migrations, the --source
connection string specifies a PDB (in Oracle Multitenant databases) or single database. The {username}
corresponds to the owner of the tables you will migrate.
--source-cdb
The --source-cdb
flag specifies the connection string for the Oracle container database (CDB) in an Oracle Multitenant deployment. Omit this flag on a non‑multitenant Oracle database.
--source oracle://{username}:{password}@{host}:{port}/{service_name}
--source-cdb oracle://{username}:{password}@{host}:{port}/{container_service}
--target
--target
specifies the CockroachDB connection string:
--target 'postgresql://{username}:{password}@{host}:{port}/{database}
Fetch mode
--mode
specifies the MOLT Fetch behavior:
MOLT Fetch replication modes will be deprecated in favor of a separate replication workflow in an upcoming release. This includes the data-load-and-replication
, replication-only
, and failback
modes.
data-load
data-load
(default) instructs MOLT Fetch to load the source data into CockroachDB. It does not replicate any subsequent changes on the source.
--mode data-load
export-only
and import-only
export-only
instructs MOLT Fetch to export the source data to the specified cloud storage or local file server. It does not load the data into CockroachDB.
--mode export-only
import-only
instructs MOLT Fetch to load the source data in the specified cloud storage or local file server into the CockroachDB target.
--mode import-only
Data load mode
MOLT Fetch can use either IMPORT INTO
or COPY FROM
to load data into CockroachDB.
By default, MOLT Fetch uses IMPORT INTO
:
IMPORT INTO
achieves the highest throughput, but requires taking the CockroachDB tables offline to achieve its import speed. Tables are taken back online once an import job completes successfully. See Best practices.IMPORT INTO
supports compression using the--compression
flag, which reduces the amount of storage used.
--use-copy
configures MOLT Fetch to use COPY FROM
:
COPY FROM
enables your tables to remain online and accessible. However, it is slower than usingIMPORT INTO
.COPY FROM
does not support compression.
COPY FROM
is also used for direct copy.
Table sharding
During the data export phase, MOLT Fetch can divide large tables into multiple shards for concurrent export.
To control the number of shards created per table, use the --export-concurrency
flag. For example:
--export-concurrency=4
For performance considerations with concurrency settings, refer to Best practices.
Two sharding mechanisms are available:
Range-based sharding (default): Tables are divided based on numerical ranges found in primary key values. Only tables with
INT
,FLOAT
, orUUID
primary keys can use range-based sharding. Tables with other primary key data types export as a single shard.Stats-based sharding (PostgreSQL only): Enable with
--use-stats-based-sharding
for PostgreSQL 11+ sources. Tables are divided by analyzing thepg_stats
view to create more evenly distributed shards, up to a maximum of 200 shards. Primary keys of any data type are supported.
Stats-based sharding requires that the user has SELECT
permissions on source tables and on each table's pg_stats
view. The latter permission is automatically granted to users that can read the table.
To optimize stats-based sharding, run ANALYZE
on source tables before migration to ensure that table statistics are up-to-date and shards are evenly distributed. This requires MAINTAIN
or OWNER
permissions on the table. You can analyze specific primary key columns or the entire table. For example:
ANALYZE table_name(PK1, PK2, PK3);
ANALYZE table_name;
Large tables may take time to analyze, but ANALYZE
can run in the background. You can run ANALYZE
with MAINTAIN
or OWNER
privileges during migration preparation, then perform the actual migration with standard SELECT
privileges.
Migration without running ANALYZE
will still work, but shard distribution may be less even.
When using --use-stats-based-sharding
, monitor the log output for each table you want to migrate.
If stats-based sharding is successful on a table, MOLT logs the following INFO
message:
Stats based sharding enabled for table {table_name}
If stats-based sharding fails on a table, MOLT logs the following WARNING
message and defaults to range-based sharding:
Warning: failed to shard table {table_name} using stats based sharding: {reason_for_failure}, falling back to non stats based sharding
The number of shards is dependent on the number of distinct values in the first primary key column of the table to be migrated. If this is different from the number of shards requested with --export-concurrency
, MOLT logs the following WARNING
and continues with the migration:
number of shards formed: {num_shards_formed} is not equal to number of shards requested: {num_shards_requested} for table {table_name}
Because stats-based sharding analyzes the entire table, running --use-stats-based-sharding
with --filter-path
(refer to Selective data movement) will cause imbalanced shards to form.
