Elasticache Redis with TLS and Redis Auth gives ClusterAllFailedError

I’m trying to get ioredis (version 4.9.1) to connect to an Elasticache cluster (default.redis4.0.cluster.on, version 4.0.10, Encryption in transit, Redis Auth, 1 shard, 3 nodes).

This is how I’m trying to connect:

const url = "redis://:<password-redacted>@clustercfg.<url-redacted>.use1.cache.amazonaws.com";
const clusterOptions = { redisOptions: { tls: { } } };
const redis = new Redis.Cluster([url], clusterOptions);

But I’m getting the following error repeatedly:

{ ClusterAllFailedError: Failed to refresh slots cache.
     at tryNode (/usr/src/app/node_modules/ioredis/built/cluster/index.js:326:31)
     at /usr/src/app/node_modules/ioredis/built/cluster/index.js:342:21
     at redis.cluster.utils_1.timeout (/usr/src/app/node_modules/ioredis/built/cluster/index.js:568:24)
     at run (/usr/src/app/node_modules/ioredis/built/utils/index.js:150:22)
     at tryCatcher (/usr/src/app/node_modules/standard-as-callback/lib/utils.js:10:19)
     at /usr/src/app/node_modules/standard-as-callback/index.js:31:35
     at process._tickCallback (internal/process/next_tick.js:68:7)
   lastNodeError:
    Error: Connection is closed.
        at close (/usr/src/app/node_modules/ioredis/built/redis/event_handler.js:102:25)
        at TLSSocket.<anonymous> (/usr/src/app/node_modules/ioredis/built/redis/event_handler.js:73:20)
        at Object.onceWrapper (events.js:277:13)
        at TLSSocket.emit (events.js:194:15)
        at TLSSocket.EventEmitter.emit (domain.js:441:20)
        at _handle.close (net.js:597:12)
        at TCP.done (_tls_wrap.js:388:7) }

Connecting works fine when using ioredis without the Cluster constructor, so I’m pretty sure the URL and the password are correct. This works but occasionally gives MOVED errors, which I think are expected:

const redis = new Redis(url, { tls: { } });

Any clues to what I’m doing wrong?

[headlessme]

I figured out this issue, it seems that passing the password in the URL to the cluster setup won’t result in that password being used to connect to all the cluster nodes that get listed by querying the clustercfg node. In the end I parsed the password out of the URL myself and passed it into redisOptions manually. Seems like this could perhaps be done by default to avoid this error case?

Ended up with something like which is working so far!

const url = "redis://:<password-redacted>@clustercfg.<url-redacted>.use1.cache.amazonaws.com";
const [, password] = (URL.parse(url).auth||'').split(':');
const clusterOptions = { redisOptions: { password: password, tls: { } } };
const redis = new Redis.Cluster([url], clusterOptions);

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed after 7 days if no further activity occurs, but feel free to re-open a closed issue if needed.