【警告!可能会引起安全漏洞】redis设置外网访问权限

redis默认是关闭外网访问的,只有局域网内部才可以访问。要开启外网访问,只需要修改配置文件redis.conf文件里的protected-mode从yes改为no,并把bind 127.0.0.1注释掉即可。

# instance to everybody on the internet. So by default we uncomment the
# following bind directive, that will force Redis to listen only into
# the IPv4 loopback interface address (this means Redis will be able to
# accept connections only from clients running into the same computer it
# is running).
#
# IF YOU ARE SURE YOU WANT YOUR INSTANCE TO LISTEN TO ALL THE INTERFACES
# JUST COMMENT THE FOLLOWING LINE.
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# bind 127.0.0.1

# Protected mode is a layer of security protection, in order to avoid that
# Redis instances left open on the internet are accessed and exploited.
#
# When protected mode is on and if:
#
# 1) The server is not binding explicitly to a set of addresses using the
#    "bind" directive.
# 2) No password is configured.
#
# The server only accepts connections from clients connecting from the
# IPv4 and IPv6 loopback addresses 127.0.0.1 and ::1, and from Unix domain
# sockets.
#
# By default protected mode is enabled. You should disable it only if
# you are sure you want clients from other hosts to connect to Redis
# even if no authentication is configured, nor a specific set of interfaces
# are explicitly listed using the "bind" directive.
protected-mode no

# Accept connections on the specified port, default is 6379 (IANA #815344).
# If port 0 is specified Redis will not listen on a TCP socket.
port 6379

# TCP listen() backlog.
#
# In high requests-per-second environments you need an high backlog in order
# to avoid slow clients connections issues. Note that the Linux kernel
# will silently truncate it to the value of /proc/sys/net/core/somaxconn so
# make sure to raise both the value of somaxconn and tcp_max_syn_backlog
# in order to get the desired effect.
tcp-backlog 511

然后将redis服务器重启。

警告:redis开启外网访问权限后,很容易会被限制流行的挖矿病毒感染,建议不要随便开启。

要在Linux上设置Redis允许外部访问,你可以按照以下步骤进行操作: 1. 首先,修改Redis配置文件(redis.conf)。你可以使用命令`vi /usr/local/redis/redis.conf`打开配置文件。 2. 在配置文件中,找到并修改`bind`项的值。将其从默认值`127.0.0.1`改为`0.0.0.0`。这样Redis监听所有可用的网络接口,允许外部访问。 3. 同时,你可以为Redis设置访问密码。在配置文件中找到并取消注释`#requirepass foobared`这一行,并将`foobared`替换为你想要设置的密码。 4. 保存并关闭配置文件。 5. 接下来,你需要确保服务器的防火墙不阻止Redis的入站连接。你可以关闭防火墙或者修改防火墙配置开放Redis的端口(默认为6379)。 6. 重新启动Redis服务,以应用配置的更改。你可以使用命令`service redis restart`或者`systemctl restart redis`来重启Redis服务。 7. 最后,你可以通过使用telnet命令测试连接到Redis。使用命令`telnet <Redis服务器IP> 6379`,将`<Redis服务器IP>`替换为你的实际IP地址。如果成功连接,你将看到Redis的欢迎信息。 通过按照上述步骤进行操作,你就可以在Linux上设置Redis允许外部访问了。请注意,为了安全起见,你应该使用强密码来保护你的Redis实例,并确保只有受信任的客户端可以访问。<span class="em">1</span><span class="em">2</span><span class="em">3</span> #### 引用[.reference_title] - *1* [解决linux环境安装redis外网访问遇到的坑](https://blog.csdn.net/abcdf123456er/article/details/105253489)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_1"}}] [.reference_item style="max-width: 50%"] - *2* *3* [Linux安装redis设置外网可以访问](https://blog.csdn.net/qq_24831411/article/details/84938452)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_1"}}] [.reference_item style="max-width: 50%"] [ .reference_list ]
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值