Data path
MOLT Fetch can move the source data to CockroachDB via cloud storage, a local file server, or directly without an intermediate store.
--bucket-path
Only the path specified in --bucket-path
is used. Query parameters, such as credentials, are ignored. To authenticate cloud storage, follow the steps in Secure cloud storage.
--bucket-path
instructs MOLT Fetch to write intermediate files to a path within Google Cloud Storage, Amazon S3, or Azure Blob Storage to which you have the necessary permissions. Use additional flags, shown in the following examples, to specify authentication or region parameters as required for bucket access.
Connect to a Google Cloud Storage bucket with implicit authentication and assume role:
--bucket-path 'gs://migration/data/cockroach'
--assume-role 'user-test@cluster-ephemeral.iam.gserviceaccount.com'
--use-implicit-auth
Connect to an Amazon S3 bucket and explicitly specify the ap_south-1
region:
--bucket-path 's3://migration/data/cockroach'
--import-region 'ap-south-1'
When --import-region
is set, IMPORT INTO
must be used for data movement.
Connect to an Azure Blob Storage container with implicit authentication:
--bucket-path 'azure-blob://migration/data/cockroach'
--use-implicit-auth
--local-path
--local-path
instructs MOLT Fetch to write intermediate files to a path within a local file server. local-path-listen-addr
specifies the address of the local file server. For example:
--local-path /migration/data/cockroach
--local-path-listen-addr 'localhost:3000'
In some cases, CockroachDB will not be able to use the local address specified by --local-path-listen-addr
. This will depend on where CockroachDB is deployed, the runtime OS, and the source dialect.
For example, if you are migrating to CockroachDB Cloud, such that the Cloud cluster is in a different physical location than the machine running molt fetch
, then CockroachDB cannot reach an address such as localhost:3000
. In these situations, use --local-path-crdb-access-addr
to specify an address for the local file server that is publicly accessible. For example:
--local-path /migration/data/cockroach
--local-path-listen-addr 'localhost:3000'
--local-path-crdb-access-addr '44.55.66.77:3000'
Cloud storage is often preferable to a local file server, which can require considerable disk space.
--direct-copy
--direct-copy
specifies that MOLT Fetch should use COPY FROM
to move the source data directly to CockroachDB without an intermediate store:
Because the data is held in memory, the machine must have sufficient RAM for the data currently in flight:
average size of each row * --row-batch-size * --export-concurrency * --table-concurrency
Direct copy does not support compression or continuation.
The
--use-copy
flag is redundant with--direct-copy
.
Schema and table selection
By default, MOLT Fetch moves all data from the --source
database to CockroachDB. Use the following flags to move a subset of data.
--schema-filter
specifies a range of schema objects to move to CockroachDB, formatted as a POSIX regex string. For example, to move every table in the source database's public
schema:
--schema-filter 'public'
--table-filter
and --table-exclusion-filter
specify tables to include and exclude from the migration, respectively, formatted as POSIX regex strings. For example, to move every source table that has "user" in the table name and exclude every source table that has "temp" in the table name:
--table-filter '.*user.*' --table-exclusion-filter '.*temp.*'
Selective data movement
Use --filter-path
to specify the path to a JSON file that defines row-level filtering for data load. This enables you to move a subset of data in a table, rather than all data in the table. To apply row-level filters during replication, use MOLT Replicator with userscripts.
--filter-path 'data-filter.json'
The JSON file should contain one or more entries in filters
, each with a resource_specifier
(schema
and table
) and a SQL expression expr
. For example, the following example exports only rows from public.t1
where v > 100
:
{
"filters": [
{
"resource_specifier": {
"schema": "public",
"table": "t1"
},
"expr": "v > 100"
}
]
}
expr
is case-sensitive and must be valid in your source dialect. For example, when using Oracle as the source, quote all identifiers and escape embedded quotes:
{
"filters": [
{
"resource_specifier": {
"schema": "C##FETCHORACLEFILTERTEST",
"table": "FILTERTBL"
},
"expr": "ABS(\"X\") > 10 AND CEIL(\"X\") < 100 AND FLOOR(\"X\") > 0 AND ROUND(\"X\", 2) < 100.00 AND TRUNC(\"X\", 0) > 0 AND MOD(\"X\", 2) = 0 AND FLOOR(\"X\" / 3) > 1"
}
]
}
If the expression references columns that are not indexed, MOLT Fetch will emit a warning like: filter expression ‘v > 100' contains column ‘v' which is not indexed. This may lead to performance issues.
