REDIS configuration

Elastic Stack Beats
1

I am trying to restrict the redis access to only few ip's

My configurations below:

bind 10.xx.xx.xx1 10.xx.xx.xx2
protected-mode yes

And I am getting the error:

Creating Server TCP listening socket 10.xx.xx.xx1:6379: bind: Cannot assign requested address

When I tried binding 10.0.0.1 and the local ip, it is working

Thanks

2

this doesn't look like a valid IP to me.

3

The ip is

bind 10.25.175.77 10.25.145.151

4

Do those two IP addresses belong to the Redis server? Or are they the IP addresses if the clients that should be able to connect?

5

These are the IP of the client that is trying to connect

6

Then it won't work. That configuration option affects which interfaces to listen on. It's not used for access control for connecting clients.

7

ok. Let me make it clear.

I have Redis in one server and filebeat in 2 other servers.

Now My redis should be able to accept data only from my filebeat servers. In other words, I wanted to have this secure.

How can this be done.

Thanks in Advance

8

You can configure Redis to require a password for connections or set up a firewall rule to limit which hosts can connect.

9

Another security option: With version 5.0 alpha3 redis output supports TLS including client authentication support. One can hide redis right behind stunnel for example and make redis port itself available to localhost only.