For Redis on Linux, use the default port 6379 for development, but switch to a non-standard port like 16379 in production for enhanced security. 1) Change the port in redis.conf. 2) Map ports in Docker setups. 3) Configure multiple ports for Redis Cluster. 4) Update client configurations to reflect port changes.
When setting up Redis on a Linux system, choosing the right port is crucial for both security and functionality. The default port for Redis is 6379, but you might wonder if you should stick with it or use a different one. Let's dive into this topic and explore the best practices for port selection.
Redis defaults to port 6379, which is fine for most development and testing scenarios. However, in a production environment, you might want to consider using a non-standard port to enhance security. By moving Redis to a non-standard port, you reduce the risk of automated scans and attacks targeting common service ports. For instance, you could choose a port like 6380 or even something in the higher range like 16379.
Here's an example of how you can change the port in your Redis configuration file (redis.conf):
# Comment out or change the existing port line # port 6379 port 16379
When I first started working with Redis, I stuck with the default port out of convenience. But as I moved to more production-focused environments, I realized the importance of customizing the port. It's not just about security; it's also about avoiding conflicts with other services that might be running on your system.
One thing to keep in mind is that if you're running Redis in a containerized environment like Docker, you'll need to map the internal Redis port to an external port. Here's how you might do that in a Docker Compose file:
version: '3'
services:
redis:
image: redis:latest
ports:
- "16379:6379"This setup maps the container's internal port 6379 to the host's port 16379, allowing you to access Redis on your chosen non-standard port.
Another consideration is whether you're running Redis in a clustered setup. In such cases, you might need to open multiple ports for different nodes. Redis Cluster uses additional ports starting from the base port (e.g., if your base port is 6379, Redis Cluster will use 6380, 6381, and so on for different nodes). Here's how you might configure multiple ports in a cluster setup:
# In redis.conf for node 1 port 6379 # In redis.conf for node 2 port 6380 # In redis.conf for node 3 port 6381
While using non-standard ports can enhance security, it's not a silver bullet. You should also consider other security measures like enabling Redis authentication, setting up a firewall, and using TLS/SSL for encryption. I've seen setups where developers relied solely on port changes, only to find their Redis instance still vulnerable to other types of attacks.
In my experience, one common pitfall is forgetting to update client configurations when changing the Redis port. If you're using Redis with applications like Node.js or Python, make sure to update the connection settings in your code. Here's an example in Python using the redis library:
import redis # Connect to Redis on the new port r = redis.Redis(host='localhost', port=16379, db=0)
To sum it up, while the default Redis port of 6379 is suitable for development, consider using a non-standard port in production for added security. Just remember to update all relevant configurations and ensure you're not overlooking other security aspects. Port selection is just one piece of the puzzle in securing your Redis deployment.
The above is the detailed content of Redis on Linux: What ports should I use?. For more information, please follow other related articles on the PHP Chinese website!
Hot AI Tools
Undress AI Tool
Undress images for free
Undresser.AI Undress
AI-powered app for creating realistic nude photos
AI Clothes Remover
Online AI tool for removing clothes from photos.
Clothoff.io
AI clothes remover
Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!
Hot Article
Hot Tools
Notepad++7.3.1
Easy-to-use and free code editor
SublimeText3 Chinese version
Chinese version, very easy to use
Zend Studio 13.0.1
Powerful PHP integrated development environment
Dreamweaver CS6
Visual web development tools
SublimeText3 Mac version
God-level code editing software (SublimeText3)
Hot Topics
What is the difference between a transaction and a pipeline?
Jul 08, 2025 am 12:20 AM
TransactionsensuredataintegrityinoperationslikedatabasechangesbyfollowingACIDprinciples,whilepipelinesautomateworkflowsacrossstages.1.Transactionsguaranteeall-or-nothingexecutiontomaintaindataconsistency,primarilyindatabases.2.Pipelinesstructureandau
How to select a different database in Redis?
