redis 3.2 protected mode
See original GitHub issueHas anybody successfully used ioredis with redis-sentinel v3.2 rc3?
I was successfully using ioredis with redis-sentinel 3.0, but on upgrading to 3.2 it silently doesn’t work, the callbacks aren’t called. It works if I directly connect to the master, bypassing the sentinel.
It appears that I’ve got my sentinel configured correctly:
127.0.0.1:26379> SENTINEL get-master-addr-by-name mymaster
1) "127.0.0.1"
2) "6379"
Issue Analytics
- State:
- Created 7 years ago
- Comments:9 (4 by maintainers)
Top Results From Across the Web
Redis 3.2 + Sentinel with Protected Mode
In Redis 3.2, it adds a “protected-mode” parameter to prevent stupid DBA from exposing Redis by not binding Redis instance to a specific ......
Read more >How can you disable protected mode in Redis 3.2.6 Sentinel?
Just disable protected mode sending the command 'CONFIG SET protected-mode no' from the loopback interface by connecting to Redis from the same ...
Read more >Redis security
Since version 3.2.0, Redis enters a special mode called protected mode when it is executed with the default configuration (binding all the interfaces)...
Read more >redis 3.2.1 protected-mode is not work,i still cant connect to ...
i have set the redis config file as " protected-mode no" ,and set the password in the config.but still get the DENIED Redis...
Read more >How to you disable protected mode in Redis 3.2.6 Sentinel
Just disable protected mode sending the command 'CONFIG SET protected-mode no' from the loopback interface by connecting to Redis from the same host...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
@luin, I agree with you. The redis is configured on particular interface in order to communicate with other redis. The issue was that I did not know why Sentinel did not start failover, there were not any logs in its logs. I just did not know that Sentinel should have been configured with the same option becuase there is no protected-mode setting in default config of sentinel. You know sentinel runs on 0.0.0.0 and I did not expect kind of this issue.
Initially, I removed 127.0.0.1 interface from redis configs and disabled protected-mode.
BTW, there is no bind setting in default config of sentinel as well. There is just port setting with value 26379.
Actually, my failover did not happen, after a few minutes I got this error: “-failover-abort-slave-timeout master” and I have not found a description this state. I hope to figure it out anyway or will try earlier version of redis.
@Deathle55 protected-mode is very useful to protect your sentinel servers. You may avoid the errors by using
bind
directive to bind the redis/sentinel to only several specified interfaces.