...

Text file src/github.com/letsencrypt/boulder/test/proxysql/proxysql.cnf

Documentation: github.com/letsencrypt/boulder/test/proxysql

     1datadir = "/var/lib/proxysql";
     2errorlog = "/test/proxysql/proxysql.log";
     3admin_variables =
     4{
     5	# https://proxysql.com/documentation/global-variables/admin-variables Note
     6	# that while admin variables are documented with an 'admin-' prefix, they
     7	# are specified in the configuration with the prefix stripped.
     8	mysql_ifaces = "0.0.0.0:6032";
     9	# admin:admin is only used for local connections. For remote connections,
    10	# use radmin:radmin
    11	admin_credentials = "admin:admin;radmin:radmin";
    12	web_enabled = "true";
    13	# Web UI is disabled by default.
    14	web_port = 6080;
    15	# These are the credentials used for the web interface.
    16	stats_credentials = "stats:stats";
    17	debug = True;
    18};
    19mysql_variables =
    20{
    21	threads = 4;
    22	max_connections = 10240;
    23	have_compress = True;
    24	poll_timeout = 2000;
    25	interfaces = "0.0.0.0:6033";
    26	stacksize = 1048576;
    27	max_allowed_packet = 16777216;
    28	# Allow up to 20 seconds to find a server, to limit how many failures
    29	# Boulder sees when we do a primary swap
    30	connect_timeout_server = 20000;
    31	connect_timeout_server_max = 20000;
    32	monitor_username = "proxysql";
    33	monitor_password = "";
    34	monitor_history = 600000;
    35	monitor_connect_interval = 60000;
    36	monitor_ping_interval = 10000;
    37	monitor_read_only_interval = 1000;
    38	monitor_read_only_timeout = 500;
    39	monitor_writer_is_also_reader = False;
    40	commands_stats = True;
    41	sessions_sort = True;
    42	connect_retries_on_failure = 10;
    43	# Keep 90% of configured connections open.
    44	free_connections_pct = 90;
    45	connection_warming = True;
    46	# If mysql_query_rules are marked log=1, they will be logged here. If unset,
    47	# no queries are logged.
    48	# eventslog_filename="/test/proxysql/events.log"
    49	eventslog_filesize = 104857600;
    50	eventslog_default_log = 1;
    51	# The audit logs, if unset, are not logged. If set, every connection gets
    52	# logged. Given Boulder's connection strategy, this can be noisy.
    53	# auditlog_filename="/test/proxysql/audit.log"
    54	auditlog_filesize = 104857600;
    55};
    56mysql_servers =
    57(
    58	{
    59		address = "boulder-mysql";
    60		port = 3306;
    61		hostgroup = 0;
    62		max_connections = 100;
    63		max_latency_ms = 200;
    64	}
    65);
    66mysql_users =
    67(
    68	{
    69		username = "root";
    70	},
    71	{
    72		username = "policy";
    73	},
    74	{
    75		username = "sa";
    76	},
    77	{
    78		username = "sa_ro";
    79	},
    80	{
    81		username = "ocsp_resp";
    82	},
    83	{
    84		username = "revoker";
    85	},
    86	{
    87		username = "importer";
    88	},
    89	{
    90		username = "mailer";
    91	},
    92	{
    93		username = "cert_checker";
    94	},
    95	{
    96		username = "test_setup";
    97	},
    98	{
    99		username = "badkeyrevoker";
   100	},
   101	{
   102		username = "incidents_sa";
   103	}
   104);
   105mysql_query_rules =
   106(
   107	{
   108		rule_id = 1;
   109		active = 1;
   110		match_digest = ".";
   111		log = 0;
   112		apply = 0;
   113	},
   114	{
   115		rule_id = 10;
   116		username = "sa";
   117		timeout = 4900;
   118	},
   119	{
   120		rule_id = 11;
   121		username = "sa_ro";
   122		timeout = 4900;
   123	},
   124	{
   125		rule_id = 16;
   126		username = "badkeyrevoker";
   127		timeout = 3600000;
   128	},
   129	{
   130		rule_id = 17;
   131		username = "mailer";
   132		timeout = 1800000;
   133	},
   134	{
   135		rule_id = 18;
   136		username = "ocsp_resp";
   137		timeout = 4900;
   138	}
   139);
   140scheduler =
   141(
   142
   143);

View as plain text