Using a Yandex Managed Service for Valkey™ cluster as a PHP session storage
You can use Yandex Managed Service for Valkey™ clusters for storing PHP session data.
To configure a Yandex Managed Service for Valkey™ cluster as a PHP session storage:
- Configure PHP to use the Yandex Managed Service for Valkey™ cluster a session storage.
- Check whether PHP session data is saved to the Yandex Managed Service for Valkey™ cluster.
If you no longer need the resources you created, delete them.
Required paid resources
The support cost for this solution includes:
- Yandex Managed Service for Valkey™ target cluster fee, which covers the use of computing resources allocated to hosts, and disk space (see Valkey™ pricing).
- Fee for using public IP addresses if public access is enabled for cluster hosts (see Virtual Private Cloud pricing).
- VM fee, which covers the use of computing resources, storage, and public IP address (see Compute Cloud pricing).
Getting started
Set up your infrastructure
-
If using Virtual Private Cloud security groups, configure them. Add TCP rules to the security group to allow the following:
- Incoming traffic on port
22from any IP addresses for SSH. - Outgoing and incoming traffic on ports
80and443to and from any IP address for HTTP/HTTPS. - Outgoing and incoming traffic on port
6379to and from internal network IP addresses for Valkey™.
For more information, see Security groups.
- Incoming traffic on port
-
Create a VM with LAMP/LEMP in Yandex Compute Cloud using any suitable configuration.
When creating the VM, select the security group configured earlier. To check the security settings, enter the VM’s public IP address in your browser’s address bar: you should see the default page of the web server.
-
Create a Yandex Managed Service for Valkey™ cluster with any suitable configuration. When creating the Yandex Managed Service for Valkey™ cluster, specify the same network and security groups as those of the VM hosting the web server.
-
If you do not have Terraform yet, install it.
-
Get the authentication credentials. You can add them to environment variables or specify them later in the provider configuration file.
-
Configure and initialize a provider. There is no need to create a provider configuration file manually, you can download it
. -
Place the configuration file in a separate working directory and specify the parameter values. If you did not add the authentication credentials to environment variables, specify them in the configuration file.
-
Download the configuration file matching your cluster type to the same working directory:
- redis-cluster-non-sharded-and-vm-for-php.tf
: For a non-sharded cluster. - redis-cluster-sharded-and-vm-for-php.tf
: For a sharded cluster.
Each file describes the following:
- Network.
- Subnet.
- Default security group and rules for connecting to your cluster and VM from the internet.
- Yandex Managed Service for Valkey™ cluster.
- Virtual machine.
- redis-cluster-non-sharded-and-vm-for-php.tf
-
Specify the following in the configuration file:
- Password to access the Yandex Managed Service for Valkey™ cluster.
- Public LAMP/LEMP image ID.
- Username and path to the public key for accessing the virtual machine. By default, the pre-configured image ignores the specified username and automatically creates a user named
ubuntu. Use it to connect to the VM.
-
Validate your Terraform configuration files using this command:
terraform validateTerraform will display any configuration errors detected in your files.
-
Create the required infrastructure:
-
Run this command to view the planned changes:
terraform planIf you described the configuration correctly, the terminal will display a list of the resources to update and their parameters. This is a verification step that does not apply changes to your resources.
-
If everything looks correct, apply the changes:
-
Run this command:
terraform apply -
Confirm updating the resources.
-
Wait for the operation to complete.
