Connect to a Redis cluster

Last update: June 04 2026

You can connect to a Redis cluster:

• via Docker;
• program code with SSL and without SSL.

Connecting with an SSL certificate is available for all methods.

When connecting, specify the port and address.

Connection ports

Use the following ports to connect to Redis:

• 6380 — port for connecting with an SSL certificate;
• 6379 — port for connecting without an SSL certificate (only available for clusters in a private subnet).

Connection addresses

The connection address depends on the cluster subnet and where you are connecting from. You can choose an address based on one of the scenarios:

• connecting to a cluster in a public subnet;
• connecting from a private subnet to a cluster in a private subnet;
• connecting from the Internet to a cluster in a private subnet.

Connecting to a cluster in a public subnet

If a cluster is in a public subnet, you can connect to the nodes using a DNS address or an IP address from the public subnet.

We recommend connecting using a DNS address. DNS addresses use the master discovery mechanism in the cluster—the address is tied to the node role rather than the node itself. If a master becomes unavailable, one of the replicas becomes the new master, and the address moves to the new node along with the role.

The master discovery mechanism is not used when connecting via an IP address from a public subnet. If one of the replicas becomes the new master, the master's IP address will change, and the connection using the old IP address will stop working.

You can view the connection address in the Dashboard.

Connecting from a private subnet to a cluster in a private subnet

If you are connecting from a private subnet to a cluster in a private subnet, you can use a DNS address or a private IP address.

We recommend connecting using a DNS address. DNS addresses use the master discovery mechanism in the cluster—the address is tied to the node role rather than the node itself. If a master becomes unavailable, one of the replicas becomes the new master, and the address moves to the new node along with the role.

The master discovery mechanism is not used when connecting via a private IP address. If one of the replicas becomes the new master, the master's IP address will change, and the connection using the old IP address will stop working.

To connect from another private subnet, first connect both private subnets to a cloud router.

You can view the connection address in the Dashboard.

Connecting from the Internet to a cluster in a private subnet

If you are connecting to a cluster in a private subnet from the Internet, you can only use a public IP address (Floating IP). The private subnet must meet the requirements. If the subnet does not meet the requirements, prepare it for a public IP address (Floating IP).

Public IP addresses (Floating IPs) use the master discovery mechanism—the address is tied to the node role rather than the node itself. If a master becomes unavailable, one of the replicas becomes the new master, and the address moves to the new node along with the role.

You can view the connection address in the Dashboard.

View the connection address

1. In the Dashboard, in the top menu click Products and select Managed Databases.
2. Open the Active tab.
3. Open the database cluster page → Connection tab.
4. In the Connection addresses block, view the address.

Connect via SSL

Connecting using TLS(SSL) encryption ensures a secure connection between your server and the database cluster.

Bash

1. Download the root certificate and place it in the ~/.redis/: folder:

   mkdir -p ~/.redis/
   wget https://storage.dbaas.selcloud.ru/CA.pem -O ~/.redis/root.crt
   chmod 600 ~/.redis/root.crt

2. Connect to the cluster:

   redis-cli -h <host> \
       -a <password> \
       -p <port> \
       --tls \
       --cacert ~/.redis/root.crt

   Specify:

   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <password> — the password;
   • <port> — the connection port.

PowerShell

1. In the Control panel, click Download certificate to download the root certificate and place it in the %APPDATA%\redis\.

2. Connect to the cluster:

   redis-cli -h <host> `
   -a <password> `
   -p <port> `
   --tls `
   --cacert %APPDATA%\redis\CA.pem

   Specify:

   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <password> — the password;
   • <port> — the connection port.

Python

1. Download the root certificate and place it in the ~/.redis/: folder:

   mkdir -p ~/.redis/
   wget https://storage.dbaas.selcloud.ru/CA.pem -O ~/.redis/root.crt
   chmod 600 ~/.redis/root.crt

2. Install the redis library:

   pip install redis

3. Use the connection example:

   import redis
   
   r = redis.Redis(
       host="<host>",
       password="<password>",
       port=<port>,
       db=0,
       ssl=True,
       ssl_ca_certs="<path>",
   )
   
   print(r.set("KEY", "VALUE"))
   print(r.get("KEY"))

   Specify:

   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <password> — the user password;
   • <port> — the connection port;
   • <path> — the full path to the root certificate.

PHP

1. Download the root certificate and place it in the ~/.redis/: folder:

   mkdir -p ~/.redis/
   wget https://storage.dbaas.selcloud.ru/CA.pem -O ~/.redis/root.crt
   chmod 600 ~/.redis/root.crt

2. Install the predis library via composer:

   composer require predis/predis

3. Use the connection example:

   <?php
   require __DIR__ . '/vendor/autoload.php';
   Predis\Autoloader::register();
   
   $host = ['<host>:<port>'];
   $options = [
       'parameters' => [
           'scheme' => 'tls',
           'ssl' => ['cafile' => '<path>', 'verify_peer' => true],
           'password' => "<password>"
       ],
       'cluster' => 'predis'
   ];
   
   $conn = new Predis\Client($host, $options);
   
   $conn->set('KEY', 'VALUE');
   var_dump($conn->get('KEY'));
   
   $conn->disconnect();
   ?>

   Specify:

   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <port> — the connection port;
   • <path> — the full path to the root certificate;
   • <password> — the user password.

