Shift Happens
Technology
Make sure Redis is secure
A little while ago, I read a post about the insecurity of Redis. It was mainly about the fact that most Redis installation or totally open...
Written by
Jeroen van Baarsen
Published
A little while ago, I read a post about the insecurity of Redis. It was mainly about the fact that most Redis installation or totally open to the outside world, without any authentication.
When I read that, I immediately looked at our servers, and it turned out, some of them had the same problem. Redis was open for the outside world.
The main problem is that by default Redis is insecure, they don't block outside traffic, and they don't urge you to set up AUTH for your installation.
It's very simple to make sure you are secure. All you have to do is to bind the listen IP to 127.0.0.1 instead of the outside world!
Is my installation insecure?
It's easy to find out! You can do so by running the following command:
$ telnet your_ip 6379
If you see the following text, your server is insecure!
Steps to make your installation secure
Go to /etc/redis/
Open the config file $ vi 6379.conf
Find the line # bind 127.0.0.1 Uncomment that line, and save the file
Restart your redis service $ /etc/init.d/redis_6379 restart
I hope this post allowed you to improve the security of your Redis server. If you have any questions, you can ping me on Twitter (@jvanbaarsen) or by
email (jeroen@firmhouse.com)
Keep reading
Technology
Why local payment methods matter for scaling recurring commerce across Europe
European customers who can pay with their preferred methods complete purchases more often and feel better about their shopping experience. This local touch helps customers feel at home during checkout—essential for subscription models that depend on long-term relationships.
Deidre Olsen
·
Technology
Seamless integration: Transforming customer experience with unified commerce
With a unified commerce strategy, merchants can transcend omnichannel limitations, resulting in personalized customer journeys, optimized order fulfillment, and flexible payment and delivery options.
Deidre Olsen
·
Technology
Embracing Digital Transformation With As-A-Service Models
Digitalization has changed not only technology but the way we do business nowadays. Learn how the trend for businesses has been moving in the direction of as-a-service models.
Cristina Quijano
·