docker-misp icon indicating copy to clipboard operation
docker-misp copied to clipboard

Published 20 hours ago • verified publisher icon coolacid

persist misp sessions in redis db

Open garrit-schroeder opened this issue 3 years ago • 4 comments

Configure fpm php.ini to use redis for persisting sessions. This will allow to scale MISP horizontally.

garrit-schroeder avatar Mar 22 '21 17:03 garrit-schroeder

I'm wondering if everyone runs REDIS with their MISP builds - Maybe this should be configurable via ENV variables instead?

coolacid avatar Apr 19 '21 14:04 coolacid

AFAIK the Redis server is required bcos that's where MISP caches (not fetches) data to analyze and report correlations. I suppose if you have caching completely turned off you MIGHT get away with not running Redis, but I have never tried it.

chrisinmtown avatar May 12 '21 20:05 chrisinmtown

When you install MISP in the official way you install redis tooe. Why not in docker as well? Additionally we should think about security. Currently redis is not setup to use authentication.

garrit-schroeder avatar May 12 '21 20:05 garrit-schroeder

The included docker-compose is a quickstart function. One would hope a prod deployment is customised to the entity running the project.

Also, Redis doesn't have security. It has a password, which is all but useless.

coolacid avatar May 12 '21 21:05 coolacid