Connecting to Managed Providers
BetterDB works with any Redis-compatible managed service. This index covers the providers we have first-class guides for, and the two connection methods BetterDB uses to reach them.
Connection methods
BetterDB connects to your database in one of two ways. Most providers support both; some only support one.
Direct connection
BetterDB Cloud opens a TCP connection (with TLS) directly to your database’s public endpoint. Best for managed providers that expose a public endpoint with TLS, like Upstash, Redis Cloud, and Aiven. Configure in the connection selector under Direct by entering the host, port, and credentials.
BetterDB Cloud allows outbound connections on ports 6379, 6380, and 443 only. Any database on a non-standard port requires the agent.
Via the BetterDB Agent
The BetterDB Agent is a lightweight Docker container or npm package that runs inside your network. It connects outbound (port 443) to BetterDB Cloud over a WebSocket, then relays monitoring commands from BetterDB Cloud to your local database. The database never needs a public endpoint.
Required for:
- AWS ElastiCache (VPC-only)
- AWS MemoryDB (VPC-only)
- Google Cloud Memorystore (VPC-only)
- Azure Cache for Redis (VNet-only) if you use private endpoints
- Any self-hosted database not exposed to the internet
- Any database on a port other than 6379, 6380, or 443
The agent supports two authentication modes:
- Password - works against any Valkey/Redis instance with AUTH or ACL credentials.
- AWS IAM - SigV4-signed short-lived tokens for ElastiCache Valkey 7.2+ / Redis OSS 7.0+. No static passwords; credentials rotate automatically. See AWS ElastiCache for setup.
See the Agent Connection guide for full configuration, environment variables, and troubleshooting.
Provider matrix
| Provider | Protocol | TLS | Connection method | Auth modes |
|---|---|---|---|---|
| Upstash | Redis/Valkey | Required | Direct | Password |
| Redis Cloud | Redis | Optional (plan-dependent) | Direct | Password |
| AWS ElastiCache | Redis/Valkey | Optional (required on Serverless and for IAM auth) | Agent via EC2 | Password, IAM |
| AWS MemoryDB | Redis | Required | Agent via EC2 | Password |
AWS services (ElastiCache, MemoryDB) are VPC-only and require the BetterDB Agent running on an EC2 instance inside the same VPC. Upstash, Redis Cloud, and other providers with public endpoints support direct connection.