There's more...
Redis has a special mode called protected mode, which can be enabled by setting protected-mode yes in the configuration file. If protected mode is enabled, and at the same time the Redis Server is configured to listen to all interfaces (there is no bind directive specified in the configuration file), and password authentication is disabled, Redis will only reply to queries from loopback interfaces and Unix sockets. Queries from other interfaces will get a reply with the error.
The protected mode is enabled by default and should not be disabled unless Redis has to listen to all interfaces and the network environment is safe, even with password authentication disabled. Other precautions can be taken in the operating system to ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access