| # |
| # Licensed to the Apache Software Foundation (ASF) under one |
| # or more contributor license agreements. See the NOTICE file |
| # distributed with this work for additional information |
| # regarding copyright ownership. The ASF licenses this file |
| # to you under the Apache License, Version 2.0 (the |
| # "License"); you may not use this file except in compliance |
| # with the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, |
| # software distributed under the License is distributed on an |
| # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| # KIND, either express or implied. See the License for the |
| # specific language governing permissions and limitations |
| # under the License. |
| # |
| |
| # Zookeeper quorum connection string (comma-separated) |
| zookeeperServers= |
| |
| # Configuration Store connection string (comma-separated) |
| configurationStoreServers= |
| |
| # ZooKeeper session timeout |
| zookeeperSessionTimeoutMs=30000 |
| |
| # Port to use to server binary-proto request |
| servicePort=6650 |
| |
| # Port to use to server binary-proto-tls request |
| servicePortTls=6651 |
| |
| # Port that discovery service listen on |
| webServicePort=8080 |
| |
| # Port to use to server HTTPS request |
| webServicePortTls=8443 |
| |
| # Path for the file used to determine the rotation status for the proxy-instance when responding |
| # to service discovery health checks |
| statusFilePath= |
| |
| ### --- Authentication --- ### |
| |
| # Enable authentication |
| authenticationEnabled=false |
| |
| # Authentication provider name list, which is comma separated list of class names (comma-separated) |
| authenticationProviders= |
| |
| # Enforce authorization |
| authorizationEnabled=false |
| |
| # Authorization provider fully qualified class-name |
| authorizationProvider=org.apache.pulsar.broker.authorization.PulsarAuthorizationProvider |
| |
| # Authentication settings of the proxy itself. Used to connect to brokers |
| brokerClientAuthenticationPlugin= |
| brokerClientAuthenticationParameters= |
| brokerClientTrustCertsFilePath= |
| |
| # Role names that are treated as "super-user", meaning they will be able to do all admin |
| # operations and publish/consume from all topics (comma-separated) |
| superUserRoles= |
| |
| # Forward client authorization Credentials to Broker for re authorization |
| # make sure authentication is enabled for this to take effect |
| forwardAuthorizationCredentials=false |
| |
| # --- RateLimiting ---- |
| # Max concurrent inbound Connections, proxy will reject requests beyond that. Default value is 10,000 |
| maxConcurrentInboundConnections=10000 |
| |
| # Max concurrent outbound Connections, proxy will error out requests beyond that. Default value is 10,000 |
| maxConcurrentLookupRequests=10000 |
| |
| ##### --- TLS --- ##### |
| |
| # Enable TLS in the proxy |
| tlsEnabledInProxy=false |
| |
| # Enable TLS when talking with the brokers |
| tlsEnabledWithBroker=false |
| |
| # Path for the TLS certificate file |
| tlsCertificateFilePath= |
| |
| # Path for the TLS private key file |
| tlsKeyFilePath= |
| |
| # Validates hostname when proxy creates tls connection with broker |
| tlsHostnameVerificationEnabled=false |
| |
| # Specify whether Client certificates are required for TLS |
| # Reject the Connection if the Client Certificate is not trusted. |
| tlsRequireTrustedClientCertOnConnect=false |
| |
| |
| ### --- Deprecated config variables --- ### |
| |
| # Deprecated. Use configurationStoreServers |
| globalZookeeperServers= |
