1. 程式人生 > >Kafka-Kafka 1.0.0 client 消費者 配置選項 (完整版)

Kafka-Kafka 1.0.0 client 消費者 配置選項 (完整版)

由於大家日常生產開發中,對 kafka 生產者,消費者 可以支援的配置 可能有所困惑,

這裡我們寫一片文章幫助大家答疑解惑。

本文基於  Kafka 的 1.0.0 版本

其實 ,主要的配置選項,可以在以下的包中找到。

<dependency>
    <groupId>org.apache.kafka</groupId>
    <artifactId>kafka-clients</artifactId>
    <version>1.0.0</version>
</dependency>

生產者配置:

  org.apache.kafka.clients.producer.ProducerConfig

消費者配置:

  org.apache.kafka.clients.consumer.ConsumerConfig

生產/ 消費 者配置按照以下方式,進行組織。

line1 : property name

line2: priority

line3 :  type

line4  : default value

line5 :  valid value  (for some type )

line6: english description

line7 : translation

名稱:

優先順序:

型別:

預設值:

合法值:

描述:

解釋:

注意: 受限於篇幅,本篇主要對消費者配置進行講解 !!!

重要屬性預覽

high

  bootstrap.servers 

key.deserializer

  value.deserializer

  fetch.min.bytes

group.id

heartbeat.interval.ms

 session.timeout.ms

medium

  auto.offset.reset


  enable.auto.commit


  max.poll.records


  security.protocol 

low

  auto.commit.interval.ms  

  fetch.max.wait.ms

消費者配置:

高優先順序 

名稱:

  bootstrap.servers

優先順序:

  high

型別:

  list

預設值:

  無

合法值:

  ---

描述:

   A list of host/port pairs to use for establishing the initial connection to the Kafka cluster. The client will make use of all servers irrespective of which servers are specified here for bootstrapping—this list only impacts the initial hosts used to discover the full set of servers. This list should be in the form host1:port1,host2:port2,.... Since these servers are just used for the initial connection to discover the full cluster membership (which may change dynamically), this list need not contain the full set of servers (you may want more than one, though, in case a server is down).

解釋:

  給出一個初始化的 kafka 叢集地址,不必是叢集中的全部節點,(根據發現機制,發現整個叢集),

為了防止 填寫節點 剛好掛掉, 最好填寫多於一個節點

例子:

  127.0.0.1:9092

------------------------------

名稱:

  key.deserializer

優先順序:

  high

型別:

  class

預設值:

  無

合法值:

  ---

描述:

    Deserializer class for key that implements the org.apache.kafka.common.serialization.Deserializer interface.

解釋:

   kafka message 中 key 反序列化實現類,實現 org.apache.kafka.common.serialization.Deserializer 的介面

例子:

 org.apache.kafka.common.serialization.StringDeserializer

-------------------------------------------------------

名稱:

  value.deserializer

優先順序:

  high

型別:

  class

預設值:

 無

合法值:

 ---

描述:

    Deserializer class for value that implements the org.apache.kafka.common.serialization.Deserializer interface.

解釋:

   kafka message 中 value 反序列化實現類,實現 org.apache.kafka.common.serialization.Deserializer 的介面

例子:

org.apache.kafka.common.serialization.StringDeserializer

------------------------------------------------------------

名稱:

  fetch.min.bytes

優先順序:

  high

型別:

  int

預設值:

  1

合法值:

  [0,...]

描述:

  The minimum amount of data the server should return for a fetch request. If insufficient data is available the request will wait for that much data to accumulate before answering the request. The default setting of 1 byte means that fetch requests are answered as soon as a single byte of data is available or the fetch request times out waiting for data to arrive. Setting this to something greater than 1 will cause the server to wait for larger amounts of data to accumulate which can improve server throughput a bit at the cost of some additional latency.

