how to remove this in the pkg-readme file if needed.
Upstream wiki says "Memcached does not spend much, if any, effort in
ensuring its defensibility from random internet connections. So you
must not expose memcached directly to the internet, or otherwise any
untrusted users. Using SASL authentication here helps, but should not be
totally trusted."
memcached normally listens to both TCP and UDP. In particular the UDP
means that unfirewalled instances are a big DoS amplification risk.
ok giovanni@ (maintainer) kili@ jca@
Fixes CVE-2017-9951.
Create var/run/memcached with correct perms/ownership in rc_pre, and
document in README how to make it listen on a unix socket instead of
localhost/network.
ok giovanni@ (maintainer)
rather than enabling it unconditionally. For some situations, packet filtering
is good enough, and increasing the codebase by 5x to add user authentication
isn't so desirable ;) ok giovanni@
memcached is a high-performance, distributed memory object caching
system, generic in nature, but intended for use in speeding up dynamic
web applications by alleviating database load.
help and ok naddy@
