Ubuntu 上 Redis 的防火墙规则配置技巧
一、前置检查与端口确认
sudo systemctl status redisss -atpn | grep 6379 或 sudo netstat -tulpen | grep 6379bind 与 port 项;若仅本机访问,保持 bind 127.0.0.1 更安全。修改配置后重启:sudo systemctl restart redis二、UFW 常用规则模板
sudo ufw allow from 127.0.0.1 to any port 6379sudo ufw allow from **203.0.113.10** to any port **6379**sudo ufw allow from **192.168.1.0/24** to any port **6379**sudo ufw allow from **2001:db8::/32** to any port **6379**sudo ufw status verbosesudo ufw enable三、iptables 精细化控制
sudo iptables -I INPUT -p tcp -s **203.0.113.10** --dport **6379** -j ACCEPTsudo iptables -A INPUT -p tcp --dport **6379** -j DROPsudo apt-get install iptables-persistent 并在提示时保存,或手动保存/恢复规则sudo iptables -L -n -v | grep 6379四、云服务器与多防线安全建议
requirepass yourStrongPasswordrename-command FLUSHALL ""、rename-command CONFIG ""、rename-command SHUTDOWN ""五、快速验证与排错
redis-cli -h **127.0.0.1** -p **6379** ping(应返回 PONG)redis-cli -h **服务器IP** -p **6379** ping,必要时使用 -a <密码> 验证鉴权ss -atpn | grep **6379**sudo systemctl status redissudo ufw status verbosesudo iptables -L -n -v | grep **6379**