What are some protection options for redis db?

Question

I run Redis locally and have several computers interacting with redis on the same port - any suggestions on good ways to block access to Redis? The database runs on Mac OS X. Thank you.

Edit: it is assumed that I do not want to use the built-in (non-backward compatible) Redis requirepass directive in config.

Answer 1

In EC2, we block machines that can send requests to the redis port in our redis window only for our application window (we also use it only to store insensitive data).

Another option would be to not open the redis external port from the outside, but you need to forward the ports through the ssh tunnel . Then you can only allow requests passing through the tunnel and only allow ssh with a known key.

You pay ssh fine, but maybe this is normal for your scenario.

Answer 2

The configuration file has a simple requirepass directive that allows access only to clients that authenticate via AUTH . I recommend reading the docs for this command, namely the "note" section.