-
All the required resources will be created in the specified folder. You can check resource availability and their settings in the management console
. -
Configure additional settings
-
Connect to the VM with the web server over SSH and configure it:
-
Install certificates:
sudo mkdir --parents /usr/local/share/ca-certificates/Yandex/ && \ sudo wget "https://storage.yandexcloud.net/cloud-certs/CA.pem" \ --output-document /usr/local/share/ca-certificates/Yandex/YandexInternalRootCA.crt -
Set up the environment and install the phpredis
library usingpecl:sudo apt update && \ sudo apt install php-dev pkg-php-tools redis-tools --yes && \ sudo pecl channel-update pecl.php.net && \ sudo pecl install redis -
Set yourself as the owner of the
/var/www/html/directory and delete all its contents:sudo chown <username> /var/www/html/ --recursive && \ rm /var/www/html/*
-
Configure PHP to use the Yandex Managed Service for Valkey™ cluster as a session storage
-
Edit the
php.iniconfiguration file for your web server.php.iniis usually located in the following directory:/etc/php/7.2/apache2/for Apache/etc/php/7.2/fpm/for NGINX
To find out the location of
php.ini, run thesudo find /etc/ -name php.inicommand.Note
There is no need to make any changes to
php.inifor the PHP CLI.Non-sharded clusterSharded cluster[PHP] ... extension = redis ... [Session] session.save_handler = redis session.save_path = "tcp://<Valkey™_master_host_FQDN>:6379?auth=<password>"[PHP] ... extension = redis ... [Session] session.save_handler = rediscluster session.save_path = "seed[]=<FQDN1>:6379&seed[]=<FQDN2>:6379&seed[]=<FQDN3>:6379&auth=<password>"Where
<FQDN1>,<FQDN2>, and<FQDN3>are fully qualified domain names of the cluster’s master hosts. For example, for a cluster with three shards and password set topassword, thesession.save_pathparameter value will look like this:session.save_path = "seed[]=rc1a-t9h8gxqo********.mdb.yandexcloud.net:6379&seed[]=rc1b-7qxk0h3b********.mdb.yandexcloud.net:6379&seed[]=rc1c-spy1c1i4********.mdb.yandexcloud.net:6379&auth=password"For more information about how to connect to clusters, see Setting up a connection.
-
Restart the web server:
sudo systemctl restart apache2for Apachesudo systemctl restart php7.2-fpmfor NGINX
Check whether PHP session data is saved to the Yandex Managed Service for Valkey™ cluster
-
In the
/var/www/html/directory, create a file namedindex.phpto output powers of2:<?php session_start(); $count = isset($_SESSION['count']) ? $_SESSION['count'] : 1; echo $count; $_SESSION['count'] = $count * 2;Each time you refresh the page, the output value will increase. The
$countvariable value will be saved in the session data. Valkey™ will generate a unique key per session. -
Connect to the Valkey™ cluster from your VM via
redis-cli:redis-cli -c -h <master_host_FQDN> -a <password>Enter the following command to view the keys stored in Valkey™:
KEYS *(empty list or set)The returned result shows that no data is currently stored in Valkey™.
-
Check whether user sessions are saved when connecting to the web server:
- Enter the public IP of the VM hosting the web server in your browser’s address bar. The first time you open the page,
1will be output. - Refresh the page several times: the output value will increase.
- Open the page in a different browser: the count will start from
1. - Refresh the page several times: the output value will also increase.
The fact that the
$countvariable value continues to increment correctly between browser page refreshes shows that the configured PHP session storage setup in the Yandex Managed Service for Valkey™ cluster works properly. - Enter the public IP of the VM hosting the web server in your browser’s address bar. The first time you open the page,
-
Repeat the command to list all keys stored in Valkey™:
KEYS *1) "PHPREDIS_SESSION:keb02haicgi0ijeju3********" 2) "PHPREDIS_SESSION:c5r0mbe1v84pn2b5kj********"The returned result shows that each session in Valkey™ has its own unique key.
Delete the resources you created
Delete the resources you no longer need to avoid paying for them:
- Delete the Yandex Managed Service for Valkey™ cluster.
- Delete the virtual machine.
- If you reserved public static IP addresses, release and delete them.
-
In the terminal window, go to the directory containing the infrastructure plan.
Warning
Make sure the directory has no Terraform manifests with the resources you want to keep. Terraform deletes all resources that were created using the manifests in the current directory.
-
Delete resources:
-
Run this command:
terraform destroy -
Confirm deleting the resources and wait for the operation to complete.
All the resources described in the Terraform manifests will be deleted.
-