3 ms·
Why does Redis need SSL/TLS? It's meant to be used as a backend service across trusted networks. And if you need to use it over untrusted networks, you're best
by aphextron 9y ago
Why does Redis need SSL/TLS? It's meant to be used as a backend service across trusted networks. And if you need to use it over untrusted networks, you're best off using an actual server like NGINX or HAProxy to mediate it. Not to mention the killer feature of Redis is not neccessarily throughput, but it's best-in-class latency, which could be severely affected by SSL termination (and if you are doing SSL termination on the same machine as your Redis instance, you're doing it wrong.). This seems like added bloat to a really great lightweight tool.
- derefr 9y agoMost Redis DBaaS services “expose a Redis instance to the Internet”, because they’re not running in the same cloud as you are (even if it’s the same underlying datacenter.) As well, if my understanding is correct, the OP’s goal is to create globally-distributed Redis clusters, where lower-level solutions like VPN network peering have relatively bad performance compared to plain userland TLS.
- aphextron 9y ago>Most Redis DBaaS services “expose a Redis instance to the Internet”, because they’re not running in the same cloud as you are (even if it’s the same underlying datacenter.) Sure, but they are almost certainly not just directly exposing Redis on port 6379. How would they handle auth, rate limiting, etc.?
- deleted 9y ago[deleted]
- ddorian43 9y agoI think they really are. Give you a redia inside vps and the hardware will rate limit you.
- zeroxfe 9y agoYou do auth with the AUTH command -- you wouldn't want to do AUTH without SSL/TLS. You don't need anything more sophisticated than that for the use-case where you're just making Redis on one cloud available to trusted clients on another.
- DrJosiah 9y agoRedis is a database. Databases should have encryption over the wire. I was late :P