search

RedisLabs / redis-cluster-proxy

A proxy for Redis clusters.
GNU Affero General Public License v3.0
999 stars 132 forks source link

Does proxy support TLS? #104

Open zmrdltl opened 2 years ago

zmrdltl commented 2 years ago

Deployed redis-cluster with TLS and password set on k8s with service object. After that, connect to redis-cluster using redis-proxy(create a service object outside the k8s cluster, and expose it as nodeport type). Looking at the log of the redis proxy pod, it was confirmed that communication was successful by getting the ip of redis-cluster normally.

[2022-04-22 05:45:07.268/M] Redis Cluster Proxy v999.999.999 (unstable)
[2022-04-22 05:45:07.268/M] Commit: (b55d6c65/0)
[2022-04-22 05:45:07.268/M] Git Branch: unstable
[2022-04-22 05:45:07.268/M] PID: 1
[2022-04-22 05:45:07.268/M] OS: Linux 4.18.0-240.el8.x86_64 x86_64
[2022-04-22 05:45:07.268/M] Bits: 64
[2022-04-22 05:45:07.268/M] Log level: info
[2022-04-22 05:45:07.268/M] Connections pool size: 10 (respawn 2 every 50ms if below 10)
[2022-04-22 05:45:07.268/M] The TCP backlog setting of 511 cannot be enforced because /proc/sys/net/core/somaxconn is set to the lower value of 128.
[2022-04-22 05:45:07.268/M] Listening on *:7777
[2022-04-22 05:45:07.268/M] Starting 8 threads...
[2022-04-22 05:45:07.268/M] Fetching cluster configuration...
[2022-04-22 05:45:07.278/M] Cluster Address: 10.96.109.158:6379
[2022-04-22 05:45:07.278/M] Cluster has 3 masters and 3 replica(s)
[2022-04-22 05:45:07.397/M] All thread(s) started!

Now, we are going to test by accessing the redis proxy service from outside the k8s cluster and using the redis command. Are you supporting communication through tls access to the redis proxy from outside the cluster?

caojiajun commented 1 year ago

camelia-redis-proxy support tls, you can try it