检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
When connecting to an instance, clients can use the CA root certificates downloaded from the management console to authenticate the instance server and encrypt data during transmission. DCS Redis for 4.0/5.0 only support plaintext transmission.
You are advised to enable SSL to encrypt the data transmitted between your Redis client and DCS instance to prevent data leakage. Click OK. It takes 1 to 2 minutes to enable public access.
If you need to encrypt data in transit when public access is not enabled, use an encryption algorithm (such as AES 256) to encrypt data before storage and keep access in the trusted domain. The data is also encrypted before persistence to disk.
To secure your DCS Redis instances, consider taking the following advice: Network connection configurations Encrypt sensitive data and disable public access. Sensitive data must be encrypted before being stored. Do not use public access unless otherwise required.
Stunnel is used to encrypt communication content in public network access. The network delay is slightly higher than that in the VPC, so public network access is suitable for local commissioning in the development phase. For details, see the public access instructions.
Use an encryption module in your application to encrypt the password. Changing an Instance Password You cannot change the password of a DCS instance in password-free mode. The desired Redis instance is in the Running state.
If you have sensitive data, please encrypt it before writing it to DCS. Data Restoration and Disaster Recovery Build restoration and disaster recovery (DR) capabilities in advance to prevent data from being deleted or damaged by mistake in abnormal data processing scenarios.