4 ms·
> authorized networks ensure that the Redis instance is accessible only when connected to the authorized VPC network That's good that this is handled smoothly
by neuland 8y ago
> authorized networks ensure that the Redis instance is accessible only when connected to the authorized VPC network
That's good that this is handled smoothly as it's the way Redis wants auth to work.
I've always seen the security story to be one of the big weaknesses of Redis. No TLS, opt-in password with no user and only one shared password, no per-database privileges, etc.
Does anyone know the status of TLS in Redis? I heard somewhere that Amazon has a patch to add that directly, rather than having to use stunnel.
- kozziollek 8y agoIt's being worked in in pull request: https://github.com/antirez/redis/pull/4855 https://github.com/antirez/redis/pull/4855 Also, antirez recently met with patch author: https://news.ycombinator.com/item?id=16943289 https://news.ycombinator.com/item?id=16943289
- neuland 8y agoCool! I saw that thread last week, but didn't check back in to see that antirez responded.