database - Redis数据加密怎么做？

Question

我们可以使用spiped 或stunnel 保护数据在传输过程中的安全。但是我们如何在数据处于静止状态时做到这一点呢？如果有人拿走了整个数据库怎么办？我们如何加密持久数据存储？需要在应用层做吗？

Answer 1

在 https://redis.io/topics/security 查看文档时很明显，不支持静态数据加密:

Redis is designed to be accessed by trusted clients inside trusted environments. This means that usually it is not a good idea to expose the Redis instance directly to the internet or, in general, to an environment where untrusted clients can directly access the Redis TCP port or UNIX socket.

并且(强调我的):

[...] in general, untrusted access to Redis should always be mediated by a layer implementing ACLs, validating user input, and deciding what operations to perform against the Redis instance. In general, Redis is not optimized for maximum security but for maximum performance and simplicity.