解釋:

  kafka 服務端 至少有多少資料  才返回(按 byte 去計算)。如果服務端 沒有足夠的 資料,會等到超過閾值的資料量 再進行返回。 預設值 1 byte,  意味著 單有 1 byte 資料可以返回時,就返回資料。

將這個值設定為 大於 1 有助於 減少 kafka 服務端 的額外壓力。

------------------------------------------------------------

名稱:

  group.id

優先順序:

  high

型別:

  string

預設值:

 ""

合法值:

 ---

描述:

  A unique string that identifies the consumer group this consumer belongs to. This property is required if the consumer uses either the group management functionality by using subscribe(topic) or the Kafka-based offset management strategy.

解釋:
  一個唯一的字串 標識了 消費者的 分組。如果使用了  通過 提交主題的 group 管理  或者 kafka 偏移量管理策略, 這個屬性都是必須的。

 例子:

  test-group

-------------------------------------------------------

名稱:

  heartbeat.interval.ms

優先順序:

  high

型別:

 int 

預設值:

 3000

合法值:

  ---

描述:

    The expected time between heartbeats to the consumer coordinator when using Kafka's group management facilities. Heartbeats are used to ensure that the consumer's session stays active and to facilitate rebalancing when new consumers join or leave the group. The value must be set lower than session.timeout.ms, but typically should be set no higher than 1/3 of that value. It can be adjusted even lower to control the expected time for normal rebalances.

解釋:

    當使用 kafka 組管理工具,消費者協調者的 心跳確認時間。

心跳用來確認 消費者的會話保持活躍 和   消費者加入,離開消費 group 時 的 kafka 內部調整。

該值必須小於 session.timeout.ms 屬性值,一般來說,不應大於 1/3  session.timeout.ms 值。

該值針對經常性的調整,去設定比 1/3 值 更小的值。

-------------------------------------------------

名稱:

  max.partition.fetch.bytes

優先順序:

  high

型別:

 int

預設值:

  1048576

合法值:

  [0,...]

描述:


     The maximum amount of data per-partition the server will return. Records are fetched in batches by the consumer. If the first record batch in the first non-empty partition of the fetch is larger than this limit, the batch will still be returned to ensure that the consumer can make progress. The maximum record batch size accepted by the broker is defined via message.max.bytes (broker config) or max.message.bytes (topic config). See fetch.max.bytes for limiting the consumer request size.

解釋:

   每個partition 在一次 fetch 最大返回的資料量。記錄 通過 許多批次進行拉取,如果 第一個批次 從 一個非空的 partition 拉取超過該限制的值, 該批次仍會返回記錄 確保 消費者 能夠正常工作。

  broker 一個批次最多能拉取的資料量 通過 以下兩個屬性進行定義,

message.max.bytes (broker 中設定 )

max.message.bytes (topic 中設定 )

See fetch.max.bytes for limiting the consumer request size. , 檢視  fetch.max.bytes 限制 消費者一次拉取的最多資料量

--------------------------------------------

名稱:

  session.timeout.ms

優先順序:

  high

型別:

  int

預設值:

  10000

合法值:

  ---

描述:

  The timeout used to detect consumer failures when using Kafka's group management facility. The consumer sends periodic heartbeats to indicate its liveness to the broker. If no heartbeats are received by the broker before the expiration of this session timeout, then the broker will remove this consumer from the group and initiate a rebalance. Note that the value must be in the allowable range as configured in the broker configuration by group.min.session.timeout.ms and group.max.session.timeout.ms.

解釋:

  當使用kafka group 管理工具時,用來決定 消費超時失敗的時間。 

  消費者週期性的傳送心跳確定,來確保對於 broker 來說,消費者是活躍的。

 如果 在 session 超時之前, broker 沒有收到心跳請求,broker 會移除 該消費者 並 導致一次 調整 rebalance.

 注意:

   該值 必須在 broker 配置的 min.session.timeout.ms , max.session.timeout.ms 之內。

安全性相關屬性 : 

-------------------------------------------------------

名稱:

  ssl.key.password

優先順序:

  high

型別:

  password

預設值:

  null

合法值:

  ---

描述:

    The password of the private key in the key store file. This is optional for client.

