Memcached security

  • SIlvaCosta

    (@silvacosta)


    13 years, 5 months ago

    Hi all

    Do you belive that there is any security issue with using memcached in a shared environment?

    I mean, since all the users can have access to memcached, wont there some wise guys that will access it to see the other users info? Or even 2 or more wordpress installations conflicting

Viewing 3 replies - 1 through 3 (of 3 total)
  • Hubert Nguyen

    (@hubertnguyen)

    13 years, 5 months ago

    1/ if you use your memcached locally (localhost), you may be able to close the port to external IPs addresses (non-localhost).

    2/ If you have a separate memcached server, you can authorize access from your wordpress machine only by blocking other incoming IPs.

    If you have more than one WP install, you may be able to run one instance of Memcached per WP site on different ports

    Thread Starter SIlvaCosta

    (@silvacosta)

    13 years, 2 months ago

    But someone can easily see a patern in the ports and try and access others information (quite easy) :\

    Hubert Nguyen

    (@hubertnguyen)

    12 years, 10 months ago

    If you have security groups, they shouldn’t be able to access your memcached instances

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Memcached security’ is closed to new replies.

Tags