Redis 4.x Cookbook

Securing Redis

Security is apparently one of the fundamental concerns in any production environment. However, Redis itself provides very limited features in terms of security, because it is designed to be deployed in an environment where all clients are trusted. The original design idea of Redis is more focused on the optimization of maximum performance and simplicity rather than the full authentication and access control support. Although most of Redis' security relies on the outside of Redis (OS, firewall), there is still something we can do to protect a Redis Server from unwanted access and attack. In this recipe, we will discuss some common practices to secure Redis in the production environment.