Encrypted PE connections properties for domains and instances

Use the domain.transportSecurityType and instance.transportSecurityType properties to enable or disable encrypted connections between processing elements (PEs). By default, connections between PEs are encrypted.

The transportSecurityType properties support the following Transport Layer Security (TLS) cryptographic protocols:

  • TLSv1.3 - For TLS 1.3
  • TLSv1.2 - For TLS 1.2
  • none - For no encryption

The domain.transportSecurityType property is set to TLSv1.3 by default. Teracloud® Streams instances will use the value specified by the instance.transportSecurityType property if set, or else fall back to the value of the domain.transportSecurityType property.

Notes: TLS 1.3 or later is recommended for Teracloud® Streams.

To display the value of the instance.transportSecurityType property for an instance, use the streamtool getproperty command. To set this property for an instance, use the streamtool setproperty command.

The following example specifies that TLS 1.3 or later is used to encrypt connections between PEs:
streamtool setproperty instance.transportSecurityType=TLSv1.3
The following example shows how to disable encryption:
streamtool setproperty instance.transportSecurityType=none
Note: If Teracloud® Streams cannot establish a connection with the specified protocol, check the PE and processing element container service (PEC) logs. The following examples are typical causes of failure to connect errors:
  • The openssl RPM is not installed. This RPM is required for an encrypted connection. Ensure that you install the version of the openssl RPM that is required by Teracloud® Streams and checked by the dependency checker script.

    In this case, the PEC crashes with an informational message. If you run the streamtool lspes command, the PE is in Stopped state.

  • A network failure occurs.

    In this case, Teracloud® Streams continues to retry the connection until it succeeds.

  • The target PE does not authenticate with the proper security protocol.

    In this case, Teracloud® Streams continues to retry the connection until it succeeds.