From 05818b16386e23e2e87deea30eb6998d056d7fc2 Mon Sep 17 00:00:00 2001 From: Joe Ferguson Date: Thu, 12 Sep 2019 16:39:14 -0700 Subject: [PATCH] Add section on Redis security, warn about exposing it to host network --- redis/content.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/redis/content.md b/redis/content.md index f1f3723ea..4f8a77389 100644 --- a/redis/content.md +++ b/redis/content.md @@ -6,6 +6,14 @@ Redis is an open-source, networked, in-memory, key-value data store with optiona %%LOGO%% +# Security + +For the ease of accessing Redis from other containers via Docker networking, the "Protected mode" is turned off by default. This means that if you expose the port outside of your host (e.g., via `-p` on `docker run`), it will be open without a password to anyone. It is **highly** recommended to set a password (by supplying a config file) if you plan on exposing your Redis instance to the internet. For further information, see the following links about Redis security: + +- [Redis documentation on security](https://redis.io/topics/security) +- [Protected mode](https://redis.io/topics/security#protected-mode) +- [A few things about Redis security by antirez](http://antirez.com/news/96) + # How to use this image ## start a redis instance