解釋:

------------------------------------------------

名稱:

  ssl.keystore.location

優先順序:

  high 

型別:

  string

預設值:

  null

合法值:

  ---

描述:

  The location of the key store file. This is optional for client and can be used for two-way authentication for client.

解釋:

----------------------------------------------

名稱:

  ssl.keystore.password

優先順序:

  high

型別:

  password

預設值:

  null

合法值:

  ---

描述:

  The store password for the key store file. This is optional for client and only needed if ssl.keystore.location is configured.

解釋:
 

--------------------------------------------

名稱:

  ssl.truststore.location

優先順序:

  high

型別:

  string

預設值:

  null

合法值:

  --- 

描述:

  The location of the trust store file.

解釋:

--------------------------------------------------------

名稱:

  ssl.truststore.password    

優先順序:

   high

型別:

  password

預設值:

  null

合法值:

  ---

描述:

      The password for the trust store file. If a password is not set access to the truststore is still available, but integrity checking is disabled.

解釋:
 

---------------------------------

中優先順序

名稱:

  auto.offset.reset 

優先順序:

  medium

型別:

 string

預設值:

  latest

合法值:

  [latest, earliest, none]

描述:

      What to do when there is no initial offset in Kafka or if the current offset does not exist any more on the server (e.g. because that data has been deleted):
  earliest: automatically reset the offset to the earliest offset
  latest: automatically reset the offset to the latest offset
  none: throw exception to the consumer if no previous offset is found for the consumer's group
  anything else: throw exception to the consumer.

解釋:

  當 kafka 中沒有便宜兩個初始值時,採取的策略。 或者 服務端 中 當前偏移量 不在存在 (比如:資料被刪除了)

  earliest : 自動將偏移量設定為 最早的偏移量 

  latest : 自動將便宜裡設定為 最新的額偏移量

  none : 如果之前的偏移量沒有找到,丟擲一個異常

  其他值: 直接丟擲一個異常

-----------------------------------------------

名稱:

  connections.max.idle.ms

優先順序:

  medium

型別:

  long

預設值:

 540000

合法值:

  ---

描述:

  Close idle connections after the number of milliseconds specified by this config.

解釋:

  超過 指定的 ms , 關閉 限制的連結。

--------------------------------

名稱:

  enable.auto.commit

優先順序:

  medium

型別:

  boolean

預設值:

 true

合法值:

 true / false

描述:
    If true the consumer's offset will be periodically committed in the background.

解釋:
  如果設定為 true,  那麼消費者 的 偏移量 會在後臺定期提交。

---------------------------------------

名稱:

  exclude.internal.topics

優先順序:

  medium

型別:

 boolean

預設值:

 true

合法值:

 true / false

描述:

  Whether records from internal topics (such as offsets) should be exposed to the consumer. If set to true the only way to receive records from an internal topic is subscribing to it.

解釋:

 topic 內部的記錄 (例如 偏移量) 是否需要 暴露給消費者。

 如果設定為 true,  從一個內部topic 接受 records 的唯一方式 就是 訂閱該 topic

----------------------------------------------------

名稱:

  fetch.max.bytes

優先順序:

  medium

型別:

  int 

預設值:

  52428800

合法值:

  [0,...]

描述:

    The maximum amount of data the server should return for a fetch request. Records are fetched in batches by the consumer, and if the first record batch in the first non-empty partition of the fetch is larger than this value, the record batch will still be returned to ensure that the consumer can make progress. As such, this is not a absolute maximum. The maximum record batch size accepted by the broker is defined via message.max.bytes (broker config) or max.message.bytes (topic config). Note that the consumer performs multiple fetches in parallel.

