Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
redis
Commits
bb3d45a3
Commit
bb3d45a3
authored
Feb 05, 2020
by
Yossi Gottlieb
Browse files
TLS: Update documentation.
parent
edfe1b2f
Changes
2
Hide whitespace changes
Inline
Side-by-side
README.md
View file @
bb3d45a3
...
@@ -35,6 +35,11 @@ It is as simple as:
...
@@ -35,6 +35,11 @@ It is as simple as:
% make
% make
To build with TLS support, you'll need OpenSSL development libraries (e.g.
libssl-dev on Debian/Ubuntu) and run:
% make BUILD_TLS=yes
You can run a 32 bit Redis binary using:
You can run a 32 bit Redis binary using:
% make 32bit
% make 32bit
...
@@ -43,6 +48,13 @@ After building Redis, it is a good idea to test it using:
...
@@ -43,6 +48,13 @@ After building Redis, it is a good idea to test it using:
% make test
% make test
If TLS is built, running the tests with TLS enabled (you will need
`tcl-tls`
installed):
% ./utils/gen-test-certs.sh
% ./runtest --tls
Fixing build problems with dependencies or cached build options
Fixing build problems with dependencies or cached build options
---------
---------
...
@@ -125,6 +137,12 @@ as options using the command line. Examples:
...
@@ -125,6 +137,12 @@ as options using the command line. Examples:
All the options in redis.conf are also supported as options using the command
All the options in redis.conf are also supported as options using the command
line, with exactly the same name.
line, with exactly the same name.
Running Redis with TLS:
------------------
Please consult the
[
TLS.md
](
TLS.md
)
file for more information on
how to use Redis with TLS.
Playing with Redis
Playing with Redis
------------------
------------------
...
...
TLS.md
View file @
bb3d45a3
TLS Support -- Work In Progress
TLS Support
===============================
===========
This is a brief note to capture current thoughts/ideas and track pending action
items.
Getting Started
Getting Started
---------------
---------------
...
@@ -69,37 +66,23 @@ probably not be so hard. For cluster keys migration it might be more difficult,
...
@@ -69,37 +66,23 @@ probably not be so hard. For cluster keys migration it might be more difficult,
but there are probably other good reasons to improve that part anyway.
but there are probably other good reasons to improve that part anyway.
To-Do List
To-Do List
==========
----------
Additional TLS Features
-----------------------
1.
Add metrics to INFO?
2.
Add session caching support. Check if/how it's handled by clients to assess
how useful/important it is.
redis-benchmark
---------------
The current implementation is a mix of using hiredis for parsing and basic
networking (establishing connections), but directly manipulating sockets for
most actions.
This will need to be cleaned up for proper TLS support. The best approach is
probably to migrate to hiredis async mode.
redis-cli
---------
1.
Add support for TLS in --slave and --rdb modes.
-
[ ] Add session caching support. Check if/how it's handled by clients to
assess how useful/important it is.
-
[ ] redis-benchmark support. The current implementation is a mix of using
hiredis for parsing and basic networking (establishing connections), but
directly manipulating sockets for most actions. This will need to be cleaned
up for proper TLS support. The best approach is probably to migrate to hiredis
async mode.
-
[ ] redis-cli
`--slave`
and
`--rdb`
support.
Others
Multi-port
------
------
----
Consider the implications of allowing TLS to be configured on a separate port,
Consider the implications of allowing TLS to be configured on a separate port,
making Redis listening on multiple ports
.
making Redis listening on multiple ports
:
This impacts many things, like
1.
Startup banner port notification
1.
Startup banner port notification
2.
Proctitle
2.
Proctitle
3.
How slaves announce themselves
3.
How slaves announce themselves
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment