Blog

Running Redis in Production: ACL, TLS, Dangerous Commands, Latency Diagnosis, OpenTelemetry and Testcontainers

In production every application should connect to Redis with its own ACL user that may use only the commands, keys and channels it needs; a user without FLUSHALL, KEYS and EVAL is the first defence against Lua vulnerabilities and a leaked password. With real output: what ACL LOG reveals, moving to Functions, TLS, reading SLOWLOG and the StackExchange.Redis timeout message, OpenTelemetry spans and integration testing with Testcontainers.