Target table handling
--table-handling
defines how MOLT Fetch loads data on the CockroachDB tables that match the selection.
To load the data without changing the existing data in the tables, use none
:
--table-handling none
To truncate tables before loading the data, use truncate-if-exists
:
--table-handling truncate-if-exists
To drop existing tables and create new tables before loading the data, use drop-on-target-and-recreate
:
--table-handling drop-on-target-and-recreate
When using the drop-on-target-and-recreate
option, MOLT Fetch creates a new CockroachDB table to load the source data if one does not already exist. To guide the automatic schema creation, you can explicitly map source types to CockroachDB types. drop-on-target-and-recreate
does not create indexes or constraints other than PRIMARY KEY
and NOT NULL
.
Mismatch handling
If either none
or truncate-if-exists
is set, molt fetch
loads data into the existing tables on the target CockroachDB database. If the target schema mismatches the source schema, molt fetch
will exit early in certain cases, and will need to be re-run from the beginning.
This does not apply when drop-on-target-and-recreate
is specified, since this option automatically creates a compatible CockroachDB schema.
molt fetch
exits early in the following cases, and will output a log with a corresponding mismatch_tag
and failable_mismatch
set to true
:
- A source table is missing a primary key.
A source and table primary key have mismatching types.
Tip:These restrictions (missing or mismatching primary keys) can be bypassed with--skip-pk-check
.A
STRING
primary key has a different collation on the source and target.A source and target column have mismatching types that are not allowable mappings.
A target table is missing a column that is in the corresponding source table.
A source column is nullable, but the corresponding target column is not nullable (i.e., the constraint is more strict on the target).
molt fetch
can continue in the following cases, and will output a log with a corresponding mismatch_tag
and failable_mismatch
set to false
:
- A target table has a column that is not in the corresponding source table.
- A source column has a
NOT NULL
constraint, and the corresponding target column is nullable (i.e., the constraint is less strict on the target). - A
DEFAULT
,CHECK
,FOREIGN KEY
, orUNIQUE
constraint is specified on a target column and not on the source column.
Skip primary key matching
--skip-pk-check
removes the requirement that source and target tables share matching primary keys for data load. When this flag is set:
- The data load proceeds even if the source or target table lacks a primary key, or if their primary key columns do not match.
- Table sharding is disabled. Each table is exported in a single batch within one shard, bypassing
--export-concurrency
and--row-batch-size
. As a result, memory usage and execution time may increase due to full table scans. - If the source table contains duplicate rows but the target has
PRIMARY KEY
orUNIQUE
constraints, duplicate rows are deduplicated during import.
When --skip-pk-check
is set, all tables are treated as if they lack a primary key, and are thus exported in a single unsharded batch. To avoid performance issues, use this flag with --table-filter
to target only tables without a primary key.
