Updated on 2026-04-30 GMT+08:00

Configuring SSL of a RocketMQ Instance

Scenario

You can access a RocketMQ instance in plaintext or ciphertext. This section describes how to change the access mode on the console.

RocketMQ instances support the following access modes:

  • SSL: Ciphertext access with high security, but lower performance.
  • PLAINTEXT: Plaintext access with high performance, but lower security.
  • PERMISSIVE: Both ciphertext and plaintext access, depending on the client.

Operation Impact

Table 1 lists the impact of changing the access mode.

The access mode cannot be changed for some existing RocketMQ instances. For details, see the console.

Table 1 Impact of changing the access mode

Server Access Mode Change

Impact

PLAINTEXT > SSL

Services will be interrupted. Change the access mode on the client.

SSL > PLAINTEXT

PLAINTEXT > PERMISSIVE

Connections will be disrupted and need reconnecting. This may affect services temporarily

SSL > PERMISSIVE

PERMISSIVE > PLAINTEXT

  • If data is transmitted in plaintext on the client, services will not be interrupted after the access mode is changed on the server.
  • If data is transmitted in ciphertext on the client, services will be interrupted after the access mode is changed on the server. Change the access mode on the client.

PERMISSIVE > SSL

  • If data is transmitted in ciphertext on the client, services will not be interrupted after the access mode is changed on the server.
  • If data is transmitted in plaintext on the client, services will be interrupted after the access mode is changed on the server. Change the access mode on the client.

Prerequisite

You can change the access mode of a RocketMQ instance only when the instance is in the Running state.

Procedure

  1. Log in to the RocketMQ console.
  2. Click a RocketMQ instance name to go to the instance overview page.
  3. In the Connection area, specify SSL option. The Confirm dialog box is displayed.
  4. Click OK. The Background Tasks page is displayed.

    If the SSL change task is in the Successful state, the instance access mode is changed successfully.

Related Documents