Prev Next

Database / BetterDB Interview questions

Explain how SSH tunnels work in BetterDB Monitor?
sequenceDiagram participant M as BetterDB Monitor participant B as SSH Bastion participant D as Valkey/Redis M->>B: SSH connection (password or private key) B-->>M: Local TCP tunnel established M->>B: Forwarded traffic over the tunnel B->>D: Connects to 127.0.0.1 on the database D-->>M: Responses relayed back through the tunnel

When you enable "Connect via SSH tunnel" on a connection, BetterDB opens an SSH connection to the bastion using either a password or a private key, then creates a local TCP tunnel and routes all Valkey traffic through it – useful for instances in a private subnet, like ElastiCache or MemoryDB.

Only a single hop is supported. The tunnel forwards to the database over 127.0.0.1 on the far side, and if TLS is enabled, the certificate is still validated against the real database hostname, not the bastion.

You can optionally pin the bastion's SSH host key fingerprint; if set, the tunnel refuses to connect unless the server presents a matching key, closing off a man-in-the-middle risk on that hop. Left blank, the server's identity isn't verified and only a warning is logged.

Where does the SSH tunnel forward traffic to on the far end?
What does pinning the SSH host key fingerprint protect against?

More Related questions...

What is BetterDB Monitor? What is BetterDB for Valkey? What are the two Docker image variants for BetterDB Monitor? What is the purpose of the BetterDB MCP server? What are the storage backends supported by BetterDB Monitor? How do you run BetterDB Monitor with a single Docker command? How do you install BetterDB Monitor without Docker? What is the minimum Valkey version BetterDB Monitor supports? Define COMMANDLOG support in BetterDB Monitor? What is the default port for the BetterDB Monitor dashboard? What are the key browser features in BetterDB for Valkey? What are the connection settings in BetterDB for Valkey? Describe the tech stack behind BetterDB Monitor? What is the purpose of BetterDB Monitor's Prometheus endpoint? What is host.docker.internal used for with BetterDB Monitor? Which data types support full CRUD in BetterDB for Valkey? What is the ENCRYPTION_KEY variable used for in BetterDB Monitor? List the ways you can access data in BetterDB Monitor? Why does BetterDB Monitor need PostgreSQL for production deployments? How does BetterDB Monitor detect Valkey versus Redis automatically? What is the difference between BetterDB Monitor's memory and postgres storage? When should you use BetterDB Monitor's offline license instead of an online key? How does BetterDB Monitor persist license state across restarts? Explain how SSH tunnels work in BetterDB Monitor? Why doesn't BetterDB Monitor's Docker image bundle SQLite support? What is the difference between the two SSH key sources in BetterDB Monitor? How does BetterDB Monitor's anomaly detection identify problems? What is capacity forecasting in BetterDB Monitor? How do webhooks work in BetterDB Monitor? What is the difference between BetterDB Monitor and BetterDB for Valkey? How does the Search Query Runner build hybrid KNN queries? When would you choose the CLI install over Docker for BetterDB Monitor? What happens when you enable BetterDB Monitor's experimental AI Helper? Why should you set BETTERDB_SSH_KEY_DIR in BetterDB Monitor? Explain the three-phase workflow of BetterDB Monitor's live migration? What is the difference between Key Analytics and Hot Key Tracking? How does semantic cache intelligence help AI applications in BetterDB Monitor? Explain the execution flow when BetterDB Monitor ingests OpenTelemetry traces? Which is better for VPC-only instances: SSH tunnel or the BetterDB agent? How does the VS Code extension protect vector fields during key edits? What is the difference between MONITOR captures and slowlog analytics? How does BetterDB Monitor prevent tampering with offline license tokens? Explain the internal working of BetterDB Monitor's unified database adapter? What is the difference between ACL audit trail and client analytics? How can you optimize Prometheus scraping for a clustered BetterDB Monitor deployment? When should you pin the SSH host key fingerprint on a connection? Why is COMMANDLOG exclusive to Valkey rather than Redis in BetterDB Monitor? How do you troubleshoot license persistence failing with EACCES errors? Explain the known limitation of SSH tunnels with cluster topologies? How does BetterDB Monitor's cluster visibility feature work?
Show more question and Answers...

Integration

Comments & Discussions

Interviews Questions

About Javapedia.net

Javapedia.net is for Java and J2EE developers, technologist and college students who prepare of interview. Also this site includes many practical examples.

This site is developed using J2EE technologies by Steve Antony, a senior Developer/lead at one of the logistics based company.

Follow Javapedia updates

contact: javatutorials2016[at]gmail[dot]com

Kindly consider donating for maintaining this website. Thanks.

Copyright © 2026, javapedia.net, all rights reserved. · .

DMCA.com Protection Status