For example:
molt fetch \
--mode data-load \
--table-filter 'nopktbl' \
--skip-pk-check
Example log output when --skip-pk-check
is enabled:
{"level":"info","message":"sharding is skipped for table public.nopktbl - flag skip-pk-check is specified and thus no PK for source table is specified"}
Type mapping
If drop-on-target-and-recreate
is set, MOLT Fetch automatically creates a CockroachDB schema that is compatible with the source data. The column types are determined as follows:
- PostgreSQL types are mapped to existing CockroachDB types that have the same
OID
. The following MySQL types are mapped to corresponding CockroachDB types:
MySQL type CockroachDB type Notes CHAR
,CHARACTER
,VARCHAR
,NCHAR
,NVARCHAR
VARCHAR
Varying-length string; raises warning if BYTE semantics used TINYTEXT
,TEXT
,MEDIUMTEXT
,LONGTEXT
STRING
Unlimited-length string GEOMETRY
GEOMETRY
Spatial type (PostGIS-style) LINESTRING
LINESTRING
Spatial type (PostGIS-style) POINT
POINT
Spatial type (PostGIS-style) POLYGON
POLYGON
Spatial type (PostGIS-style) MULTIPOINT
MULTIPOINT
Spatial type (PostGIS-style) MULTILINESTRING
MULTILINESTRING
Spatial type (PostGIS-style) MULTIPOLYGON
MULTIPOLYGON
Spatial type (PostGIS-style) GEOMETRYCOLLECTION
,GEOMCOLLECTION
GEOMETRYCOLLECTION
Spatial type (PostGIS-style) JSON
JSONB
CRDB's native JSON format TINYINT
,INT1
INT2
2-byte integer BLOB
BYTES
Binary data SMALLINT
,INT2
INT2
2-byte integer MEDIUMINT
,INT
,INTEGER
,INT4
INT4
4-byte integer BIGINT
,INT8
INT
8-byte integer FLOAT
FLOAT4
32-bit float DOUBLE
FLOAT
64-bit float DECIMAL
,NUMERIC
,REAL
DECIMAL
Validates scale ≤ precision; warns if precision > 19 BINARY
,VARBINARY
BYTES
Binary data DATETIME
TIMESTAMP
Date and time (no time zone) TIMESTAMP
TIMESTAMPTZ
Date and time with time zone TIME
TIME
Time of day (no date) BIT
VARBIT
Variable-length bit array DATE
DATE
Date only (no time) TINYBLOB
,MEDIUMBLOB
,LONGBLOB
BYTES
Binary data BOOL
,BOOLEAN
BOOL
Boolean The following Oracle types are mapped to CockroachDB types:
Oracle type(s) CockroachDB type Notes NCHAR
,CHAR
,CHARACTER
CHAR
(n) orCHAR
Fixed-length character; falls back to unbounded if length not specified VARCHAR
,VARCHAR2
,NVARCHAR2
VARCHAR
(n) orVARCHAR
Varying-length string; raises warning if BYTE semantics used STRING
STRING
Unlimited-length string SMALLINT
INT2
2-byte integer INTEGER
,INT
,SIMPLE_INTEGER
INT4
4-byte integer LONG
INT8
8-byte integer FLOAT
,BINARY_FLOAT
,REAL
FLOAT4
32-bit float DOUBLE
,BINARY_DOUBLE
FLOAT8
64-bit float DEC
,NUMBER
,DECIMAL
,NUMERIC
DECIMAL
(p, s) orDECIMAL
Validates scale ≤ precision; warns if precision > 19 DATE
DATE
Date only (no time) BLOB
,RAW
,LONG RAW
BYTES
Binary data JSON
JSONB
CRDB's native JSON format CLOB
,NCLOB
STRING
Treated as large text BOOLEAN
BOOL
Boolean TIMESTAMP
TIMESTAMP
orTIMESTAMPTZ
If WITH TIME ZONE
→TIMESTAMPTZ
, elseTIMESTAMP
ROWID
,UROWID
STRING
Treated as opaque identifier SDO_GEOMETRY
GEOMETRY
Spatial type (PostGIS-style) XMLTYPE
STRING
Stored as text To override the default mappings for automatic schema creation, you can map source to target CockroachDB types explicitly. These are defined in the JSON file indicated by the
--type-map-file
flag. The allowable custom mappings are valid CockroachDB aliases, casts, and the following mappings specific to MOLT Fetch and Verify:
--type-map-file
specifies the path to the JSON file containing the explicit type mappings. For example:
--type-map-file 'type-mappings.json'
The following JSON example defines two type mappings:
[
{
"table": "public.t1",
"column_type_map": [
{
"column": "*",
"source_type": "int",
"crdb_type": "INT2"
},
{
"column": "name",
"source_type": "varbit",
"crdb_type": "string"
}
]
}
]
table
specifies the table that will use the custom type mappings incolumn_type_map
. The value is written as{schema}.{table}
.column
specifies the column that will use the custom type mapping. If*
is specified, then all columns in thetable
with the matchingsource_type
are converted.source_type
specifies the source type to be mapped.crdb_type
specifies the target CockroachDB type to be mapped.
