Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

/topics/installation.md references exploit venerable below Redis 3.2 and has instructions for init.d #108

Open
stockholmux opened this issue May 27, 2024 · 0 comments

Comments

@stockholmux
Copy link
Member

In pre-publishing review (#91), the following issues were noted:

Note that a Valkey instance exposed to the internet without any security is very simple to exploit, so make sure you understand the above and apply at least a firewall layer.

The firewall is good advice, but the exploit outlined is fixed in 3.2+, this advice should probably be updated to made relevant for 2024/Valkey.

A proper install using an init script is strongly recommended.
Note: The available packages for supported Linux distributions already include the capability of starting the Valkey server from /etc/init.

This section proceeds to go into quite a bit of detail in creating a init.d script. In 2024, would be we better off providing instructions for a service?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant