Skip to content

Add dnsLookup bypass for AWS MemoryDB TLS compatibility - #1

Merged
tichopad merged 3 commits into
masterfrom
fix-awsmemorydb-compat
Dec 1, 2025
Merged

tichopad merged 3 commits into
masterfrom
fix-awsmemorydb-compat

Conversation

@tichopad

@tichopad tichopad commented Dec 1, 2025 •

Copy link
Copy Markdown

Problem: AWS MemoryDB fails with Failed to refresh slots cache - ioredis resolves hostnames to IPs but TLS certs are issued for hostnames.

Fix:

  • Add dnsLookup bypass to preserve hostname for TLS validation
  • Use system default TLS options (remove rejectUnauthorized: false)

The compatibility fix might not be the best approach, but it works. I also feel like it could break compatibility with other Redis setups, that's why I'm not going to create an upstream PR.

@tichopad
tichopad merged commit 905c868 into master Dec 1, 2025
tichopad added a commit that referenced this pull request Dec 1, 2025
- Multi-stage Dockerfile builds from repo source instead of NPM package
- GitHub Actions workflow publishes to ghcr.io on push to master
- Includes build-and-test job before publishing
- Tags: `latest` + commit SHA

Depends on: #1 (fix-awsmemorydb-compat)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant