search

h0x91b / redis-fast-driver

78 stars 13 forks source link

How do you connect with TLS? #11

Closed louishawkins closed 7 years ago

louishawkins commented 7 years ago

Is it possible to connect to hosts where TLS is required?

h0x91b commented 7 years ago

No, there is no support, but you can try something like spipes https://redis.io/topics/encryption or vpn tunnel.

BTW I never used redis over TSL, can you please share some info please?

Dmitry-N-Medvedev commented 2 years ago

hi @h0x91b , could you please implement TLS support in your library. It's really important when used in highly regulated environments.

h0x91b commented 2 years ago

TLS - Minumum -40% from performance (https://github.com/redis/redis/issues/7595) why do you need it in your private local cloud network?

Dmitry-N-Medvedev commented 2 years ago

TLS - Minumum -40% from performance

  1. this 40% decrease in speed will still be way faster than the other libs. Way faster. From my perspective it means deploying twice as many instances of the same microservice - I am willing to pay this price.
  2. switching TLS could be a compilation option. Those who don't need TLS all the time could have it disabled.

why do you need it in your private local cloud network?

because of the security:

  1. data at move must be encrypted at all times ( whether it's cloud or not it's always under attack )
  2. no side cars are at all possible since we are about to switch from Docker to unikernels ( strictly single-process )

PS: TLS support opens up doors for the redis-fast-driver to really serious systems.