Redis 4.x Cookbook

How it works...

We introduced three configuration options to tune Redis in order to enhance its security. As mentioned, you are strongly advised not to expose Redis to the public network. If your Redis Server has to be accessed via the public network, using a binding port different from the default port of 6379 would somewhat alleviate the risk of port scanners, although it is not difficult to detect the server behind the port via Redis protocols.

The Redis authentication password resides in the configuration file as plain text. Hence, the access permissions of the Redis configuration file should be set strictly to prevent non-administrator access. Also, the password feature of Redis should be considered as the last line of defense, as the ...