Project: BFE (Orchestration & Management / Service Proxy)
File: bfe.conf.md

bfe.conf is the core configuration file of BFE. | Config Item | Description | | -- | | | Basic.HttpPort | Integer<br>Listen port for HTTP<br>Default 8080 | | Basic.HttpsPort | Integer<br>Listen port for HTTPS<br>Default 8443 | | Basic.MonitorPort | Integer<br>Listen port for monitor<br>Default 8421 | | Basic.MonitorEnabled | Boolean<br>If false, monitor server is disabled<br>Default True | | Basic.MaxCpus | Integer<br>Max number of CPUs to use (0 to use all CPUs)<br>Default 0 | | Basic.Layer4LoadBalancer | String<br>Type of layer-4 load balancer (PROXY/NONE)<br>Default NONE | | Basic.TlsHandshakeTimeout | Integer<br>TLS handshake timeout, in seconds<br>Default 30 | | Basic.ClientReadTimeout | Integer<br>Read timeout of communicating with http client, in seconds<br>Default 60 | | Basic.ClientWriteTimeout | Integer<br>Write timeout of communicating with http client, in seconds<br>Default 60 | | Basic.KeepAliveEnabled | Boolean<br>If false, HTTP Keep-Alive is disabled<br>Default True | | Basic.GracefulShutdownTimeout | Integer<br>Timeout for graceful shutdown (maximum 300 sec)<br>Default 10 | | Basic.MaxHeaderBytes | Integer<br>Max length of request header, in bytes<br>Default 10485 | | Basic.MaxHeaderUriBytes | Integer<br>Max length of request URI, in bytes<br>Default 8192 | | Basic.HostRuleConf | String<br>Path of <br>Default serverdataconf/host_rule.data | | Basic.VipRuleConf | String<br>Path of <br>Default serverdataconf/vip_rule.data | | Basic.RouteRuleConf | String<br>Path of <br>Default serverdataconf/route_rule.data | | Basic.ClusterConf | String<br>Path of <br>Default serverdataconf/cluster_conf.data | | Basic.GslbConf | String<br>Path of <br>Default cluster_conf/gslb.data | | Basic.ClusterTableConf | String<br>Path of <br>Default clusterconf/clustertable.data | | Basic.NameConf | String<br>Path of <br>Default serverdataconf/name_conf.data | | Basic.Modules | String<br>Enabled modules<br>Default "" | | Basic.MonitorInterval | Integer<br>Interval for get diff of proxy-state<br>Default 20 | | Basic.DebugServHttp | Boolean<br>Debug flag for ServerHttp<br>Default False | | Basic.DebugBfeRoute | Boolean<br>Debug flag for BfeRoute<br>Default False | | Basic.DebugBal | Boolean<br>Debug flag for Bal<br>Default False | | Basic.DebugHealthCheck | Boolean<br>Debug flag for HealthCheck<br>Default False | | Config Item | Description | | | - | | HttpsBasic.ServerCertConf | String<br>Path of <br>Default tlsconf/servercert_conf.data | | HttpsBasic.TlsRuleConf | String<br>Path of <br>Default

| | HttpsBasic.CipherSuites | String<br>CipherSuites preference settings<br>Default | | HttpsBasic.CurvePreferences | String<br>Curve preference settings<br>Default CurveP256 | | HttpsBasic.EnableSslv2ClientHello | Boolean<br>Enable Sslv2ClientHello for compatible with ancient sslv3 client<br>Default True | | HttpsBasic.ClientCABaseDir | String<br>Base directory of client ca certificates <br>Note: filename suffix of ca certificate must be ".crt"<br>Default tlsconf/clientca | | SessioCache.SessionCacheDisabled | Boolean<br>Disable tls session cache or not<br>Default True | | SessioCache.Servers | String<br>Address of cache server<br>Default "" | | SessioCache.KeyPrefix | String<br>Prefix for cache key<br>Default bfe | | SessioCache.ConnectTimeout | Integer<br>Connection timeout (ms) <br>Default 50 | | SessioCache.ReadTimeout | Integer<br>Read timeout of connection with redis server (ms)<br>Default 50 | | SessioCache.WriteTimeout | Integer<br>Write timeout of connection with redis server (ms)<br>Default 50 | | SessioCache.MaxIdle | Integer<br>Max idle connections in connection pool<br>Default 20 | | SessioCache.SessionExpire | Integer<br>Expire time for tls session state (second)<br>Default 3600 | | SessionTicket.SessionTicketsDisabled | Boolean<br>Disable tls session ticket or not<br>Default True | | SessionTicket.SessionTicketKeyFile | String<br>Path of <br>Default tlsconf/sessionticket_key.data | ```ini [Server] HttpPort = 8080 HttpsPort = 8443 MonitorPort = 8421 MaxCpus = 0 Layer4LoadBalancer = "" TlsHandshakeTimeout = 30 ClientReadTimeout = 60 ClientWriteTimeout = 60 KeepAliveEnabled = true GracefulShutdownTimeout = 10 MaxHeaderBytes = 1048576 MaxHeaderUriBytes = 8192 HostRuleConf = serverdataconf/host_rule.data VipRuleConf = serverdataconf/vip_rule.data RouteRuleConf = serverdataconf/route_rule.data ClusterConf = serverdataconf/cluster_conf.data NameConf = serverdataconf/name_conf.data ClusterTableConf = clusterconf/clustertable.data GslbConf = cluster_conf/gslb.data Modules = modtrustclientip Modules = mod_block Modules = mod_header Modules = mod_rewrite Modules = mod_redirect Modules = mod_logid MonitorInterval = 20 DebugServHttp = false DebugBfeRoute = false DebugBal = false DebugHealthCheck = false [HttpsBasic] ServerCertConf = tlsconf/servercert_conf.data TlsRuleConf = tlsconf/tlsrule_conf.data CipherSuites=TLSECDHERSAWITHAES128GCMSHA256|TLSECDHERSAWITHCHACHA20POLY1305_SHA256 CipherSuites=TLSECDHERSAWITHRC4128SHA CipherSuites=TLSECDHERSAWITHAES128CBC_SHA CipherSuites=TLSECDHERSAWITHAES256CBC_SHA CipherSuites=TLSRSAWITHRC4128_SHA CipherSuites=TLSRSAWITHAES128CBCSHA CipherSuites=TLSRSAWITHAES256CBCSHA CurvePreferences=CurveP256 EnableSslv2ClientHello = true ClientCABaseDir = tlsconf/clientca [SessionCache] SessionCacheDisabled = true Servers = "example.redis.cluster" KeyPrefix = "bfe" ConnectTimeout = 50 ReadTimeout = 50 WriteTimeout = 50 MaxIdle = 20 SessionExpire = 3600 [SessionTicket] SessionTicketsDisabled = true SessionTicketKeyFile = tlsconf/sessionticket_key.data ```