Updated on 2025-12-05 GMT+08:00

Encrypting Data over SSL for a GeminiDB Redis Instance

Secure Socket Layer (SSL) is an encryption-based Internet security protocol for establishing an encrypted link between a server and a client. It provides privacy, authentication, and integrity to Internet communications.

  • Authenticates users and servers, ensuring that data is sent to the correct clients and servers.
  • Encrypts data to prevent it from being intercepted during transfer.
  • Ensures data integrity during transmission.

GeminiDB Redis API provides two connection modes: non-SSL and SSL.

  • If SSL is enabled, your connection will be more secure.
  • If SSL is disabled, you can connect to a database using an unencrypted connection.

Usage Notes

  • After you enable or disable SSL, the established connection is interrupted. Restart the instance to apply the change. Restart the instance during off-peak hours to avoid service interruption.
  • SSL is enabled by default for new GeminiDB Redis instances. If SSL is enabled, your connection will be more secure. Enabling SSL will prolong network connection response and increase CPU usage. So, evaluate impacts on service performance before enabling SSL.
  • The SSL function provided by GeminiDB Redis supports only TLS 1.3 or later.

Enabling and Disabling SSL

  1. Log in to the GeminiDB console.
  2. On the Instances page, click the target instance.
  3. In the Connection Information area, click to enable SSL.

    Figure 1 Enabling SSL

    After SSL is enabled, you can connect to the instance through SSL connections. For details, see Connecting a GeminiDB Redis Instance over SSL.

  1. Log in to the GeminiDB console.
  2. On the Instances page, click the target instance.
  3. In the Connection Information area, click to disable SSL.

    Figure 2 Disabling SSL

    After SSL is disabled, you can connect to the GeminiDB Redis instance over a non-SSL connection. For details, see Procedure.

Related APIs

API

Description

Enabling or Disabling SSL

This API is used to enable or disable SSL.

Obtaining the SSL Certificate Download Address

This API is used to obtain the SSL certificate download address.