Slides from Redis Day Tel Aviv 2018, by Omer Levi Hevroni. Describing how we are using Redis to store data securely.

1. Storing Data in Redis like a pro
@omerlh

2. We want a storage that:
 Meet our requirements
 Secure
 We can access it
 We can monitor it

3. Storage Requirements
 High Availability
 High Performance
 Strong Consistency
 SaaS Solution
 Key-Value Store

5. Wait, what about Redis?

6. Storage Requirements
✓ High Availability
✓ High Performance
✓ Strong Consistency
✓ SaaS Solution
✓ Key-Value Store

7. A note about high availability
● Replication
● Append Only File (AOF)
● Snapshots
● Redislabs SLA: 99.99%!
https://redislabs.com/redis-enterprise/technology/highly-available-redis/

8. Are we done?

9. What about security?

10. AUTH command
https://redis.io/commands/auth

11. Layers of security
● Very strong password (64 crypto random bytes)
● TLS with client-side certificate authentication
● IP filtering
● VNet/VPC

12. Are we done?

14. Solution: Rebrow

15. Rebrow
● Web UI for redis database
● Limit Redis access (read/delete)
● Optional: auth proxy

16. Are we done?

17. What about monitoring?

18. Our use case: Keeping Redis in shape
● Our Redis plan has storage limits
● Redislabs will send a mail when we near the limits
● Issues:
○ Not flexible
○ Alert routing

19. We need a better solution!

20. Simple solution: INFO command
https://redis.io/commands/INFO

23. Webdis
● HTTP interface for Redis
● Authentication/Authorization
● JSON output

25. A secure monitoring solution
Webdis
https://blog.solutotlv.com/keep-redis-shape-3-simple-steps

26. Are we done?

27. We have a storage:
✓ Strong Consistency, high availability storage
✓ Secure
✓ We can access it
✓ We can monitor it

28. Questions?

29. Demo
Checkout the code on GitHub

30. Thank You!
Also, we’re hiring :)
@omerlh
@SolutoEng