解釋:

  一次拉取請求,資料獲取量的最大值。

 消費者 通過許多批次 拉取記錄, 如果 第一個 非空的 partition 的 資料量 比這個值大, 該批次 仍然 會去檢測 消費者 是否能正常工作。 因此,該值不是一個確切的最大值。一個批次 通過 broker 能拉取的最大值 通過  

message.max.bytes( broker config)  或者 max.message.byte (topic.config) 進行設定。

提示:

 comsumer 推薦並行拉取。

---------------------------------------------------------

名稱:

  isolation.level

優先順序:

  medium

型別:

  string

預設值:

  read_uncommitted

合法值:

  [read_committed, read_uncommitted]

描述:

  Controls how to read messages written transactionally. If set to read_committed, consumer.poll() will only return transactional messages which have been committed. If set to read_uncommitted' (the default), consumer.poll() will return all messages, even transactional messages which have been aborted. Non-transactional messages will be returned unconditionally in either mode.

Messages will always be returned in offset order. Hence, in read_committed mode, consumer.poll() will only return messages up to the last stable offset (LSO), which is the one less than the offset of the first open transaction. In particular any messages appearing after messages belonging to ongoing transactions will be withheld until the relevant transaction has been completed. As a result, read_committed consumers will not be able to read up to the high watermark when there are in flight transactions.

Further, when in read_committed the seekToEnd method will return the LSO

解釋:

  控制以何種事務級別去讀取 messages.

  如果設定為  read_committed , consumer.poll() 僅會返回 承諾的  transactional messages

  如果設定為 read_uncommitted (預設值), consumer.poll() 會返回所有的 message, 即使 transactional messages 出現問題。

非事務的訊息 (Non-transactional messages )  在這兩種模式下都會無條件的返回。

  訊息一般都會按照 偏移量序列 返回。

因此:

  在 read_committed 模式下,  consumer.poll()  只會返回 到最後一個穩定的偏移量(LSO) 的 記錄,  該偏移量值比第一個公開的事務的偏移量值要小。 因此,任何在 當前事務 之後出現的記錄 都會被保留,直到相關的 事務完成。

因此, read_committed 模式下的消費者 不能讀取到 flight transactions.中的 直到 high watermark  的記錄。

進一步來說, read_committed 中 seekToEnd 會返回 LSO。

-----------------------------------------------------------

名稱:

  max.poll.interval.ms

優先順序:

  medium

型別:

  int 

預設值:

  300000

合法值:

  [1,...]

描述:

      The maximum delay between invocations of poll() when using consumer group management. This places an upper bound on the amount of time that the consumer can be idle before fetching more records. If poll() is not called before expiration of this timeout, then the consumer is considered failed and the group will rebalance in order to reassign the partitions to another member.

解釋:

    當使用 消費者管理的時候,呼叫 poll() 方法的 最大間隔時長。該值 設定了消費者 拉取更多資料 的 空閒時間的一個上限值。

如果 超過該值,poll() 仍然沒有被呼叫,那麼 cousumer 就會被認為失敗, group 會重新調整 ,將這些 partitions 分配給另一個成員。


--------------------------------------------

名稱:

  max.poll.records

優先順序:

  medium

型別:

  int

預設值:

  500

合法值:

   [1,...]

描述:

   The maximum number of records returned in a single call to poll().

解釋:

 呼叫 poll()  方法,一次最多能返回的  記錄數 (records).

----------------------------------------------

名稱:

  partition.assignment.strategy

優先順序:

  medium

型別:

  class

預設值:

  org.apache.kafka.clients.consumer.RangeAssignor

合法值:

  ---

描述:
    The class name of the partition assignment strategy that the client will use to distribute partition ownership amongst consumer instances when group management is used

解釋:
  當 group management 使用時,多個消費者之間 ,分割槽所有者 的 分配策略的 實現類名

-----------------------------------------------------

名稱:

  receive.buffer.bytes

優先順序:

  medium

型別:

  int 

預設值:

  65536

合法值:

  [-1,...]

描述:

  The size of the TCP receive buffer (SO_RCVBUF) to use when reading data. If the value is -1, the OS default will be used.

