Block public endpoints
Learn how to block the public endpoints of your databases.
Redis Cloud |
---|
By default, you can connect to Redis Cloud databases through the database's public endpoint, or through the database's private endpoint with a private connectivity method.
Public endpoints are accessible from the public internet and don't require a private connectivity method. While this makes Redis Cloud databases convenient to use, it also exposes the databases to potential unauthorized access or brute force attacks, even with a database password in place. Some organizations may want to block public access to their databases to comply with security policies or to better meet stringent compliance standards.
Users with Redis Cloud Pro databases can choose to block public endpoints for all databases in their subscription.
Block public endpoints
You can block public endpoints for a new subscription or an existing subscription.
New subscription
To block the public endpoints when you create a new Pro subscription:
- Follow the instructions to create a Pro database with custom settings.
- On the Setup tab, go to Advanced options > Security to select persistent storage encryption options.
- Select Block public endpoint to block the public endpoint for all databases on the subscription.
- Select Continue to go to the Sizing tab. Follow the instructions to provision your database(s).
After you block the public endpoints for a new subscription, you will need to set up a private connectivity method to connect to your databases.
Existing subscription
For existing subscriptions, we recommend setting up a private connectivity method to connect to your databases before blocking the private endpoint and migrating all connections to the private endpoint.
To block the public endpoints of an existing Pro subscription:
- From the Redis Cloud console, select the Subscriptions menu and then select your subscription from the list.
- Open the Security tab to view security settings.
- In the Endpoint section, select Edit.
- Select Block public endpoint.
- Select Save to save your changes.
- A window will appear asking you to confirm that blocking the public endpoint will reject clients connecting to the public endpoint. Select I understand and then Block to confirm.
After your changes are saved, any incoming connections to the public endpoint of your database will be rejected.
Private connectivity methods
Redis Cloud supports the following private connectivity options:
- VPC peering
- Google Cloud Private Service Connect (Google Cloud only)
- AWS Transit Gateway (AWS only)