Access ElastiCache memcache instance from local development environment

Question

Is there any way to access cache nodes from local development environment? Although the same cache nodes are accessible from EC2 instance.

I'm using Enyim memcache client library with C#. I found few article saying this is not possible then what should be best approach. Should i need to setup memcache locally for development work?

score 6 · Answer 1 · edited May 23 '17 at 12:25

6

According to Amazon, there is no accessing elasticache clusters from outside AWS:

...an Amazon ElastiCache Cluster, inside or outside a VPC, is never allowed to be accessed from the Internet.

From http://aws.amazon.com/elasticache/faqs/#Can_I_access_Amazon_ElastiCache_from_outside_AWS

Also see this question:

Can you connect to Amazon Elasticache Redis outside of Amazon

edited May 23 '17 at 12:25

Community

1
1

answered Jul 31 '14 at 22:17

user3897490

69
1
2

Memcached-specific (not redis) answer here: https://stackoverflow.com/a/75798299/1852005 – stwr667 Mar 21 '23 at 07:28

score 2 · Answer 2 · answered Mar 31 '15 at 16:21

You can create ssh tunnel:

$ ssh -nNT -L 11211:<elasticache instance public dns name>:11211 ubuntu@<ec2 instance> -i <path to your pem file>

-L means local port forwarding
-nNT means no tty allocated and no commands executed on remote side

for example:

$ ssh -nNT -L 11211:blah-blah.cfg.use1.cache.amazonaws.com:11211 ubuntu@ec2-54-254-254.compute-1.amazonaws.com -i ~/.ssh/mykey.pem

And in another console you can connect to localhost:

telnet localhost 11211
Trying ::1...
Connected to localhost.
Escape character is '^]'.

There's also a guide here that shows how to test specific Memcached calls using `telnet`, near the bottom: https://aws.amazon.com/premiumsupport/knowledge-center/elasticache-connection-test/ — stwr667, Mar 21 '23 at 07:30

score 1 · Accepted Answer · answered Mar 25 '14 at 13:56

When you create your Elastic Cache cluster, you have to define a Security Group. A Security group is a set of rules that define what IP addresses are authorised to connect to your cluster.

Should you want to connect to your cache cluster from your local machine, be sure to add a rule to authorise your local IP address to connect to the cluster (beware if you're behind a NATing gateway or a proxy, you need to use your external IP address and not your internal IP address)

Details are available at : http://docs.aws.amazon.com/AmazonElastiCache/latest/UserGuide/GettingStarted.CreateCacheCluster.html

Security Group is explained at : http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_SecurityGroups.html

--Seb

I don't see a way to add anything but security groups to elasticache security groups. — Usman Ismail, Jul 31 '14 at 21:02

Access ElastiCache memcache instance from local development environment

3 Answers3

Linked