Redis - Revision history

Pio2pio: /* redis-cli --tls (6.x) */

2021-05-24T04:49:32Z

redis-cli --tls (6.x)

← Older revision		Revision as of 06:49, 24 May 2021
Line 177:		Line 177:
	<source lang=bash>		<source lang=bash>
	openssl s_client -host [endpoint name] -port [endpoint port number] -cert redislabs_user.crt -key redislabs_user_private.key -CAfile redislabs_ca.pem -crlf		openssl s_client -host [endpoint name] -port [endpoint port number] -cert redislabs_user.crt -key redislabs_user_private.key -CAfile redislabs_ca.pem -crlf

			openssl s_client -connect $REDIS_PRIMARY:6379 -servername $REDIS_PRIMARY
	</source>		</source>
	Running the command will produce a long sequence of output about various aspects of the TLS connection with a message at the end that looks like: <code>Verify return code: 0 (ok)</code>, any other return code or message, the connection wasn’t able to establish securely.		Running the command will produce a long sequence of output about various aspects of the TLS connection with a message at the end that looks like: <code>Verify return code: 0 (ok)</code>, any other return code or message, the connection wasn’t able to establish securely.

Pio2pio: /* redis-cli --tls (6.x) */

2021-05-24T04:48:07Z

redis-cli --tls (6.x)

@@ Line 171: / Line 171: @@
 # if using cname eg. REDIS_PRIMARY=redis then --sni is required
 redis-cli -h $REDIS_PRIMARY -p 6379 --no-auth-warning --tls -a $REDIS_AUTH_TOKEN --sni $REDIS_PRIMARY --verbose
-# verify RedisCache SSL
+export REDIS_PASSWORD=$(kubectl get secret --namespace default redis -o jsonpath="{.data.redis-password}" | base64 --decode)
-openssl s_client -connect $REDIS_PRIMARY:6379 -servername $REDIS_PRIMARY
+kubectl run redis-client --restart='Never' --env REDIS_PASSWORD=$REDIS_PASSWORD --image docker.io/bitnami/redis:6.0.6-debian-10-r10 --command -- sleep infinity
 </source>
 = Commands =

Pio2pio: /* Connect to the server and run commands from cli */

2021-05-24T04:22:25Z

Connect to the server and run commands from cli

← Older revision		Revision as of 06:22, 24 May 2021
Line 41:		Line 41:

	= Connect to the server and run [https://redis.io/commands commands] from cli =		= Connect to the server and run [https://redis.io/commands commands] from cli =
			{{Note\|All below examples are based on connecting to AWS Redis ElasticCache}}

	== No-auth, no-encryption-in-transit ==		== No-auth, no-encryption-in-transit ==
	<source lang=bash>		<source lang=bash>

Pio2pio: /* Install */

2021-05-24T04:20:15Z

Install

← Older revision		Revision as of 06:20, 24 May 2021
Line 5:		Line 5:


	= Install =		= [https://redis.io/download Install] =
	Install the cli client only		Install the cli client only
	<source lang=bash>		<source lang=bash>

Pio2pio: /* Commands */

2021-05-22T18:14:18Z

Commands

← Older revision		Revision as of 20:14, 22 May 2021
Line 196:		Line 196:
	redis.acme.com:6379> DUMP mykey		redis.acme.com:6379> DUMP mykey
	"\u0000\xC0\n\t\u0000\xBEm\u0006\x89Z(\u0000\n"		"\u0000\xC0\n\t\u0000\xBEm\u0006\x89Z(\u0000\n"

			# monitor activity
			redis.acme.com:6379> MONITOR
	</source>		</source>

Pio2pio: /* Auth */

2021-05-22T18:13:10Z

Auth

@@ Line 69: / Line 69: @@
 </source>
-== Auth ==
+== Auth and encryption-in-transit ==
 [https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/auth.html Authenticating Users with the Redis AUTH Command], with encryption in transport and at rest. This requires to use some sort of proxy that will enable SSL transport in beetween the redis-client and the AWS hosted redis-cache.
 <source lang=bash>
@@ Line 151: / Line 155: @@
 {{Note|Continuous stats mode <code>redis-cli --stat -i 5</code>, in this mode a new line is printed every second with useful information and the difference between the old data point, <code>-i 5</code> emits lines every 5 seconds, default is 1s}}
 = Commands =

Pio2pio: /* No auth */

2021-05-22T18:03:14Z

No auth

← Older revision		Revision as of 20:03, 22 May 2021
Line 41:		Line 41:

	= Connect to the server and run [https://redis.io/commands commands] from cli =		= Connect to the server and run [https://redis.io/commands commands] from cli =
	== No auth ==		== No-auth, no-encryption-in-transit ==
	<source lang=bash>		<source lang=bash>
	# connect to the server cli		# connect to the server cli
Line 68:		Line 68:
	telnet> Connection closed.		telnet> Connection closed.
	</source>		</source>

	== Auth ==		== Auth ==
	[https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/auth.html Authenticating Users with the Redis AUTH Command], with encryption in transport and at rest. This requires to use some sort of proxy that will enable SSL transport in beetween the redis-client and the AWS hosted redis-cache.		[https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/auth.html Authenticating Users with the Redis AUTH Command], with encryption in transport and at rest. This requires to use some sort of proxy that will enable SSL transport in beetween the redis-client and the AWS hosted redis-cache.

