加密 Sidekiq 与 Redis 的连接

Question

We currently have Sidekiq setup with Azure Redis Cache and would like to encrypt the connection between them. After a little googling I came across a recently merged pull request that adds native encryption to Redis but this as of yet has not been released. I have seen people suggest Stunnel but I was wondering if there were any alternatives to this approach?

Answer 1

Sidekiq uses the redis gem which has SSL/TLS support if you provide a connection URL using the rediss:// scheme (second 's' is not a typo).

# https://github.com/redis/redis-rb/blob/1317ecb518c2d0d0263f1cfc49f104cea3ea24b3/lib/redis/cluster/option.rb#L29
class Redis
  class Cluster
    class Option
      DEFAULT_SCHEME = 'redis'
      SECURE_SCHEME = 'rediss'

      # ...

      def secure?
        @node_uris.any? { |uri| uri.scheme == SECURE_SCHEME } || @options[:ssl_params] || false
      end
    end
  end
end

I've used this with AWS ElastiCache which supports in-transit encryption . The Azure docs suggest Azure Cache has similar SSL capability .