Multi-user server environment and Memcached security

We strive to integrate Memcached into our infrastructure, but there is a security problem before doing this. We are launching several platforms, including ASP.NET and ColdFusion, and many application developers have many small applications running on different platforms. The following is a concern:

Appendix A places the dog element in the cache.

Appendix B reads the dog element (or worse: Appendix B updates the dog element)

After that, application A either retrieves bad information or is already viewing its information, aka β€œstolen”. We would like to make sure that each application can interact only with its own sandbox and cannot interfere or read other application data.

Is it possible? Thank.

+3
source share
3 answers

Create multiple memcached instances in your infrastructure and give each instance a different port. This way you isolate yourself - however, this is not the way you want to do something, you will have to share the available memory resources.


"" - .. Anon .

: , , memcached. anon , .

+1

memcached ( , , ..), . (SASL) memcached, .

, ( ), / / / , , .

0

, SASL auth, .

, , . , , . 1 dog, User2 dog, .

0
source

Source: https://habr.com/ru/post/1734314/


All Articles