Author Topic: Redis, data structures server (OpenSource)  (Read 1464 times)

0 Members and 2 Guests are viewing this topic.

Online DiTBhoTopic starter

  • Super Contributor
  • ***
  • Posts: 5087
  • Country: gb
Redis, data structures server (OpenSource)
« on: April 11, 2025, 12:03:11 pm »
About two years ago, I started writing a data structure server
I found the nice project redis.
which offers great ideas! (And well, it's also already usable)



The opposite of courage is not cowardice, it is conformity. Even a dead fish can go with the flow
 

Offline Zipdox

  • Regular Contributor
  • *
  • Posts: 228
  • Country: nl
Re: Redis, data structures server (OpenSource)
« Reply #1 on: June 02, 2025, 04:58:28 pm »
What's your use case and what's your question? Redis is a memory store, not a database. It's a key-value store, it also doesn't really do structured data like a database does.
 

Online DiTBhoTopic starter

  • Super Contributor
  • ***
  • Posts: 5087
  • Country: gb
Re: Redis, data structures server (OpenSource)
« Reply #2 on: June 02, 2025, 07:24:42 pm »
What's your use case and what's your question?

I didn't ask any questions.
I just wanted to let people know that this project exists.
The opposite of courage is not cowardice, it is conformity. Even a dead fish can go with the flow
 

Online DiTBhoTopic starter

  • Super Contributor
  • ***
  • Posts: 5087
  • Country: gb
Re: Redis, data structures server (OpenSource)
« Reply #3 on: June 02, 2025, 07:28:01 pm »
It's a key-value store, it also doesn't really do structured data like a database does.

Quote
About
For developers, who are building real-time data-driven applications, Redis is the preferred, fastest, and most feature-rich cache, data structure server, and document and vector query engine.

Yup, key-value, What I meant, and need.
Just, the author used "data structure server" in his description.

The opposite of courage is not cowardice, it is conformity. Even a dead fish can go with the flow
 

Offline newbrain

  • Super Contributor
  • ***
  • Posts: 1906
  • Country: se
Re: Redis, data structures server (OpenSource)
« Reply #4 on: June 03, 2025, 11:27:55 am »
I think redis' switch to SSPL1 and then back to OSI approved AGPL did not really make them a favor, we'll see if it pays out for them.
What is certain, is that users are left with the question whether they can still trust to have a legally viable product for their needs not only now, but in the future.
"I'm altering the deal. Pray I don't alter it any further.".
AGPL is quite problematic for many people/organizations, in my professional life we had to more or less ditch some services, due to some similar licensing change.

There are many alternatives - I think the most prominent now is Valkey (IIRC, a fork of the originally BSD licensed redis code).
Nandemo wa shiranai wa yo, shitteru koto dake.
 

Offline SiliconWizard

  • Super Contributor
  • ***
  • Posts: 17774
  • Country: fr
Re: Redis, data structures server (OpenSource)
« Reply #5 on: June 03, 2025, 02:07:39 pm »
Yes, many projects have switched to/are switching to Valkey for licensing reasons.
https://betterstack.com/community/comparisons/redis-vs-valkey/
 

Offline radiolistener

  • Super Contributor
  • ***
  • Posts: 5733
  • Country: Earth
Re: Redis, data structures server (OpenSource)
« Reply #6 on: June 06, 2025, 12:00:40 am »
Be careful: https://www.esecurityplanet.com/news/malware-redis-raider-cryptocurrency/
Quote from: May 20, 2025
Security experts have uncovered a new malware campaign, RedisRaider, that targets misconfigured Redis servers to secretly mine cryptocurrency. The malware, written in Go, spreads aggressively by exploiting weak Redis configurations, ultimately deploying the XMRig Monero miner on compromised Linux systems.

Datadog Security Labs discovered the campaign and described it as a highly evasive operation using advanced obfuscation techniques to avoid detection.

How it works: Scanning, exploiting, and mining
The attack starts with a custom-built scanner that randomly searches the internet for Redis servers running on the default port 6379. Once it finds one, it checks to see if the host is Linux-based.

If confirmed, the malware abuses Redis commands — specifically SET, CONFIG, and BGSAVE — to drop a malicious cron job that downloads and executes the RedisRaider malware.

The attackers behind RedisRaider didn’t just build another miner. They made it hard to detect and analyze. The payload is written in Go and heavily obfuscated using a tool called Garble. This hides key functions inside the code, making reverse engineering more difficult.

Additionally, RedisRaider uses anti-forensics techniques like:

Short key time-to-live (TTL) to erase traces.
Temporary files are written to the cron directories to blend with system processes.
Deleting keys and logs after execution to cover its tracks.
« Last Edit: June 06, 2025, 12:02:49 am by radiolistener »
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf