消息与事件
redis-streams-security
更新于 2026-09-16
Redis Streams · 安全规则
Security rules for Redis Streams: boundary validation, server-side authorisation and zero secret leakage.
- 技术栈
- Redis Streams
- 主题
- 安全
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Validate and normalise every input at the boundary it enters the system
- ✓ Authorise on the server against the authenticated principal, never on client claims
- ✓ Keep secrets out of repositories, logs and error messages
✕ 常见反模式
- ✕ Trusting headers or parameters that a client can set freely
- ✕ Disabling TLS verification or CSRF protection to unblock a test
- ✕ Wide-scope tokens with no expiry
◎ 交付前验证
- ◎ Cache hit ratio re-measured after the change
- ◎ Cold-start behaviour produces correct results, not empty pages
- ◎ Stampede protection tested under concurrent misses
同分类条目
9 篇消息与事件
Redis Streams 工程规则
Stream rules: consumer groups, ack batching and trimming strategy
消息与事件
Kafka 工程规则
Kafka rules: idempotent producers, schema evolution and consumer lag budgets
消息与事件
RabbitMQ 工程规则
RabbitMQ rules: durable queues, publisher confirms and dead-letter routing
消息与事件
NATS 工程规则
NATS rules: subject naming hierarchy and at-least-once handler idempotency