1
0
mirror of https://github.com/taigrr/nats.docs synced 2025-01-18 04:03:23 -08:00
nats.docs/leafnodes/leafnode_conf.md
R.I.Pienaar 3fbc6e620e clarify leafnodes
This corrects a few config item key names and shows the key names
as lowercase as they would appear in the actual config

Also use `nats-leaf` as shown in the tutorial section on leaf nodes

server.LeafNodeOpts has no `name` and I can't find it in parseLeafNodes
2019-07-02 16:15:49 +02:00

1.9 KiB

leafnodes Configuration Block

Property Description
advertise Hostport <host>:<port> to advertise to other gateways.
authorization Authorization block (same as other nats-server authorization configuration).
host Interface where the gateway will listen for incoming leafnode connections.
listen Combines host and port as <host>:<port>
no_advertise if true the leafnode shouldn't be advertised.
port Port where the leafnode will listen for incoming leafnode connections.
remotes List of remote entries specifying servers where leafnode client connection can be made.
tls TLS configuration block (same as other nats-server tls configuration).

LeafNode remotes Entry Block

Property Description
url Leafnode URL (URL protocol should be nats-leaf).
account Account public key identifying the leafnode. Account must be defined locally.
credentials Credential file for connecting to the leafnode server.
tls A TLS configuration block. Leafnode client will use specified TLS certificates when connecting/authenticating.

tls Configuration Block

Property Description
cert_file TLS certificate file.
key_file TLS certificate key file.
ca_file TLS certificate authority file.
insecure Skip certificate verification.
verify If true, require and verify client certificates.
verify_and_map If true, require and verify client certificates and use values map certificate values for authentication purposes.
cipher_suites When set, only the specified TLS cipher suites will be allowed. Values must match golang version used to build the server.
curve_preferences List of TLS cypher curves to use in order.
timeout TLS handshake timeout in fractional seconds.