Pio2pio: /* Install */

2021-05-22T18:02:31Z

Install

← Older revision		Revision as of 20:02, 22 May 2021
Line 6:		Line 6:

	= Install =		= Install =
	Install the cli client only~~, Ubuntu 20.04~~		Install the cli client only
	<source lang=bash>		<source lang=bash>
	# Local laptop		# Local laptop
	apt install redis-tools		## Version distributed with Ubuntu 20.04
			apt install redis-tools # redis-cli 5.0.7, does not support redis-over-TLS --tls flag

			## Latest release, eg. redis-cli 6.2.3. supports redis-over-TLS --tls flag
			add-apt-repository ppa:redislabs/redis
			apt-get install redis


	# A pod		# A pod
	kubectl -n default run --image=ubuntu:20.04 ubuntu-1 --rm -it -- bash		kubectl -n default run --image=ubuntu:20.04 ubuntu-1 --rm -it -- bash
	export DEBIAN_FRONTEND=noninteractive		export DEBIAN_FRONTEND=noninteractive
	apt update; apt install -yqq dnsutils netcat ~~redis-tools~~ stunnel vim net-tools # select 8, 27		apt update; apt install -yqq dnsutils netcat stunnel vim net-tools # select 8, 27, these are optional packages
			apt install -yqq redis-tools # redis-cli 5.0.7

			## Latest release, eg. redis-cli 6.2.3
			apt-get install software-properties-common # installs 'add-apt-repository'
			add-apt-repository ppa:redislabs/redis
			apt-get install redis
	</source>		</source>

Line 24:		Line 36:
	REDIS_AUTH_TOKEN='p#ssw0rd1'		REDIS_AUTH_TOKEN='p#ssw0rd1'

	redis-cli -h $REDIS_PRIMARY -p 6379 ping		redis-cli -h $REDIS_PRIMARY -p 6379 ping # no-encription-in-transit
	PONG		PONG
	</source>		</source>


	= Connect to the server and run [https://redis.io/commands commands] from cli =		= Connect to the server and run [https://redis.io/commands commands] from cli =

Pio2pio: /* Commands */

2021-05-22T13:56:41Z

Commands

← Older revision		Revision as of 15:56, 22 May 2021
Line 144:		Line 144:
	# auth		# auth
	redis.acme.com:6379> AUTH p!ssw0rd1		redis.acme.com:6379> AUTH p!ssw0rd1

			# list who is connected
			localhost:6379> CLIENT LIST
			id=136260 addr=10.0.0.5:42257 fd=9 name=backendservice-11111f57fc-h7l9b age=96965 idle=49 flags=P db=0 sub=1 psub=0 multi=-1 qbuf=0 qbuf-free=0 obl=0 oll=0 omem=0 events=r cmd=ping
			id=136261 addr=10.0.0.5:46525 fd=10 name=backendservice-11111f57fc-h7l9b age=96965 idle=6 flags=N db=0 sub=0 psub=0 multi=-1 qbuf=0 qbuf-free=0 obl=0 oll=0 omem=0 events=r cmd=evalsha
			id=138125 addr=10.0.0.5:56729 fd=20 name=authservice-2222265797-zkcnw age=42695 idle=22 flags=N db=0 sub=0 psub=0 multi=-1 qbuf=0 qbuf-free=0 obl=0 oll=0 omem=0 events=r cmd=info
			id=138126 addr=10.0.0.5:48548 fd=26 name=authservice-2222265797-zkcnw age=42694 idle=22 flags=P db=0 sub=1 psub=0 multi=-1 qbuf=0 qbuf-free=0 obl=0 oll=0 omem=0 events=r cmd=ping

	# list keys 'KEYS pattern'		# list keys 'KEYS pattern'

Pio2pio: /* Auth */

2021-05-22T13:41:49Z

Auth

← Older revision		Revision as of 15:41, 22 May 2021
Line 60:		Line 60:
	[https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/auth.html Authenticating Users with the Redis AUTH Command], with encryption in transport and at rest. This requires to use some sort of proxy that will enable SSL transport in beetween the redis-client and the AWS hosted redis-cache.		[https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/auth.html Authenticating Users with the Redis AUTH Command], with encryption in transport and at rest. This requires to use some sort of proxy that will enable SSL transport in beetween the redis-client and the AWS hosted redis-cache.
	<source lang=bash>		<source lang=bash>
	apt update; apt install -yqq dnsutils netcat redis-tools stunnel vim net-tools procps ~~iproute~~		apt update; apt install -yqq dnsutils netcat redis-tools stunnel vim net-tools procps iproute2
	# \| ~~iproute~~(ss), procps(ps), dnsutils(dig)		# \| iproute2(ss), procps(ps), dnsutils(dig)

	# Config vars		# Config vars