You can modify the value of the #no_loose_check-whitelist-always parameter to use the whitelist even when the password-free access feature is enabled.

Background information

After password-free access is enabled, ApsaraDB for Redis does not restrict access from other services in the same VPC network based on the whitelist. For more information, see Enable password-free access. If password-free access is enabled but you want to allow only specified resources, such as a specified ECS or RDS instance, to access your ApsaraDB for Redis instance, you need to modify the value of the #no_loose_check-whitelist-always parameter.


  1. Log on to the ApsaraDB for Redis console.
  2. In the upper-left corner of the top navigation bar, select the region where the instance is deployed.
  3. On the Instances page, click the instance ID or choose More > Manage in the Actions column.
  4. In the left-side navigation pane of the Instance Information page, click System Parameters.
  5. On the System Parameters page, find the #no_loose_check-whitelist-always parameter and click Modify in the Actions column.
    Figure 1. Specify the #no_loose_check-whitelist-always parameter.
  6. In the dialog box that appears, set the parameter to yes, and then click OK.
    Figure 2. Set the #no_loose_check-whitelist-always parameter to yes.
    Note To disable the forcible whitelist authentication, set this parameter to no.