Redis password settings, access control, and other security settings _ database Other

Redis as a high-speed database, on the Internet, must have a corresponding security mechanism to protect.

1. A more secure approach is to use an IP-bound approach for control.

Copy Code code as follows:

Bind 127.0.0.1

Indicates that access is only allowed through 127.0.0.1 this IP address. Then in fact only oneself can access oneself, the other machine cannot access him.

This order is to be changed in redis.conf.

Attention here, please.

Our common startup mode is Src/redis-server

Change to Src/redis-server redis.conf

Because it needs to load the configuration file.

This method is not very good, I will inevitably have more than one machine access to a Redis service

2. Set password to provide remote login

Redis.conf
Found it
Requirepass
Write on
Requirepass YourPassword
After you set the password, you can log in, but you cannot execute the command.

Copy Code code as follows:

Src/redis-cli-h 192.168.1.121
Keys *
(Error) ERR Operation not permitted

Authorization command

Copy Code code as follows:

Auth 123456

Login with Password method

Copy Code code as follows:

./redis-cli-h 192.168.1.121-a ABCD

Because the Redis concurrency is extremely strong, only the password, the attacker may send a large number of guessing password requests in the short term, it is easy to brute force, so it is recommended that the longer the better, such as 20-bit. (The password in the Conf file is plaintext, so don't worry yourself will forget)