Tair (Redis® OSS-Compatible):Authentication methods for instances

Prerequisites

Add the client's IP address to the instance whitelist. For more information, see Configure a whitelist.

Comparison of authentication methods

An instance supports the following three authentication methods. Choose one based on your business scenario.

Password-only login

• How to log in: Enter only the password. No username is required.

• Limits: This method applies only to the instance's default account. The name of the default account is the instance ID, such as r-bp1jpghfglv6******, or default. You can view the name of the default account on the Account Management page in the console.

  You cannot use this method to log in to other custom accounts.

• Features: This method matches the native Redis login method, making it familiar to many users. However, each instance has only one default account, so you may need to share this account across multiple applications.

• redis-cli connection example:

  # The default account is r-bp1jpghfglv6******, and the password is Rp829dlwa.
  redis-cli -h r-bp1zx****.redis.rds.aliyuncs.com -p 6379 -a Rp829dlwa

Username and password login (recommended)

• How to log in: Enter the username and password in the user:password format, separated by a colon (:).

  Note

  • When using a third-party management tool such as RDM, enter user:password in the password field.

  • When using Data Management (DMS), enter the username and password in the Database Account and Database Password fields, respectively.

  • Instances compatible with Redis 6.0 or later also support the native AUTH user password command.

• Limits: None. This method applies to both default and custom accounts.

• Features: Create multiple accounts per instance and assign a different account to each application to improve data security. For more information about how to create a database account, see Create and manage accounts.

• redis-cli connection example:

  # The custom account is testaccount, and the password is Rp829dlwa.
  
  # Format 1: user:password.
  # This format is applicable to all Tair and open source Redis instances.
  redis-cli -h r-bp1zx****.redis.rds.aliyuncs.com -p 6379 -a testaccount:Rp829dlwa
  
  # Format 2: user password.
  # This format is applicable to Tair or open source Redis instances that are compatible with Redis 6.0 or later.
  redis-cli -h r-bp1zx****.redis.rds.aliyuncs.com -p 6379 
  AUTH testaccount Rp829dlwa

Password-free access

• How to log in: No username or password is required.

• Limits:

  • Client: The client must be in the same VPC as the instance.

  • Instance: Password-free access must be enabled for the instance. For more information, see Enable password-free access over VPC.

  This method connects only to the instance's default account and only over an internal endpoint. After login, you can perform read and write operations.

• Features: Password-free login. By default, any client in the same VPC can connect. To enhance security, use the #no_loose_check-whitelist-always parameter to enforce whitelist checks. For more information, see Tair Enterprise Edition instance parameters and Open source Redis-compatible instance parameters.

• redis-cli connection example:

  # Log in to the instance without a password.
  redis-cli -h r-bp1zx****.redis.rds.aliyuncs.com -p 6379

Common errors

If you forgot your password or have not set one, reset it. For more information, see Change or reset the password.