[rabbitmq-discuss] SSL_TIMEOUT

Wed Sep 18 11:04:32 BST 2013

Hello.

We are experiencing troubles with Java clients connecting to Rabbit over 
SSL. Two problems caused by the very same issue:
* When DNS server takes more than 5 seconds in reverse resolving IP 
address back to name, Rabbit aborts the connection. I assume Java SSL 
layer does that lookup AFTER the TCP connection is already established 
in order to decide which client certificate to provide.
* When Java client is running on a limited processing power hardware, it 
again takes it more than 5 seconds to finish the SSL handshake and 
again, Rabbit server resets the connection.

I saw that reply from Emile which states SSL_TIMEOUT is not configurable 
http://rabbitmq.1065348.n5.nabble.com/Request-Handshake-Timeout-Increase-tt11342.html#a11346
And as I see in the sources, nothing has changed since then.

So my question is - do you have any plans for fixing it in the near future?
Are there any options we can modify it at runtime without rebuilding 
Rabbit? Having custom build server is the least thing we want.

Timeout of 5s is just too short really. 10 works for us but configurable 
would be even better.

Many thanks!
This email is for the use of the intended recipient(s) only.
If you have received this email in error, please notify the sender immediately and then delete it.
If you are not the intended recipient, you must not use, disclose or distribute this email without the
author's prior permission. AlertMe.com Ltd. is not responsible for any personal views expressed
in this message or any attachments that are those of the individual sender.

AlertMe.com Ltd, 30 Station Road, Cambridge, CB1 2RE, UK.
Registered in England, Company number 578 2908, VAT registration number GB 895 9914 42.