3 ms·
This should have been run as a non privileged user, on private IPs, a local socket or localhost along with a long and strong password, so only authenticated con
by techjuice 11y ago
This should have been run as a non privileged user, on private IPs, a local socket or localhost along with a long and strong password, so only authenticated connections would be able to be able to use it.
Since none of these memory store solutions (memcached, redis, etc.) should be able to be connected to on public addresses it would be a nice feature to only allow them to listen on private internal IP space or sockets by default and fail to run if anything else is used.
This would help reduce everyone's attack surface by default and help prevent misconfiguration by the user or 3rd party integration software.
- Terretta 11y agoYou can use arbitrary address space in a non-routed subnet. But it could refuse non RFC 1918 addresses unless overridden.