Securing Redis

Security is apparently one of the fundamental concerns in any production environment. However, Redis itself provides very limited features in terms of security, because it is designed to be deployed in an environment where all clients are trusted. The original design idea of Redis is more focused on the optimization of maximum performance and simplicity rather than the full authentication and access control support. Although most of Redis' security relies on the outside of Redis (OS, firewall), there is still something we can do to protect a Redis Server from unwanted access and attack. In this recipe, we will discuss some common practices to secure Redis in the production environment.

Getting ready…

You need to finish the installation of the Redis Server, as we described in the Downloading and installing Redis recipe in Chapter 1, Getting Started with Redis.

How to do it...

Let's discuss how to secure Redis with proper network configuration. It is never advisable to expose a...