Database / ValKey Interview questions
How do you secure a Valkey deployment in production?
Start by binding the server to private network interfaces, keeping protected-mode enabled, and placing it behind a firewall or security group so port 6379 isn't reachable from the public internet.
Replace a single shared password with ACL users scoped to the least privilege each application actually needs, restricting both commands and key patterns, and enable TLS for client connections as well as replication and cluster-bus traffic.
Rename or disable especially dangerous commands like FLUSHALL and CONFIG where they aren't needed, run the process as an unprivileged OS user, and keep the server patched, since Valkey has shipped fixes for real CVEs, including a TLS-related use-after-free addressed in a 2026 release.
More Related questions...