Transformations
You can define transformation rules to be performed on the target schema during the fetch task. These can be used to:
- Map computed columns to a target schema.
- Map partitioned tables to a single target table.
- Rename tables on the target schema.
Transformation rules are defined in the JSON file indicated by the --transformations-file
flag. For example:
--transformations-file 'transformation-rules.json'
The following JSON example defines two transformation rules:
{
"transforms": [
{
"id": 1,
"resource_specifier": {
"schema": ".*",
"table": ".*"
},
"column_exclusion_opts": {
"add_computed_def": true,
"column": "^age$"
}
},
{
"id": 2,
"resource_specifier": {
"schema": "public",
"table": "charges_part.*"
},
"table_rename_opts": {
"value": "charges"
}
}
]
}
resource_specifier
configures the following options for transformation rules:schema
specifies the schemas to be affected by the transformation rule, formatted as a POSIX regex string.table
specifies the tables to be affected by the transformation rule, formatted as a POSIX regex string.
column_exclusion_opts
configures the following options for column exclusions and computed columns:column
specifies source columns to exclude from being mapped to regular columns on the target schema. It is formatted as a POSIX regex string.add_computed_def
, when set totrue
, specifies that each matchingcolumn
should be mapped to a computed column on the target schema. Instead of being moved from the source, the column data is generated on the target usingALTER TABLE ... ADD COLUMN
and the computed column definition from the source schema. This assumes that all matching columns are computed columns on the source.Warning:Columns that match thecolumn
regex will not be moved to CockroachDB ifadd_computed_def
is omitted or set tofalse
(default), or if a matching column is a non-computed column.
table_rename_opts
configures the following option for table renaming:value
specifies the table name to which the matchingresource_specifier
is mapped. If only one source table matchesresource_specifier
, it is renamed totable_rename_opts.value
on the target. If more than one table matchesresource_specifier
(i.e., an n-to-1 mapping), the fetch task assumes that all matching tables are partitioned tables with the same schema, and moves their data to a table namedtable_rename_opts.value
on the target. Otherwise, the task will error.Additionally, in an n-to-1 mapping situation:
- Specify
--use-copy
or--direct-copy
for data movement. This is because the data from the source tables is loaded concurrently into the target table. - Create the target table schema manually, and do not use
--table-handling drop-on-target-and-recreate
for target table handling.
- Specify
The preceding JSON example therefore defines two rules:
- Rule
1
maps all sourceage
columns on the source database to computed columns on CockroachDB. This assumes that all matchingage
columns are defined as computed columns on the source. - Rule
2
maps all table names with prefixcharges_part
from the source database to a singlecharges
table on CockroachDB (i.e., an n-to-1 mapping). This assumes that all matchingcharges_part.*
tables have the same schema.
Each rule is applied in the order it is defined. If two rules overlap, the later rule will override the earlier rule.
To verify that the logging shows that the computed columns are being created:
When running molt fetch
, set --logging debug
and look for ALTER TABLE ... ADD COLUMN
statements with the STORED
or VIRTUAL
keywords in the log output:
{"level":"debug","time":"2024-07-22T12:01:51-04:00","message":"running: ALTER TABLE IF EXISTS public.computed ADD COLUMN computed_col INT8 NOT NULL AS ((col1 + col2)) STORED"}
After running molt fetch
, issue a SHOW CREATE TABLE
statement on CockroachDB:
SHOW CREATE TABLE computed;
table_name | create_statement
-------------+-------------------------------------------------------------------
computed | CREATE TABLE public.computed (
...
| computed_col INT8 NOT NULL AS (col1 + col2) STORED
| )
Fetch continuation
If MOLT Fetch fails while loading data into CockroachDB from intermediate files, it exits with an error message, fetch ID, and continuation token for each table that failed to load on the target database. You can use this information to continue the task from the continuation point where it was interrupted.
Continuation is only possible under the following conditions:
- All data has been exported from the source database into intermediate files on cloud or local storage.
- The initial load of source data into the target CockroachDB database is incomplete.
Only one fetch ID and set of continuation tokens, each token corresponding to a table, are active at any time. See List active continuation tokens.