解釋:

  當讀取資料時。TCP 接受資料的緩衝池大小 。 當設定為 -1 時,使用系統 OS 預設值。

---------------------------------------------------

名稱:

  request.timeout.ms

優先順序:

  medium

型別:

  int 

預設值:

  305000

合法值:

  [0,...]

描述:
    The configuration controls the maximum amount of time the client will wait for the response of a request. If the response is not received before the timeout elapses the client will resend the request if necessary or fail the request if retries are exhausted.

解釋:

  該配置 配置了客戶端 等待請求 返回的最大等待時長。

  如果客戶端 超過 超時時間還未收到 請求, 客戶端會在需要時重新發起請求,如果 多次請求仍舊失敗,就會失敗。

---------------------------------------------------------------

名稱:

  send.buffer.bytes

優先順序:

  medium

型別:

  int 

預設值:

  131072

合法值:

  [-1,...]

描述:

  The size of the TCP send buffer (SO_SNDBUF) to use when sending data. If the value is -1, the OS default will be used.

解釋:

  當傳送資料時,TCP 傳送的緩衝池大小 (SO_SNDBUF) 。當該值為 -1 時, 使用系統(OS) 預設值。

-----------------------------------------------------------------

安全相關屬性:

名稱:

  sasl.jaas.config

優先順序:

  medium

型別:

  password

預設值:

  null

合法值:

  ---

描述:

    JAAS login context parameters for SASL connections in the format used by JAAS configuration files. JAAS configuration file format is described here. The format for the value is: ' ( = )*;'

解釋:

-------------------------------------------------------------------------

名稱:

  sasl.kerberos.service.name

優先順序:

  medium

型別:

  string

預設值:

  null

合法值:

  ---

描述:
    The Kerberos principal name that Kafka runs as. This can be defined either in Kafka's JAAS config or in Kafka's config.

解釋:

--------------------------------------------------

名稱:

  sasl.mechanism

優先順序:

  medium

型別:

  string

預設值:

  GSSAPI

合法值:

  ---

描述:
    SASL mechanism used for client connections. This may be any mechanism for which a security provider is available. GSSAPI is the default mechanism.

解釋:

-----------------------------------------------------------

名稱:

  security.protocol 

優先順序:

  medium

型別:

  string

預設值:

  PLAINTEXT

合法值:

  PLAINTEXT, SSL, SASL_PLAINTEXT, SASL_SSL.

描述:

  Protocol used to communicate with brokers. Valid values are: PLAINTEXT, SSL, SASL_PLAINTEXT, SASL_SSL.

解釋:

------------------------------------------------------

名稱:

  ssl.enabled.protocols

優先順序:

  medium

型別:

  list 

預設值:

  TLSv1.2,TLSv1.1,TLSv1

合法值:

  ---

描述:

  The list of protocols enabled for SSL connections.

解釋:

------------------------------------------------------------

名稱:  
  ssl.keystore.type

優先順序:

  medium

型別:

 string

預設值:

  JKS

合法值:

  ---

描述:

  The file format of the key store file. This is optional for client.

解釋:

---------------------------------

名稱:

  ssl.protocol

優先順序:

  medium

型別:

  string

預設值:

  TLS

合法值:

  ---

描述:

      The SSL protocol used to generate the SSLContext. Default setting is TLS, which is fine for most cases. Allowed values in recent JVMs are TLS, TLSv1.1 and TLSv1.2. SSL, SSLv2 and SSLv3 may be supported in older JVMs, but their usage is discouraged due to known security vulnerabilities.

解釋:

---------------------------------------------

名稱:

  ssl.provider

優先順序:

  medium

型別:

  string

預設值:

  null

合法值:

  ---

描述:

    The name of the security provider used for SSL connections. Default value is the default security provider of the JVM.

解釋:

--------------------------------------

名稱:

  ssl.truststore.type

優先順序:

  medium

型別:

  string

預設值:

 JKS

合法值:

  ---

描述:

   The file format of the trust store file.

解釋:

-------------------------------------------------

低優先順序

名稱:

  auto.commit.interval.ms

優先順序:

  low

型別:

  int

預設值:

  5000

合法值:

  [0,...]

