1 安全策略:
设置数据库密码
修改配置requirepass password
验证密码auth password 只有验证通过后才能继续执行命令
注意:在配置redis复制功能的时候如果主数据库设置了密码,需要在从数据的配置文件中通过masterauth参数设置主数据库的密码,这样从数据库在连接主数据库时就会自动使用auth命令认证了。相当于做了一个免密码登录。
bind参数(可以让数据库只能在指定IP下访问)
bind 127.0.0.1 192.168.1.110 这样内网的1段都可以访问
命令重命名 不让错误执行flushall 清空所有数据
修改命令的名称rename-command flushall cleanall
禁用命令 rename-command flushall ""
2 工具:
redis-cli
Info查看使用信息等/monitor监视器 看用户做的每一个操作
eg:
[root@h2master bin]# redis-cli 127.0.0.1:6379> info # Server redis_version:2.8.19 redis_git_sha1:00000000 redis_git_dirty:0 redis_build_id:4b1addfd5f9adb27 redis_mode:standalone os:Linux 2.6.18-308.el5 i686 arch_bits:32 multiplexing_api:epoll gcc_version:4.1.2 process_id:21558 run_id:86a4890d01e244f1e0e5ac557497f8fee82182a3 tcp_port:6379 uptime_in_seconds:151177 uptime_in_days:1 hz:10 lru_clock:16746810 config_file:/etc/redis.conf # Clients connected_clients:2 client_longest_output_list:0 client_biggest_input_buf:0 blocked_clients:0 # Memory used_memory:735376 used_memory_human:718.14K used_memory_rss:1859584 used_memory_peak:812744 used_memory_peak_human:793.70K used_memory_lua:23552 mem_fragmentation_ratio:2.53 mem_allocator:jemalloc-3.6.0 # Persistence loading:0 rdb_changes_since_last_save:0 rdb_bgsave_in_progress:0 rdb_last_save_time:1425974859 rdb_last_bgsave_status:ok rdb_last_bgsave_time_sec:0 rdb_current_bgsave_time_sec:-1 aof_enabled:0 aof_rewrite_in_progress:0 aof_rewrite_scheduled:0 aof_last_rewrite_time_sec:-1 aof_current_rewrite_time_sec:-1 aof_last_bgrewrite_status:ok aof_last_write_status:ok # Stats total_connections_received:19 total_commands_processed:4090 instantaneous_ops_per_sec:0 total_net_input_bytes:139943 total_net_output_bytes:21378 instantaneous_input_kbps:0.00 instantaneous_output_kbps:0.00 rejected_connections:0 sync_full:0 sync_partial_ok:0 sync_partial_err:0 expired_keys:1 evicted_keys:0 keyspace_hits:20 keyspace_misses:3 pubsub_channels:1 pubsub_patterns:0 latest_fork_usec:786 # Replication role:master 主节点 connected_slaves:0 master_repl_offset:0 repl_backlog_active:0 repl_backlog_size:1048576 repl_backlog_first_byte_offset:0 repl_backlog_histlen:0 # CPU used_cpu_sys:0.72 used_cpu_user:0.40 used_cpu_sys_children:0.02 used_cpu_user_children:0.01 # Keyspace db0:keys=2004,expires=0,avg_ttl=0
Redisclient
http://www.oschina.net/news/53391/redisclient-1-0
Redisclient 截图如下: