[ci skip] Redis adapter SSL/TLS connection information ( action cable docs). #42238
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
ashiksp
changed the title
We don't want to make this easily copy&paste-able to avoid people unnecessarily using this mode without fully understanding the implications. Also updated the docs to link to ruby-lang.org version for OpenSSL.
zzak
approved these changes
May 17, 2021
|
Hello, |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Followup for this comment to add redis adapter ssl_params documentaiton.
Redis 6 requires TLS to connect. However, Heroku support explained that they manage requests from the router level to the application level involving Self Signed Certs. Turns out, Heroku terminates SSL at the router level and requests are forwarded from there to the application via HTTP while everything is behind Heroku's Firewall and security measures.
When Redis adapter is used for action cable, we can pass ssl_params to skip certificate check. Also there are more valid attributes which can be passed in ssl_params. Added these informations to action cable configuration doc section.
Other Information
Heroku documentation
cc: @pixeltrix @zzak