To retry all data starting from the continuation point, reissue the molt fetch
command and include the --fetch-id
.
--fetch-id d44762e5-6f70-43f8-8e15-58b4de10a007
To retry a specific table that failed, include both --fetch-id
and --continuation-token
. The latter flag specifies a token string that corresponds to a specific table on the source database. A continuation token is written in the molt fetch
output for each failed table. If the fetch task encounters a subsequent error, it generates a new token for each failed table. See List active continuation tokens.
This will retry only the table that corresponds to the continuation token. If the fetch task succeeds, there may still be source data that is not yet loaded into CockroachDB.
--fetch-id d44762e5-6f70-43f8-8e15-58b4de10a007
--continuation-token 011762e5-6f70-43f8-8e15-58b4de10a007
To retry all data starting from a specific file, include both --fetch-id
and --continuation-file-name
. The latter flag specifies the filename of an intermediate file in cloud or local storage. All filenames are prepended with part_
and have the .csv.gz
or .csv
extension, depending on compression type (gzip by default). For example:
--fetch-id d44762e5-6f70-43f8-8e15-58b4de10a007
--continuation-file-name part_00000003.csv.gz
Continuation is not possible when using direct copy.
List active continuation tokens
To view all active continuation tokens, issue a molt fetch tokens list
command along with --conn-string
, which specifies the connection string for the target CockroachDB database. For example:
molt fetch tokens list \
--conn-string 'postgres://root@localhost:26257/defaultdb?sslmode=verify-full'
+--------------------------------------+--------------------------------------+------------------+----------------------+
| ID | FETCH ID | TABLE NAME | FILE NAME |
+--------------------------------------+--------------------------------------+------------------+----------------------+
| f6f0284c-d9c1-43c9-8fde-af609d0dbd82 | 66443597-5689-4df3-a7b9-9fc5e27180eb | public.employees | part_00000001.csv.gz |
+--------------------------------------+--------------------------------------+------------------+----------------------+
Continuation Tokens.
CDC cursor
A change data capture (CDC) cursor is written to the output as cdc_cursor
at the beginning and end of the fetch task. For example:
{"level":"info","type":"summary","fetch_id":"735a4fe0-c478-4de7-a342-cfa9738783dc","num_tables":1,"tables":["public.employees"],"cdc_cursor":"b7f9e0fa-2753-1e1f-5d9b-2402ac810003:3-21","net_duration_ms":4879.890041,"net_duration":"000h 00m 04s","time":"2024-03-18T12:37:02-04:00","message":"fetch complete"}
Use the cdc_cursor
value as the starting GTID set for MySQL replication with MOLT Replicator.
You can also use the cdc_cursor
value with an external change data capture (CDC) tool to continuously replicate subsequent changes from the source database to CockroachDB.
Best practices
Test and validate
To verify that your connections and configuration work properly, run MOLT Fetch in a staging environment before migrating any data in production. Use a test or development environment that closely resembles production.
Connection strings
URL-encode the connection strings for the source and target databases. This ensures that the MOLT tools can parse special characters in your password.
To keep your database credentials out of shell history and logs, follow these best practices when specifying your source and target connection strings:
Avoid plaintext connection strings.
URL-encode connection strings for the source database and CockroachDB so special characters in passwords are handled correctly.
Given a password
a$52&
, pass it to themolt escape-password
command with single quotes:molt escape-password --password 'a$52&'
Use the encoded password in your
--source
connection string. For example:--source 'postgres://migration_user:a%2452%26@localhost:5432/replicationload'
Provide your connection strings as environment variables. For example:
export SOURCE="postgres://migration_user:a%2452%26@localhost:5432/molt?sslmode=verify-full" export TARGET="postgres://root@localhost:26257/molt?sslmode=verify-full"
Afterward, reference the environment variables as follows:
--source $SOURCE --target $TARGET
If possible, use an external secrets manager to load the environment variables from stored secrets.