Jul 05, 2025 am 12:16 AM
ToswitchdatabasesinRedis,usetheSELECTcommandfollowedbythenumericindex.Redissupportsmultiplelogicaldatabases(default16),andeachclientconnectionmaintainsitsownselecteddatabase.1.UseSELECTindex(e.g.,SELECT2)toswitchtoanotherdatabase.2.Verifywithcommands
How to safely iterate over keys in production using the SCAN command?
Jul 09, 2025 am 12:52 AM
How to safely traverse Rediskey in production environment? Use the SCAN command. SCAN is a cursor iterative command of Redis, which traverses the key in incremental manner to avoid blocking the main thread. 1. Call the loop until the cursor is 0; 2. Set the COUNT parameter reasonably, default 10, and the amount of big data can be appropriately increased; 3. Filter specific mode keys in combination with MATCH; 4. Pay attention to the possible repeated return of keys, inability to ensure consistency, performance overhead and other issues; 5. Can be run during off-peak periods or processed asynchronously. For example: SCAN0MATChuser:*COUNT100.
How do you configure the save directive for RDB snapshots?
Jul 08, 2025 am 12:35 AM
To configure the RDB snapshot saving policy for Redis, use the save directive in redis.conf to define the trigger condition. 1. The format is save. For example, save9001 means that if at least 1 key is modified every 900 seconds, it will be saved; 2. Select the appropriate value according to the application needs. High-traffic applications can set a shorter interval such as save101, and low-traffic can be extended such as save3001; 3. If automatic snapshots are not required, RDB can be disabled through save""; 4. After modification, restart Redis and monitor logs and system load to ensure that the configuration takes effect and does not affect performance.
How to secure a Redis instance?
Jul 15, 2025 am 12:06 AM
To ensure Redis security, you need to configure from multiple aspects: 1. Restrict access sources, modify bind to specific IPs or combine firewall settings; 2. Enable password authentication, set strong passwords through requirepass and manage properly; 3. Close dangerous commands, use rename-command to disable high-risk operations such as FLUSHALL, CONFIG, etc.; 4. Enable TLS encrypted communication, suitable for high-security needs scenarios; 5. Regularly update the version and monitor logs to detect abnormalities and fix vulnerabilities in a timely manner. These measures jointly build the security line of Redis instances.
How does master-replica (master-slave) replication work in Redis?
Jul 13, 2025 am 12:10 AM
Redis master-slave replication achieves data consistency through full synchronization and incremental synchronization. During the first connection, the slave node sends a PSYNC command, the master node generates an RDB file and sends it, and then sends the write command in the cache to complete the initialization; subsequently, incremental synchronization is performed by copying the backlog buffer to reduce resource consumption. Its common uses include read and write separation, failover preparation and data backup analysis. Notes include: ensuring network stability, reasonably configuring timeout parameters, enabling the min-slaves-to-write option according to needs, and combining Sentinel or Cluster to achieve high availability.
How to list all keys in a Redis database?
Jul 07, 2025 am 12:07 AM
The most direct way to list all keys in the Redis database is to use the KEYS* command, but it is recommended to use the SCAN command to traverse step by step in production environments. 1. The KEYS command is suitable for small or test environments, but may block services; 2. SCAN is an incremental iterator to avoid performance problems and is recommended for production environments; 3. The database can be switched through SELECT and the keys of different databases are checked one by one; 4. The production environment should also pay attention to key namespace management, regular export of key lists, and use monitoring tools to assist operations.
How many clients can subscribe to a single channel?
Jul 09, 2025 am 12:03 AM
Yes,asinglechannelcansupportanunlimitednumberofsubscribersintheory,butreal-worldlimitsdependontheplatformandaccounttype.1.YouTubedoesnotimposeasubscribercapbutmayenforcecontentreviewsandviewerlimitsforlivestreamsonfreeaccounts.2.Telegramsupportsupto2
