From e16931d7c5ec1faabc90d852c2c9353111de1578 Mon Sep 17 00:00:00 2001 From: luwenpeng Date: Mon, 12 Oct 2020 17:01:17 +0800 Subject: [PATCH] =?UTF-8?q?TSG-2994=20=E6=9B=B4=E6=96=B0=20TFE=20=E9=85=8D?= =?UTF-8?q?=E7=BD=AE=E9=A1=B9?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- conf/tfe/future.conf | 7 ++++--- conf/tfe/tfe.conf | 14 ++++++++------ 2 files changed, 12 insertions(+), 9 deletions(-) diff --git a/conf/tfe/future.conf b/conf/tfe/future.conf index 04fb977..f1ef8b0 100644 --- a/conf/tfe/future.conf +++ b/conf/tfe/future.conf @@ -1,9 +1,10 @@ [STAT] no_stats=0 -statsd_server=192.168.10.72 -statsd_port=8092 +statsd_server=127.0.0.1 +statsd_port=8100 histogram_bins=0.50,0.80,0.9,0.95 statsd_cycle=5 # FS_OUTPUT_STATSD=1, FS_OUTPUT_INFLUX_LINE=2 statsd_format=2 -print_diff=1 +# printf diff Not available +# print_diff=1 diff --git a/conf/tfe/tfe.conf b/conf/tfe/tfe.conf index d7ceb32..faf8ff9 100644 --- a/conf/tfe/tfe.conf +++ b/conf/tfe/tfe.conf @@ -36,8 +36,9 @@ watchdog_port=2476 [ssl] ssl_ja3_debug=0 -ssl_max_version=tls13 -ssl_min_version=ssl3 +# ssl version Not available, configured via TSG website +# ssl_max_version=tls13 +# ssl_min_version=ssl3 ssl_compression=1 no_ssl2=1 no_ssl3=0 @@ -49,7 +50,7 @@ no_cert_verify=0 # session ticket no_session_ticket=0 -stek_group_num=4 +stek_group_num=4096 stek_rotation_time=3600 # session cache @@ -68,7 +69,8 @@ service_cache_fail_time_window=30 # cert check_cert_crl=0 trusted_cert_load_local=1 -trusted_cert_file=resource/tfe/tls-ca-bundle.pem +# trusted_cert_file=resource/tfe/tls-ca-bundle.pem +trusted_cert_file=resource/tfe/tsg_diagonse_ca.pem trusted_cert_dir=resource/tfe/trusted_storage # master key @@ -126,8 +128,8 @@ tcp_ttl_upstream=75 tcp_ttl_downstream=70 [stat] -statsd_server=192.168.10.72 -statsd_port=8126 +statsd_server=127.0.0.1 +statsd_port=8100 statsd_cycle=5 # 1:FS_OUTPUT_STATSD; 2:FS_OUTPUT_INFLUX_LINE statsd_format=2