描述:

  The frequency in milliseconds that the consumer offsets are auto-committed to Kafka if enable.auto.commit is set to true.

解釋:

  當 enable.auto.commit 設定為 true 時。 通過該值設定 consumer 自動提交 offset 給 kafka 的頻率 。 單位 ms 

---------------------------------------------------------

名稱:

   check.crcs

優先順序:

   low

型別:

  boolean

預設值:

  true

合法值:

  true / false 

描述:

  Automatically check the CRC32 of the records consumed. This ensures no on-the-wire or on-disk corruption to the messages occurred. This check adds some overhead, so it may be disabled in cases seeking extreme performance.

解釋:

  自動用 CRC32 演算法 檢測 消費的 記錄 records 的完整性。 這樣 確保 沒有 on-the-wire 或者  on-disk 錯誤 對 訊息 的 影響。

 這種檢測會增加額外的 開銷 overhead  , 所以可以設定為 disable ,在尋求額外的效能提升的場景。 

---------------------------------------------------------------

名稱:

  client.id

優先順序:

  low

型別:

  string

預設值:

  “”

合法值:

  ---

描述:

  An id string to pass to the server when making requests. The purpose of this is to be able to track the source of requests beyond just ip/port by allowing a logical application name to be included in server-side request logging.

解釋:

  當建立請求時,傳給服務端的 一個id 字串。這個字串的目的是為了 除了 ip/ port 之外,用於追蹤的一個邏輯應用名,

這個id 會包含在 server-side 服務端內部的請求日誌中。

---------------------------------------------------------------

名稱:

  fetch.max.wait.ms

優先順序:

  low

型別:

  int

預設值:

  500

合法值:

  [0,...]

描述:

  The maximum amount of time the server will block before answering the fetch request if there isn't sufficient data to immediately satisfy the requirement given by fetch.min.bytes.

解釋:

  如果 當前 沒有給出的 fetch.min.bytes 的足夠資料, 服務端 阻塞 fetch 請求的 最大時長。.

---------------------------------------------------------------

名稱:

  interceptor.classes

優先順序:

  low

型別:

  list

預設值:

  null

合法值:

  ---

描述:

  A list of classes to use as interceptors. Implementing the org.apache.kafka.clients.consumer.ConsumerInterceptor interface allows you to intercept (and possibly mutate) records received by the consumer. By default, there are no interceptors.

解釋:

  一系列用來作為直譯器的類,實現了org.apache.kafka.clients.consumer.ConsumerInterceptor 介面能讓你 解析消費者收到的 (有可能 mutate 變異)的記錄。

預設沒有解析器。

---------------------------------------------------------------

名稱:

  metadata.max.age.ms

優先順序:

  low

型別:

  long

預設值:

  300000

合法值:

  [0,...]

描述:

   The period of time in milliseconds after which we force a refresh of metadata even if we haven't seen any partition leadership changes to proactively discover any new brokers or partitions.

解釋:

  即使 我們我們發現 新的 brokers 或者 partitions,  或者沒發現 parition 領導 發生變化,強制元資料 重新整理的 時間間隔

---------------------------------------------------------------

名稱:

  metric.reporters

優先順序:

  low

型別:

  list

預設值:

  ""

合法值:

  ---

描述:

  A list of classes to use as metrics reporters. Implementing the org.apache.kafka.common.metrics.MetricsReporter interface allows plugging in classes that will be notified of new metric creation. The JmxReporter is always included to register JMX statistics.

解釋:

---------------------------------------------------------------

名稱:

  metrics.num.samples

優先順序:

  low

型別:

  int

預設值:

  2

合法值:

  [1,...]

描述:

  The number of samples maintained to compute metrics.

解釋:

---------------------------------------------------------------

名稱:

  metrics.recording.level

優先順序:

  low

型別:

  string

預設值:

  INFO

合法值:

  [INFO, DEBUG]

描述:

  The highest recording level for metrics.

