DEV Community

Discussion on: What is Redis? Get started with data types, commands, and more

Collapse
 
kmistele profile image
Kyle Mistele

This is great, I've been meaning to learn to use Redis for a while!

It's important to note that redis does not have password-based authentication enabled by default - its design philosophy is that it should never be connected to an untrusted network.

If you are using redis in a production environment, or if your redis server is on the public internet, remember to set a password and to put strict firewall rules in place such that only hosts that need to be able to connect to it are able to.

An unsecured redis can result in data leakage, and older versions can be abused to achieve remote code execution by abusing its replication features.