What are some options for securing redis db?

Question

I'm running Redis locally and have multiple machines communicating with redis on the same port -- any suggestions for good ways to lock down access to Redis? The database is run on Mac OS X. Thank you.

Edit: This is assuming I do not want to use the built-in (non backwards compatible) Redis requirepass directive in the config.

Answer 1

On EC2 we lock down the machines that can make requests to the redis port on our redis box to only be our app box (we also only use it to store non-sensitive data).

Another option could be to not open up the redis port externally, but require doing port forwarding through an ssh tunnel. Then you could only allow requests coming through the tunnel and only allow ssh with a known key.

You'd pay the ssh penalty, but maybe that's ok for your scenario.