解釋:

---------------------------------------------------------------

名稱:

  metrics.sample.window.ms

優先順序:

  low

型別:

  long

預設值:

  30000

合法值:

  [0,...]

描述:

  The window of time a metrics sample is computed over.

解釋:

---------------------------------------------------------------

名稱:

  reconnect.backoff.max.ms

優先順序:

  low

型別:

  long

預設值:

  1000

合法值:

  [0,...]

描述:

      The maximum amount of time in milliseconds to wait when reconnecting to a broker that has repeatedly failed to connect. If provided, the backoff per host will increase exponentially for each consecutive connection failure, up to this maximum. After calculating the backoff increase, 20% random jitter is added to avoid connection storms.

解釋:

---------------------------------------------------------------

名稱:

  reconnect.backoff.ms

優先順序:

  low

型別:

  long

預設值:

 50

合法值:

  [0,...]

描述:

  The base amount of time to wait before attempting to reconnect to a given host. This avoids repeatedly connecting to a host in a tight loop. This backoff applies to all connection attempts by the client to a broker.

解釋:

---------------------------------------------------------------

名稱:

  retry.backoff.ms

優先順序:

  low

型別:

  long

預設值:

 100

合法值:

  [0,...]

描述:

      The amount of time to wait before attempting to retry a failed request to a given topic partition. This avoids repeatedly sending requests in a tight loop under some failure scenarios.

解釋:

安全相關屬性

名稱:

  sasl.kerberos.kinit.cmd

優先順序:

  low

型別:
  string

預設值:

  /usr/bin/kinit

合法值:

  ---

描述:

  Kerberos kinit command path.

解釋:

-------------------------------------------

名稱:

  sasl.kerberos.min.time.before.relogin

優先順序:

  low

型別:

  long

預設值:

  60000

合法值:

  ---

描述:

  Login thread sleep time between refresh attempts.

解釋:

---------------------------------------

名稱:

   sasl.kerberos.ticket.renew.jitter

優先順序:

  low

型別:

  double

預設值:

  0.05

合法值:

  ---

描述:

  Percentage of random jitter added to the renewal time.    

解釋:

--------------------------------------- 

名稱:

   sasl.kerberos.ticket.renew.window.factor

優先順序:

  low

型別:

  double

預設值:

  0.8

合法值:

  ---

描述:

  Login thread will sleep until the specified window factor of time from last refresh to ticket's expiry has been reached, at which time it will try to renew the ticket.

解釋:

------------------------------

名稱:

  ssl.cipher.suites

優先順序:

  low 

型別:

  list

預設值:

  null

合法值:

  ---

描述:

    A list of cipher suites. This is a named combination of authentication, encryption, MAC and key exchange algorithm used to negotiate the security settings for a network connection using TLS or SSL network protocol. By default all the available cipher suites are supported.

解釋:

-------------------------------------

名稱:

  ssl.endpoint.identification.algorithm

優先順序:

  low

型別:

  string

預設值:

  null

合法值:

  ---

描述:

  The endpoint identification algorithm to validate server hostname using server certificate

解釋:

---------------------------------------

名稱:

  ssl.keymanager.algorithm

優先順序:

  low

型別:

  string

預設值:

  SunX509

合法值:

  ---

描述:

  The algorithm used by key manager factory for SSL connections. Default value is the key manager factory algorithm configured for the Java Virtual Machine.

解釋:

--------------------------------------------------

名稱:

    ssl.secure.random.implementation

優先順序:

  low

型別:

  string

預設值:

  null

合法值:

  ---

描述:

   The SecureRandom PRNG implementation to use for SSL cryptography operations.

解釋:

--------------------------------------

名稱:

  ssl.trustmanager.algorithm

優先順序:

  low 

型別:

  string

預設值:

  PKIX

合法值:

  ---

描述:

    The algorithm used by trust manager factory for SSL connections. Default value is the trust manager factory algorithm configured for the Java Virtual Machine.

解釋: