215 lines
11 KiB
Django/Jinja
215 lines
11 KiB
Django/Jinja
<?xml version="1.0"?>
|
||
<yandex>
|
||
<!-- Profiles of settings. -->
|
||
<profiles>
|
||
<!-- Default settings. -->
|
||
<default>
|
||
<!-- Maximum memory usage for processing single query, in bytes. -->
|
||
<max_memory_usage>{{ clickhouse.max_server_memory_usage }}</max_memory_usage>
|
||
<!-- <max_memory_usage_for_all_queries>200000000000</max_memory_usage_for_all_queries> -->
|
||
<default_database_engine>Ordinary</default_database_engine>
|
||
<optimize_on_insert>0</optimize_on_insert>
|
||
<async_socket_for_remote>0</async_socket_for_remote>
|
||
<distributed_ddl_task_timeout>0</distributed_ddl_task_timeout>
|
||
<max_bytes_before_external_group_by>75000000000</max_bytes_before_external_group_by>
|
||
<distributed_aggregation_memory_efficient>1</distributed_aggregation_memory_efficient>
|
||
<distributed_product_mode>local</distributed_product_mode>
|
||
<log_queries>1</log_queries>
|
||
<cancel_http_readonly_queries_on_client_close>1</cancel_http_readonly_queries_on_client_close>
|
||
<background_pool_size>{{ clickhouse.background_pool_size }}</background_pool_size>
|
||
<!-- <enable_http_compression>1</enable_http_compression>-->
|
||
<replication_alter_columns_timeout>60</replication_alter_columns_timeout>
|
||
<skip_unavailable_shards>1</skip_unavailable_shards>
|
||
<max_execution_time>21600</max_execution_time>
|
||
<!-- Use cache of uncompressed blocks of data. Meaningful only for processing many of very short queries. -->
|
||
<use_uncompressed_cache>1</use_uncompressed_cache>
|
||
<replace_running_query>1</replace_running_query>
|
||
<http_receive_timeout>21600</http_receive_timeout>
|
||
<http_send_timeout>21600</http_send_timeout>
|
||
<receive_timeout>21600</receive_timeout>
|
||
<send_timeout>21600</send_timeout>
|
||
<count_distinct_implementation>uniqCombined</count_distinct_implementation>
|
||
<!-- How to choose between replicas during distributed query processing.
|
||
random - choose random replica from set of replicas with minimum number of errors
|
||
nearest_hostname - from set of replicas with minimum number of errors, choose replica
|
||
with minumum number of different symbols between replica's hostname and local hostname
|
||
(Hamming distance).
|
||
in_order - first live replica is choosen in specified order.
|
||
-->
|
||
<max_rows_to_group_by>10000000</max_rows_to_group_by>
|
||
<group_by_overflow_mode>any</group_by_overflow_mode>
|
||
<timeout_before_checking_execution_speed>3600</timeout_before_checking_execution_speed>
|
||
<load_balancing>in_order</load_balancing>
|
||
</default>
|
||
|
||
<!-- Profile that allows only read queries. -->
|
||
<readonly>
|
||
<max_memory_usage>{{ clickhouse.max_server_memory_usage }}</max_memory_usage>
|
||
<!-- <max_memory_usage_for_all_queries>200000000000</max_memory_usage_for_all_queries> -->
|
||
<default_database_engine>Ordinary</default_database_engine>
|
||
<optimize_on_insert>0</optimize_on_insert>
|
||
<async_socket_for_remote>0</async_socket_for_remote>
|
||
<distributed_ddl_task_timeout>0</distributed_ddl_task_timeout>
|
||
<distributed_product_mode>local</distributed_product_mode>
|
||
<http_receive_timeout>600</http_receive_timeout>
|
||
<http_send_timeout>600</http_send_timeout>
|
||
<receive_timeout>600</receive_timeout>
|
||
<send_timeout>600</send_timeout>
|
||
<log_queries>1</log_queries>