Configure the source database and connection
To prevent connections from terminating prematurely during the data export phase, set the following to high values on the source database:
Maximum allowed number of connections. MOLT Fetch can export data across multiple connections. The number of connections it will create is the number of shards (
--export-concurrency
) multiplied by the number of tables (--table-concurrency
) being exported concurrently.Note:With the default numerical range sharding, only tables with primary key types of
INT
,FLOAT
, orUUID
can be sharded. PostgreSQL users can enable--use-stats-based-sharding
to use statistics-based sharding for tables with primary keys of any data type. For details, refer to Table sharding.Maximum lifetime of a connection.
If a PostgreSQL database is set as a source, ensure that
idle_in_transaction_session_timeout
on PostgreSQL is either disabled or set to a value longer than the duration of the data export phase. Otherwise, the connection will be prematurely terminated. To estimate the time needed to export the PostgreSQL tables, you can perform a dry run and sum the value ofmolt_fetch_table_export_duration_ms
for all exported tables.
Optimize performance
To optimize data load performance, drop all non-
PRIMARY KEY
constraints and indexes on the target CockroachDB database before migrating:FOREIGN KEY
UNIQUE
- Secondary indexes
CHECK
DEFAULT
NOT NULL
(you do not need to drop this constraint when usingdrop-on-target-and-recreate
for table handling)
Warning:Do not drop
PRIMARY KEY
constraints.You can recreate constraints and indexes after loading the data.
For PostgreSQL sources using
--use-stats-based-sharding
, runANALYZE
on source tables before migration to ensure optimal shard distribution. This is especially important for large tables where even distribution can significantly improve export performance.To prevent memory outages during
READ COMMITTED
data export of tables with large rows, estimate the amount of memory used to export a table:--row-batch-size * --export-concurrency * average size of the table rows
If you are exporting more than one table at a time (i.e.,
--table-concurrency
is set higher than1
), add the estimated memory usage for the tables with the largest row sizes. Ensure that you have sufficient memory to runmolt fetch
, and adjust--row-batch-size
accordingly. For details on how concurrency and sharding interact, refer to Table sharding.If a table in the source database is much larger than the other tables, filter and export the largest table in its own
molt fetch
task. Repeat this for each of the largest tables. Then export the remaining tables in another task.Ensure that the machine running MOLT Fetch is large enough to handle the amount of data being migrated. Fetch performance can sometimes be limited by available resources, but should always be making progress. To identify possible resource constraints, observe the
molt_fetch_rows_exported
metric for decreases in the number of rows being processed. You can use the sample Grafana dashboard to view metrics. For details on optimizing export performance through sharding, refer to Table sharding.
Import and continuation handling
- When using
IMPORT INTO
during the data import phase to load tables into CockroachDB, if the fetch task terminates before the import job completes, the hanging import job on the target database will keep the table offline. To make this table accessible again, manually resume or cancel the job. Then resumemolt fetch
using continuation, or restart the task from the beginning.
Monitoring and observability
Metrics monitoring: By default, MOLT Fetch exports Prometheus metrics at 127.0.0.1:3030/metrics
. You can configure this endpoint with the --metrics-listen-addr
flag.
Cockroach Labs recommends monitoring the following metrics:
Metric Name | Description |
---|---|
molt_fetch_num_tables |
Number of tables that will be moved from the source. |
molt_fetch_num_task_errors |
Number of errors encountered by the fetch task. |
molt_fetch_overall_duration |
Duration (in seconds) of the fetch task. |
molt_fetch_rows_exported |
Number of rows that have been exported from a table. For example:molt_fetch_rows_exported{table="public.users"} |
molt_fetch_rows_imported |
Number of rows that have been imported from a table. For example:molt_fetch_rows_imported{table="public.users"} |
molt_fetch_table_export_duration_ms |
Duration (in milliseconds) of a table's export. For example:molt_fetch_table_export_duration_ms{table="public.users"} |
molt_fetch_table_import_duration_ms |
Duration (in milliseconds) of a table's import. For example:molt_fetch_table_import_duration_ms{table="public.users"} |
You can also use the sample Grafana dashboard to view the preceding metrics.
Security
Cockroach Labs strongly recommends the following:
Connection security and credentials
- Use secure connections to the source and target CockroachDB database whenever possible.
- By default, insecure connections (i.e.,
sslmode=disable
on PostgreSQL;sslmode
not set on MySQL) are disallowed. When using an insecure connection,molt fetch
returns an error. To override this check, you can enable the--allow-tls-mode-disable
flag. Do this only when testing, or if a secure SSL/TLS connection to the source or target database is not possible.
