SpringCloud/spring-cloud-gateway
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add support for configuring TLS handshake timeouts

Browse Source
This commit is contained in:
Tony Clarke
2018-09-29 14:54:48 -04:00
parent 2f502e2050
commit 6a2f9d14b5
5 changed files with 112 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
docs/src/main/asciidoc/spring-cloud-gateway.adoc
View File

@@ -950,7 +950,24 @@ spring:
- cert2.pem
----
If the Spring Cloud Gateway is not provisioned with trusted certificates the default trust store is used (which can be overriden with system property javax.net.ssl.trustStore.
If the Spring Cloud Gateway is not provisioned with trusted certificates the default trust store is used (which can be overriden with system property javax.net.ssl.trustStore).
=== TLS Handshake
The Gateway maintains a client pool that it uses to route to backends. When communicating over https the client initiates a TLS handshake. A number of timeouts are assoicated with this handshake. These timeouts can be configured (defaults shown):
.application.yml
[source,yaml]
----
spring:
cloud:
gateway:
httpclient:
ssl:
handshake-timeout-millis: 10000
close-notify-flush-timeout-millis: 3000
close-notify-read-timeout-millis: 0
----
== Configuration