Prev Next

Database / REDIS

How do you secure Redis access using ACLs?

Redis's Access Control List (ACL) system lets you define named users, each with their own password, and fine-grained permissions over which commands they can run and which keys they can touch — a meaningful step up from the older, single shared-password requirepass model, which offered no per-user distinction at all.

ACL SETUSER app-readonly on >secretpass ~cache:* +get +mget -@write
ACL SETUSER app-writer on >anotherpass ~orders:* +@all -flushall -flushdb
ACL LIST

The pattern above shows the key building blocks: ~pattern restricts which keys a user can access (glob-style, so ~cache:* limits the user to keys under that prefix), +command/-command grants or denies specific commands, and +@category/-@category does the same for whole command categories (like @write or @dangerous). This lets a deployment give a read-only reporting service exactly read access to its own key namespace, while a different service gets write access scoped to its own keys, with neither able to run administrative commands like FLUSHALL — a level of least-privilege access control that a single shared password can't express at all.

What does the ~pattern syntax control in a Redis ACL user definition?
What limitation does ACLs solve compared to the older requirepass model?

More Related questions...

What is Redis? What is a Redis key? What is the purpose of the EXPIRE command? List few Redis Datatypes. What is a Redis Sorted Set? Advantages of Redis. What programming languages does Redis support? What is a Redis Hash used for? What is a Redis Set data type used for? Explain Replication in Redis. What is the purpose of the INCR command? Explain about REDIS security. What is a Redis Stream? Expand REDIS. Define a Redis Bitmap? In which language Redis is developed? What is the purpose of Redis Pub/Sub? Difference between SET and MSET command in REDIS. What are Redis transactions? Explain LPUSH command in REDIS. What is RDB persistence in Redis? Limitations of REDIS. What is AOF persistence in Redis? REDIS is fast, but is it also durable? Difference between Memcached and REDIS. What is the purpose of the SELECT command in Redis? What is the purpose of the TTL command? What is SADD command in REDIS? Define eviction policies in Redis? Mention few LIST operations in REDIS. What is Redis Sentinel used for? Mention Spring Boot Drivers for REDIS. Explain about redisson client for redis. What is Redis Cluster? How do you connect to Redis using the CLI? Why is Redis often faster than a traditional relational database for caching? What is a Cache Penetration Problem? What is Valkey, and how does it relate to Redis? How I/O Multiplexing Works in Redis? What is the difference between RDB and AOF persistence? How does Redis achieve high throughput with a mostly single-threaded design? Why should you configure an eviction policy for a Redis instance used as a cache? How does Redis Cluster shard data across nodes? When should you use Redis Sentinel instead of Redis Cluster? What happens when a Redis master fails in a Sentinel-managed setup? Explain the execution flow of a Redis transaction using MULTI/EXEC? How can you optimize Redis memory usage for large datasets? How do you troubleshoot high memory usage in a Redis instance? Why is the maxmemory-policy setting important for a cache-only Redis deployment? Explain the lifecycle of a key with a TTL set in Redis? How does Redis handle atomicity for multi-key operations? What is the difference between a Redis List and Sorted Set for queues? How do you implement a distributed lock using Redis? How does Redis Streams support consumer groups? Which is better and why: Redis Pub/Sub or Redis Streams for event delivery? How do you integrate Redis as a session store in a web application? Explain the internal working of Redis's hash table resizing (rehashing)? How do you configure Redis persistence for a production deployment? What is the difference between Redis Cluster and client-side sharding? How does Redis support Lua scripting for atomic operations? When would you choose Redis Streams over a message broker like Kafka? How do you secure Redis access using ACLs? Why should the KEYS command be avoided in production? How do you configure Redis for cache-aside pattern usage? Explain the execution flow of a Redis Cluster request with a MOVED redirection? How does Redis handle replication lag between a master and its replicas? Why doesn't Redis guarantee strong consistency by default across replicas? How do you mitigate a Cache Avalanche in a Redis-backed system? What is the difference between Redis's diskless replication and disk-based replication?
Show more question and Answers...

Apache Cassandra Interview Questions

Comments & Discussions

Interviews Questions

About Javapedia.net

Javapedia.net is for Java and J2EE developers, technologist and college students who prepare of interview. Also this site includes many practical examples.

This site is developed using J2EE technologies by Steve Antony, a senior Developer/lead at one of the logistics based company.

contact: javatutorials2016[at]gmail[dot]com

Kindly consider donating for maintaining this website. Thanks.

Copyright © 2026, javapedia.net, all rights reserved. privacy policy.

DMCA.com Protection Status