Skip to content

Commit

Permalink
Merge pull request #19 from Axway-API-Management-Plus/cassandra_consi…
Browse files Browse the repository at this point in the history
…stency_level

Cassandra consistency level
  • Loading branch information
rathnapandi authored Mar 17, 2021
2 parents d3e12eb + 842dae5 commit c867208
Show file tree
Hide file tree
Showing 4 changed files with 137 additions and 83 deletions.
31 changes: 23 additions & 8 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -71,11 +71,6 @@ $export smtp_manager_url=smtp.axway.com
$export httpbasic_backend=changme
```

- Disable Cassandra SSL
```bash
$export cassandra_disablessl=true
```

- Disable HTTPS Interfaces

```bash
Expand All @@ -95,6 +90,20 @@ $export disablehttp_portname=true
- Radius
```bash
```
### Cassandra

- Disable Cassandra SSL
```bash
$export cassandra_disablessl=true
```

- Setup Cassandra read and write Consistency level

```bash
$export cassandraconsistency_readlevel=QUORUM
$export cassandraconsistency_writelevel=QUORUM
```
Possible consistency level **ONE, TWO, THREE, QUORUM, LOCAL_QUORUM, LOCAL_ONE, ALL**

- Cassandra Certificate reference
```bash
Expand All @@ -119,7 +128,11 @@ PLHu3INlHcXQs3AY0wNBLhL2jBwZ0uwBYK+entFpCgb+Z+RQ+uxs3joYuKEMj6M6
$export cassandraCert_root = /opt/Axway/apigateway/certs/cassandra.pem
```

- x509 Cert - to trust the backend root and intermediate certificates. In order to use the feature, connect to URL filter should be enabled with "trust all Certificates in the certificate store"


### Connect to URL

- Connect to URL One way SSL - to trust the backend root and intermediate certificates. In order to use the feature, connect to URL filter should be enabled with "trust all Certificates in the certificate store"


![connect to URL](images/connect_to_url.png)
Expand Down Expand Up @@ -178,7 +191,7 @@ s2+QnHEKNi5n6eyF81l1X3AGOMp2uUF4CfU=
-----END CERTIFICATE-----"
```
- Connect to URL SSL ( 2-Way SSL / Mutual SSL) Authentication
- Connect to URL 2-Way SSL / Mutual SSL Authentication
To update Connect to URL SSL certificate, there are two environment variables used to set up certificate for SSL Authentication
Expand All @@ -197,7 +210,9 @@ $export connecttourlcertandkey_sslauth=changeit
```
**sslauth** is the name of Connect to URL filter **WARNING**: Do not use blank spaces in Connect to URL filter name.

![secureport Interface](images/connect2urlsslauth.PNG)
![connect_to_url client_auth](images/connect2urlsslauth.PNG)

### Https Listener

- PKCS12 - To update the https listener certificate. There are two environment variables used to set up certificate on Listener interface

Expand Down
2 changes: 2 additions & 0 deletions domain.md
Original file line number Diff line number Diff line change
Expand Up @@ -87,6 +87,8 @@ openssl pkcs12 -export -in signedbyCA.crt -inkey dss-key.pem -out domain.p12 -ch
- Configure environment variable (docker-compose / kubernetes deployment)

```yaml
volumes:
- /Users/rnatarajan/APIM/apigw-emt-scripts-2.1.0-SNAPSHOT/certs/dss/p12:/opt/Axway/apigateway/groups/certs/
# docker-compose.yaml example
environment:
EMT_TOPOLOGY_LOG_ENABLED: 'true'
Expand Down
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@

<groupId>com.axway</groupId>
<artifactId>apim-env-module</artifactId>
<version>1.1.4</version>
<version>1.1.5</version>

<name>apim-env-module</name>
<url>https://axway.com</url>
Expand Down
Loading

0 comments on commit c867208

Please sign in to comment.