|
||
<cancel_http_readonly_queries_on_client_close>1</cancel_http_readonly_queries_on_client_close>
|
||
<background_pool_size>{{ clickhouse.background_pool_size }}</background_pool_size>
|
||
<!-- http压缩 不影响http请求，只影响使用chproxy的客户端-->
|
||
<enable_http_compression>1</enable_http_compression>
|
||
<replace_running_query>1</replace_running_query>
|
||
<replication_alter_columns_timeout>60</replication_alter_columns_timeout>
|
||
<skip_unavailable_shards>1</skip_unavailable_shards>
|
||
<max_execution_time>600</max_execution_time>
|
||
<!-- Use cache of uncompressed blocks of data. Meaningful only for processing many of very short queries. -->
|
||
<timeout_before_checking_execution_speed>600</timeout_before_checking_execution_speed>
|
||
<use_uncompressed_cache>1</use_uncompressed_cache>
|
||
<count_distinct_implementation>uniqCombined</count_distinct_implementation>
|
||
<load_balancing>in_order</load_balancing>
|
||
<distributed_aggregation_memory_efficient>1</distributed_aggregation_memory_efficient>
|
||
<max_rows_to_group_by>10000000</max_rows_to_group_by>
|
||
<group_by_overflow_mode>any</group_by_overflow_mode>
|
||
<readonly>2</readonly>
|
||
|
||
</readonly>
|
||
|
||
<ckinsert>
|
||
<max_memory_usage>{{ clickhouse.max_server_memory_usage }}</max_memory_usage>
|
||
<!-- <max_memory_usage_for_all_queries>200000000000</max_memory_usage_for_all_queries> -->
|
||
<default_database_engine>Ordinary</default_database_engine>
|
||
<optimize_on_insert>0</optimize_on_insert>
|
||
<async_socket_for_remote>0</async_socket_for_remote>
|
||
<distributed_ddl_task_timeout>0</distributed_ddl_task_timeout>
|
||
<distributed_product_mode>local</distributed_product_mode>
|
||
<log_queries>1</log_queries>
|
||
<background_pool_size>{{ clickhouse.background_pool_size }}</background_pool_size>
|
||
|
||
<replication_alter_columns_timeout>60</replication_alter_columns_timeout>
|
||
<skip_unavailable_shards>1</skip_unavailable_shards>
|
||
<max_execution_time>300</max_execution_time>
|
||
<!-- Use cache of uncompressed blocks of data. Meaningful only for processing many of very short queries. -->
|
||
<use_uncompressed_cache>0</use_uncompressed_cache>
|
||
<timeout_before_checking_execution_speed>300</timeout_before_checking_execution_speed>
|
||
<http_receive_timeout>300</http_receive_timeout>
|
||
<http_send_timeout>300</http_send_timeout>
|
||
<receive_timeout>300</receive_timeout>
|
||
<send_timeout>300</send_timeout>
|
||
<allow_ddl>0</allow_ddl>
|
||
<load_balancing>random</load_balancing>
|
||
</ckinsert>
|
||
</profiles>
|
||
|
||
<!-- Users and ACL. -->
|
||
<users>
|
||
<!-- If user name was not specified, 'default' user is used. -->
|
||
<default>
|
||
<!-- Password could be specified in plaintext or in SHA256 (in hex format).
|
||
|
||
If you want to specify password in plaintext (not recommended), place it in 'password' element.
|
||
Example: <password>qwerty</password>.
|
||
Password could be empty.
|
||
|
||
If you want to specify SHA256, place it in 'password_sha256_hex' element.
|
||
Example: <password_sha256_hex>65e84be33532fb784c48129675f9eff3a682b27168c0ea744b2cf58ee02337c5</password_sha256_hex>
|
||
|
||
How to generate decent password:
|
||
Execute: PASSWORD=$(base64 < /dev/urandom | head -c8); echo "$PASSWORD"; echo -n "$PASSWORD" | sha256sum | tr -d '-'
|
||
In first line will be password and in second - corresponding SHA256.
