a402dc2e89
2、同步修改deploy.yml 3、为tsgconf/main.conf增加一个kafka的动态配置 4、修改tfe.conf中mc_default_eth的动态配置变量 5、原certstore中的r2、r3文件含有dos字符，修复该问题
80 lines
1.6 KiB
Django/Jinja
80 lines
1.6 KiB
Django/Jinja
[system]
|
|
nr_worker_threads={{ tfe.nr_threads }}
|
|
enable_breakpad=1
|
|
enable_breakpad_upload=0
|
|
breakpad_minidump_dir=/run/tfe/crashreport/
|
|
breakpad_upload_url=http://127.0.0.1:9000/
|
|
|
|
[kni]
|
|
ip=192.168.100.1
|
|
scm_port=2475
|
|
watchdog_switch=1
|
|
watchdog_port=2476
|
|
|
|
[ssl]
|
|
ssl_max_version=tls13
|
|
ssl_min_version=ssl3
|
|
no_session_cache=0
|
|
no_session_ticket=0
|
|
log_master_key=0
|
|
trusted_cert_load_local=1
|
|
trusted_cert_file=resource/tfe/tls-ca-bundle.pem
|
|
trusted_cert_dir=resource/tfe/trusted_storage
|
|
key_log_file=log/sslkeylog.log
|
|
no_alpn=0
|
|
stek_group_num=4
|
|
stek_rotation_time=3600
|
|
service_cache_expire_seconds=600
|
|
|
|
# SSL mid cert cache
|
|
# default 0
|
|
mc_cache_enable=1
|
|
# default eth0
|
|
mc_cache_eth={{ nic_inner_ctrl.name }}
|
|
# default NULL
|
|
mc_cache_broker_list={{ log_kafkabrokers.address }}
|
|
# default PXY-EXCH-INTERMEDIA-CERT
|
|
mc_cache_topic=PXY-EXCH-INTERMEDIA-CERT
|
|
|
|
[key_keeper]
|
|
#Mode: debug - generate cert with ca_path, normal - generate cert with cert store
|
|
#0 on cache 1 off cache
|
|
mode= {{ tfe.keykeeper.mode }}
|
|
no_cache=0
|
|
cert_store_host= {{ cert_store_server.address }}
|
|
cert_store_port= {{ cert_store_server.port }}
|
|
ca_path=resource/tfe/tango-ca-v3-trust-ca.pem
|
|
untrusted_ca_path=resource/tfe/tango-ca-v3-untrust-ca.pem
|
|
|
|
[debug]
|
|
passthrough_all_tcp=0
|
|
|
|
[traffic_mirror]
|
|
device={{ nic_traffic_mirror.name }}
|
|
type=0
|
|
|
|
[ratelimit]
|
|
#read_rate=200000
|
|
#read_burst=200000
|
|
#write_rate=200000
|
|
#write_burst=200000
|
|
|
|
[tcp]
|
|
so_keepalive=1
|
|
tcp_keepcnt=8
|
|
tcp_keepintvl=15
|
|
tcp_keepidle=30
|
|
tcp_user_timeout=600
|
|
tcp_ttl_upstream=75
|
|
tcp_ttl_downstream=70
|
|
|
|
[log]
|
|
level=30
|
|
|
|
[stat]
|
|
statsd_server={{ fs_remote.address }}
|
|
statsd_port={{ fs_remote.port }}
|
|
|
|
[http]
|
|
loglevel=30
|