Go

1. Download the root certificate and place it in the ~/.redis/: folder:

   mkdir -p ~/.redis/
   wget https://storage.dbaas.selcloud.ru/CA.pem -O ~/.redis/root.crt
   chmod 600 ~/.redis/root.crt

2. Use the connection example:

   package main
   
   import (
       "context"
       "crypto/tls"
       "crypto/x509"
       "fmt"
       "io/ioutil"
   
       "github.com/go-redis/redis/v8"
   )
   
   var ctx = context.Background()
   var certPath = "<path>"
   
   func main() {
       caCert, err := ioutil.ReadFile(certPath)
       if err != nil {
           panic(err)
       }
       caCertPool := x509.NewCertPool()
       caCertPool.AppendCertsFromPEM(caCert)
       rdb := redis.NewClient(&redis.Options{
           Addr:     "<host>:<port>",
           Password: "<password>",
           DB:       0,
           TLSConfig: &tls.Config{
               RootCAs:            caCertPool,
               InsecureSkipVerify: true,
           },
       })
   
       err = rdb.Set(ctx, "key", "value", 0).Err()
       if err != nil {
           panic(err)
       }
   
       val, err := rdb.Get(ctx, "key").Result()
       if err != nil {
           panic(err)
       }
       fmt.Println("key", val)
   
   }

   Specify:

   • <path> — the full path to the root certificate;
   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <port> — the connection port;
   • <password> — the user password.

Node.js

1. Download the root certificate and place it in the ~/.redis/: folder:

   mkdir -p ~/.redis/
   wget https://storage.dbaas.selcloud.ru/CA.pem -O ~/.redis/root.crt
   chmod 600 ~/.redis/root.crt

2. Install the ioredis client:

   npm install ioredis

3. Use the connection example:

   const fs = require('fs');
   const Redis = require('ioredis');
   
   const config = {
     host: '<host>',
     port: <port>,
     password: '<password>',
     tls: {
       rejectUnauthorized: true,
       ca: fs.readFileSync('<path>').toString(),
     }
   };
   
   const connection = new Redis(config);
   
   connection.set('key', 'value', (error) => {
     if (error) throw error;
   });
   
   connection.get('key', (error, res) => {
     if (error) throw error;
     console.log(res);
     connection.disconnect();
   });

   Specify:

   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <port> — the connection port;
   • <password> — the user password;
   • <path> — the full path to the root certificate.

Connect without SSL

Connection without SSL is only available for clusters in a private subnet.

Bash

1. Open the CLI.

2. Connect to the cluster:

   redis-cli -h <host> \
     -a <password> \
     -p <port>

   Specify:

   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <password> — the password;
   • <port> — the connection port.

PowerShell

1. Open the CLI.

2. Connect to the cluster:

   redis-cli -h <host> `
   -a <password> `
   -p <port>

   Specify:

   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <password> — the password;
   • <port> — the connection port.

Python

1. Install the redis library:

   pip install redis

2. Use the connection example:

   import redis
   
   r = redis.Redis(
       host="<host>",
       password=r"<password>",
       port=<port>,
       db=0,
   
   )
   
   print(r.set("KEY", "VALUE"))
   print(r.get("KEY"))

   Specify:

   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <password> — the user password;
   • <port> — the connection port.

PHP

1. Install the predis library via composer:

   composer require predis/predis

2. Use the connection example:

   <?php
       require __DIR__ . '/vendor/autoload.php';
       Predis\Autoloader::register();
   
       $host = ['<host>:<port>'];
       $options = [
         'parameters' => [
           'password' => "<password>"
         ],
         'cluster' => 'predis'
       ];
   
       $conn = new Predis\Client($host, $options);
   
       $conn->set('KEY', 'VALUE');
       var_dump($conn->get('KEY'));
   
       $conn->disconnect();
   ?>

   Specify:

   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <port> — the connection port;
   • <password> — the user password.

Go

Use the connection example:

package main

import (
    "context"
    "fmt"

    "github.com/go-redis/redis/v8"
)

func main() {
    var ctx = context.Background()

    rdb := redis.NewClient(&redis.Options{
        Addr:     "<host>:<port>",
        Password: "<password>",
        DB:       0,
    })

    err := rdb.Set(ctx, "key", "value", 0).Err()
    if err != nil {
        panic(err)
    }

    val, err := rdb.Get(ctx, "key").Result()
    if err != nil {
        panic(err)
    }
    fmt.Println("key", val)

}

Specify:

• <host> — the DNS address or public IP address (Floating IP) of the node;
• <port> — the connection port;
• <password> — the user password.

Node.js

1. Install the ioredis client:

   npm install ioredis

2. Use the connection example:

   const Redis = require('ioredis');
   
   const config = {
     host: '<host>',
     port: <port>,
     password: '<password>',
   };
   
   const connection = new Redis(config);
   
   connection.set('key', 'value', (error) => {
     if (error) throw error;
   });
   
   connection.get('key', (error, res) => {
     if (error) throw error;
     console.log(res);
     connection.disconnect();
   });

   Specify:

   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <port> — the connection port;
   • <password> — the user password.

Connect via Docker

1. Download the root certificate and place it in the ~/.redis/: folder:

   mkdir -p ~/.redis/
   wget https://storage.dbaas.selcloud.ru/CA.pem -O ~/.redis/root.crt
   chmod 600 ~/.redis/root.crt

2. Connect to the cluster:

   docker run --rm -it \
     -v $(pwd)/.redis/root.crt:/root.crt \
     redis \
     redis-cli \
     -h <host> \
     -a <password> \
     -p <port> --tls \
     --cacert /root.crt

   Specify:

   • <host> — the DNS address or public IP address (Floating IP) of the node;
   • <password> — the user password;
   • <port> — the connection port.