|
||
-->
|
||
<password_sha256_hex>{{ root_key_sha }}</password_sha256_hex>
|
||
|
||
<!-- List of networks with open access.
|
||
|
||
To open access from everywhere, specify:
|
||
<ip>::/0</ip>
|
||
|
||
To open access only from localhost, specify:
|
||
<ip>::1</ip>
|
||
<ip>127.0.0.1</ip>
|
||
|
||
Each element of list has one of the following forms:
|
||
<ip> IP-address or network mask. Examples: 213.180.204.3 or 10.0.0.1/8 or 10.0.0.1/255.255.255.0
|
||
2a02:6b8::3 or 2a02:6b8::3/64 or 2a02:6b8::3/ffff:ffff:ffff:ffff::.
|
||
<host> Hostname. Example: server01.yandex.ru.
|
||
To check access, DNS query is performed, and all received addresses compared to peer address.
|
||
<host_regexp> Regular expression for host names. Example, ^server\d\d-\d\d-\d\.yandex\.ru$
|
||
To check access, DNS PTR query is performed for peer address and then regexp is applied.
|
||
Then, for result of PTR query, another DNS query is performed and all received addresses compared to peer address.
|
||
Strongly recommended that regexp is ends with $
|
||
All results of DNS requests are cached till server restart.
|
||
-->
|
||
<networks incl="networks" replace="replace">
|
||
<ip>::/0</ip>
|
||
</networks>
|
||
|
||
<!-- Settings profile for user. -->
|
||
<profile>default</profile>
|
||
|
||
<!-- Quota for user. -->
|
||
<quota>default</quota>
|
||
</default>
|
||
|
||
<tsg_report>
|
||
<password_sha256_hex>{{ root_key_sha }}</password_sha256_hex>
|
||
<networks incl="networks" replace="replace">
|
||
<ip>::/0</ip>
|
||
</networks>
|
||
<profile>default</profile>
|
||
<quota>default</quota>
|
||
</tsg_report>
|
||
|
||
|
||
<tsg_insert>
|
||
<password_sha256_hex>{{ root_key_sha }}</password_sha256_hex>
|
||
<networks incl="networks" replace="replace">
|
||
<ip>::/0</ip>
|
||
</networks>
|
||
<profile>ckinsert</profile>
|
||
<quota>default</quota>
|
||
</tsg_insert>
|
||
|
||
<!-- Example of user with readonly access. -->
|
||
<tsg_query>
|
||
<password_sha256_hex>{{ readonly_key_sha }}</password_sha256_hex>
|
||
<networks incl="networks" replace="replace">
|
||
<ip>::/0</ip>
|
||
</networks>
|
||
<profile>readonly</profile>
|
||
<quota>default</quota>
|
||
</tsg_query>
|
||
|
||
|
||
<!-- Example of user with readonly access. -->
|
||
<readonly>
|
||
<password></password>
|
||
<networks incl="networks" replace="replace">
|
||
<ip>::1</ip>
|
||
<ip>127.0.0.1</ip>
|
||
</networks>
|
||
<profile>readonly</profile>
|
||
<quota>default</quota>
|
||
</readonly>
|
||
</users>
|
||
|
||
<!-- Quotas. -->
|
||
<quotas>
|
||
<!-- Name of quota. -->
|
||
<default>
|
||
<!-- Limits for time interval. You could specify many intervals with different limits. -->
|
||
<interval>
|
||
<!-- Length of interval. -->
|
||
<duration>3600</duration>
|
||
<!-- No limits. Just calculate resource usage for time interval. -->
|
||
<queries>0</queries>
|
||
<errors>0</errors>
|
||
<result_rows>0</result_rows>
|
||
<read_rows>0</read_rows>
|
||
<execution_time>0</execution_time>
|
||
</interval>
|
||
</default>
|
||
</quotas>
|
||
</yandex>
|