All 7 Redis Security & ACL questions
More in Redis Security & ACL
How do you create a Redis ACL user with permissions restricted to only specific commands and a specific pattern of keys? What are Redis ACL categories, and how do they simplify granting permissions for groups of related commands? What are some general security best practices to follow when deploying Redis, beyond just setting a password? How would you design a comprehensive Redis ACL strategy for an organization with multiple applications and teams accessing the same Redis infrastructure?
Advertisement
Back to results for “Architecture”
Redis › Redis Security & ACL

How do you secure Redis network communication using TLS encryption, and what performance considerations come with enabling it?

Advanced

Answer

You configure Redis to use TLS by providing certificate and key files, and specify a dedicated TLS port for encrypted connections, which protects data in transit between clients and the server from being intercepted, though this encryption does add some CPU overhead for the encryption and decryption process, which should be measured against your specific performance requirements.
CONFIG SET tls-port 6380
CONFIG SET tls-cert-file /path/to/cert.pem
CONFIG SET tls-key-file /path/to/key.pem
Real-world example A healthcare company handling sensitive patient data enables TLS encryption for all Redis connections, protecting data in transit even though it introduces a small measurable amount of additional CPU overhead they determined was an acceptable tradeoff.

Common follow-ups: How much performance overhead does TLS encryption typically add?;What certificate management practices are important for maintaining TLS security over time?

TLS & Encryption in Redis;Redis Architecture & Installation
All 7 Redis Security & ACL questions