Skip to main content
Version: 2.4.0

Gateway Property Config

This paper mainly explains how to configure Apache ShenYu properties on the gateway side.

Property Config#

shenyu:#  httpclient:#    strategy: webClient#    connectTimeout: 45000#    readTimeout: 3000#    writeTimeout: 3000#    wiretap: false#    pool:#      type: ELASTIC#      name: proxy#      maxConnections: 16#      acquireTimeout: 45000#    proxy:#      host:#      port:#      username:#      password:#      nonProxyHostsPattern:#    ssl:#      useInsecureTrustManager: false#      trustedX509Certificates:#      handshakeTimeout:#      closeNotifyFlushTimeout:#      closeNotifyReadTimeout:#      defaultConfigurationType:  file:    enabled: true  cross:    enabled: true  exclude:    enabled: false    paths:      - /favicon.ico  sync:    websocket:      urls: ws://localhost:9095/websocket      allowOrigin: ws://localhost:9195#    zookeeper:#      url: localhost:2181#      sessionTimeout: 5000#      connectionTimeout: 2000#    http:#      url: http://localhost:9095#    nacos:#      url: localhost:8848#      namespace: 1c10d748-af86-43b9-8265-75f487d20c6c#      username:#      password:#      acm:#        enabled: false#        endpoint: acm.aliyun.com#        namespace:#        accessKey:#        secretKey:#    etcd:#      url: http://localhost:2379#    consul:#      url: http://localhost:8500#      waitTime: 1000#      watchDelay: 1000

Property Detail#

shenyu.httpclient config#

This is the HttpClient configuration used to send proxy requests after proxying the Http and SpringCloud protocols in the ShenYu gateway.

NameTypeDefaultRequiredDescription
strategyStringwebcwebClientNoThe strategy of httpClientPlugin
connectTimeoutint45000NoConnection timeout (millisecond), the default value is 45000.
readTimeoutint3000NoRead timeout (millisecond), the default value is 3000.
writeTimeoutint3000NoWrite timeout (millisecond), the default value is 3000.
wiretapBooleanfalseNoEnables wiretap debugging for Netty HttpClient, the default value is false.
poolHttpClient connection pool config
proxyHttpClient proxy config
sslHttpClient ssl config
  • pool config

HttpClient connection pool configuration:

NameTypeDefaultRequiredDescription
typeStringELASTICNoType of pool for HttpClient to use, defaults to ELASTIC.
- ELASTIC: The connection pool can be cached and grown on demand
- FIXED: The connection pool cache and reuse a fixed maximum The number of connections.
- DISABLED: The connection pool will always create a new connection.
nameStringproxyNoThe channel pool map name, defaults to proxy.
maxConnectionsintthe maximum value of 2*CPU and 16NoOnly for type FIXED, the maximum number of connections before starting pending acquisition on existing ones.
the default value is available number of processors*2.
(but with a minimum value of 16)
acquireTimeoutint45000NoOnly for type FIXED, the maximum time in millis to wait for aquiring. the default value is 45000
  • proxy config

Netty HttpClient proxy configuration:

NameTypeDefaultRequiredDescription
hostStringnullNoHostname for proxy configuration of Netty HttpClient.
portStringnullNoPort for proxy configuration of Netty HttpClient.
usernameStringnullNoUsername for proxy configuration of Netty HttpClient.
passwordStringnullNoPassword for proxy configuration of Netty HttpClient.
nonProxyHostsPatternStringnullNoRegular expression (Java) for a configured list of hosts. that should be reached directly, bypassing the proxy
  • SSL config

Gateway routing can support routing to http and https back-end services at the same time. The following is the SSL-related configuration:

NameTypeDefaultRequiredDescription
useInsecureTrustManagerBooleanfalseNoInstalls the netty InsecureTrustManagerFactory. This is insecure and not suitable for production.
trustedX509CertificatesStringNullNoTrusted certificates for verifying the remote endpoint's certificate.(Use , to separate multiple values)
handshakeTimeoutint10000NoSSL handshake timeout. Default to 10000 ms
closeNotifyFlushTimeoutint3000NoSSL close_notify flush timeout. Default to 3000 ms.
closeNotifyReadTimeoutint0NoSSL close_notify read timeout. Default to 0 ms.
defaultConfigurationTypeStringTCPNoThe default ssl configuration type. Defaults to TCP.
- H2: SslProvider will be set depending on OpenSsl.isAlpnSupported(), SslProvider.HTTP2_CIPHERS, ALPN support, HTTP/1.1 and HTTP/2 support.
- TCP: SslProvider will be set depending on OpenSsl.isAvailable()
- NONE: There will be no default configuration
Filter Configuration#
  • shenyu.file config

File filter properties:

NameTypeDefaultRequiredDescription
enabledBooleanfalseNoenable file size filtering
  • shenyu.cross config

Cross filter properties:

NameTypeDefaultRequiredDescription
enabledBooleanfalseNoallow cross-domain requests
  • shenyu.exclude config

Exculde filter properties:

NameTypeDefaultRequiredDescription
enabledBooleanfalseNowhether to enable exclude filter and reject the specified request to pass through the gateway
pathsArraynullYesRequests matching this list can not pass through the gateway (support Path-Matching)
shenyu.sync config#

The Apache ShenYu gateway and the Admin System use data synchronization configurations.

The following properties are configured for data synchronization using websocket :

NameTypeDefaultRequiredDescription
urlsStringnullYesThe websocket server address of Admin, separate multiple addresses with ,

The following properties are configured for data synchronization using zookeeper :

NameTypeDefaultRequiredDescription
urlStringnullYeszookeeper server url
sessionTimeoutintnullYessession timeout (millisecond)
connectionTimeoutintnullYesconnection timeout (millisecond)

The following properties are configured for data synchronization using http long polling :

NameTypeDefaultRequiredDescription
urlStringnullYesAdmin server address

The following properties are configured for data synchronization using nacos :

NameTypeDefaultRequiredDescription
urlStringnullnacos url
namespaceStringnullYesnamespace
usernameStringnullNousername
passwordStringnullNopassword
acmNoaliyun ACM service configuration
  • acm config
NameTypeDefaultRequiredDescription
enabledbooleanfalseNowhether to enable
endpointStringnullNoACM service address
namespaceStringnullNonamespace
accessKeyStringnullNoaccessKey
secretKeyStringnullNosecretKey

The following properties are configured for data synchronization using etcd :

NameTypeDefaultRequiredDescription
urlStringnullYesetcd server url

The following properties are configured for data synchronization using consul :

NameTypeDefaultRequiredDescription
urlStringnullYesconsul server url
waitTimeintnullYesthe timeout period for requesting consul service to pull configuration information (milliseconds)
watchDelayintnullYesSynchronization interval (milliseconds)