oliver006 / redis_exporter

Prometheus Exporter for ValKey & Redis Metrics. Supports ValKey and Redis 2.x, 3.x, 4.x, 5.x, 6.x, and 7.x
https://github.com/oliver006/redis_exporter
MIT License
3.12k stars 876 forks source link

redis_exporter Support basic_auth? #862

Closed 1310208262 closed 8 months ago

1310208262 commented 9 months ago

redis_exporter Support basic_auth?

1310208262 commented 9 months ago

Security vulnerability scan failed

oliver006 commented 8 months ago

You can use a reverse proxy like nginx if you need basic auth.

andreymal commented 4 months ago

The connection between nginx and redis_exporter is still not secure enough. Exporters should support basic auth to make sure that unauthorized processes can't connect to them

Note that official exporters (such as node_exporter) already support basic auth

(TLS can do this too, but it's just overkill)

0xFreeman-AI commented 2 months ago

The connection between nginx and redis_exporter is still not secure enough. Exporters should support basic auth to make sure that unauthorized processes can't connect to them

Note that official exporters (such as node_exporter) already support basic auth

(TLS can do this too, but it's just overkill)

Agree.