Cloud storage security
Ensure that access control is properly configured for Amazon S3, Google Cloud Storage, or Azure Blob Storage.
Amazon S3
Set the following environment variables in the terminal running
molt fetch
:export AWS_REGION='us-east-1' export AWS_SECRET_ACCESS_KEY='key' export AWS_ACCESS_KEY_ID='id'
To run
molt fetch
in a containerized environment (e.g., Docker), pass the required environment variables using-e
. If your authentication method relies on local credential files, you may also need to volume map the host path to the appropriate location inside the container using-v
. For example:docker run \ -e AWS_ACCESS_KEY_ID='your-access-key' \ -e AWS_SECRET_ACCESS_KEY='your-secret-key' \ -v ~/.aws:/root/.aws \ -it \ cockroachdb/molt fetch \ --bucket-path 's3://migration/data/cockroach' ...
Alternatively, set
--use-implicit-auth
to use implicit authentication. When using assume role authentication, specify the service account with--assume-role
. For example:--bucket-path 's3://migration/data/cockroach' --assume-role 'arn:aws:iam::123456789012:role/MyMigrationRole' --use-implicit-auth
Set
--import-region
to specify anAWS_REGION
(e.g.,--import-region 'ap-south-1'
).Ensure the S3 bucket is created and accessible by authorized roles and users only.
Google Cloud Storage
Authenticate your local environment with Application Default Credentials:
Using
gcloud
:gcloud init gcloud auth application-default login
Using the environment variable:
export GOOGLE_APPLICATION_CREDENTIALS={path_to_cred_json}
To run
molt fetch
in a containerized environment (e.g., Docker), pass the required environment variables using-e
. If your authentication method relies on local credential files, you may also need to volume map the host path to the appropriate location inside the container using-v
. For example:docker run \ -e GOOGLE_APPLICATION_CREDENTIALS='/root/.config/gcloud/application_default_credentials.json' \ -v ~/.config/gcloud:/root/.config/gcloud \ -it \ cockroachdb/molt fetch \ --bucket-path 'gs://migration/data/cockroach' ...
Alternatively, set
--use-implicit-auth
to use implicit authentication. When using assume role authentication, specify the service account with--assume-role
. For example:--bucket-path 'gs://migration/data/cockroach --use-implicit-auth --assume-role 'user-test@cluster-ephemeral.iam.gserviceaccount.com'
Ensure the Google Cloud Storage bucket is created and accessible by authorized roles and users only.
Azure Blob Storage
Set the following environment variables in the terminal running
molt fetch
:export AZURE_ACCOUNT_NAME='account' export AZURE_ACCOUNT_KEY='key'
You can also speicfy client and tenant credentials as environment variables:
export AZURE_CLIENT_SECRET='secret' export AZURE_TENANT_ID='id'
To run
molt fetch
in a containerized environment (e.g., Docker), pass the required environment variables using-e
. If your authentication method relies on local credential files, you may also need to volume map the host path to the appropriate location inside the container using-v
. For example:docker run \ -e AZURE_ACCOUNT_NAME='account' \ -e AZURE_ACCOUNT_KEY='key' \ -e AZURE_CLIENT_SECRET='secret' \ -e AZURE_TENANT_ID='id' \ -v ~/.azure:/root/.azure \ -it \ cockroachdb/molt fetch \ --bucket-path 'azure-blob://migration/data/cockroach' ...
Alternatively, set
--use-implicit-auth
to use implicit authentication: For example:--bucket-path 'azure-blob://migration/data/cockroach' --use-implicit-auth
This mode supports Azure managed identities and workload identities.
Ensure the Azure Blob Storage container is created and accessible by authorized roles and users only.
Examples
For detailed examples of using MOLT Fetch, refer to the migration workflow tutorials:
- Bulk load migration: Load data with MOLT Fetch using planned downtime
- Minimal-downtime migrations: Load data with MOLT Fetch and set up ongoing replication with MOLT Replicator
After successfully running MOLT Fetch, you can run molt verify
to confirm that data was migrated successfully without missing or mismatched rows.