Hacker News Reader

Comment by sdoowpilihp | Hacker News Reader

I would gladly pay a license fee to install this on my servers. I would not however, feel comfortable exposing my redis cluster to the whole wide world. I think they need to figure out how to offer this as an installable piece of software, that comes with either a usage or support license.

View on HN

I'm not sure how they implemented this, but there is a way to implement this in a sane way, which is as a separated process that is able to access Redis, but totally mediates the communication with it in a secure way.

So you install this daemon alongside your Redis servers deployment, and it calls home (to avoid opening ports at all) with SSL in order to establish a secure communication channel with the web app.

Every request received by the web app is then verified and sent to the Redis server only after validation.

This is what scout_realtime[1] does, more or less.

[1] https://github.com/scoutapp/scout_realtime

Redsmin also offers the proxified approach - https://github.com/Redsmin/redsmin

It is interesting that this is open source and BSD licensed, so in theory RedisGreen could use the same stuff as well and join the effort. This is the common part of the infrastructure that makes somewhat sense to develop together.

This. 100% this.

I really liked the dashboard and presentation and saw immediate worth in the product.

I then completely didn't want to use it as it wanted a _direct_ connection to my Redis server.

And the code/commands would be coming from their servers to mine...at unspecified times...

Perhaps something similar to this? https://github.com/deftlabs/mongo-live

edit: Or this? https://github.com/junegunn/redis-stat

anyone interested in this, would you mind emailing bpo at redisgreen.net ?

I also don't want my internal servers connecting to untrusted 3rd parties and sending potentially sensitive info. We never transmit logs or perf data outside of our network.

Ya, this would be a much better model.

Reply on news.ycombinator.com