Fixing Valkey binding to 0.0.0.0 in VMware Aria RAAS

Products

• SaltStack entitlement to VMware
• VMware Salt

Issue/Introduction

When you attempt to start or connect to the VCF Salt RaaS, you may observe "connection refused" or communication errors in the logs.

This issue occurs when the Valkey or Redis service is installed on a separate, dedicated box rather than the local RAAS host, and the RaaS service attempts to reach it over the network.

 

Environment

VCF Salt RAAS

Cause

By default, the Valkey or Redis configuration file contains a bind directive that restricts connections to the localhost interface (127.0.0.1). When the Valkey service is hosted on a different box than the RaaS service, the local loopback restriction prevents the RAAS instance from establishing a network connection.

Resolution

To update the Valkey binding configuration to listen on all network interfaces, perform the following steps:

1. Log in to the host machine running the Valkey service.

2. Open the Valkey configuration file using a text editor with elevated privileges:

   sudo vi /etc/valkey/valkey.conf
   

3. Locate the bind directive and update it from 127.0.0.1 to 0.0.0.0 (or to the specific IP address of the interface):

   bind 0.0.0.0
   

4. Save the file and exit the editor.

5. Restart the Valkey or Redis service to apply the changes:

   sudo systemctl restart valkey
   

   (Note: Depending on your deployment, use redis instead of valkey if it has not been updated in your environment yet).

6. Ensure that the password in /etc/valkey/valkey.conf or /etc/redis.conf matches the password used by RaaS.

Additional Information

 

• This issue only occurs when Valkey is installed on a different box than the RAAS service.

• If connection issues persist after modifying the bindings, check the /var/log/raas/raas logs for specific authentication or network refusal errors.

• Changing the binding to 0.0.0.0 allows the RaaS host to connect over the network, but it requires strict firewall rules to prevent unauthorized access to port 6379.

• Repoint from Redis to Valkey