Help Center/ Distributed Message Service for RocketMQ/ User Guide/ Managing Instances/ Configuring SSL of a RocketMQ Instance
Updated on 2024-09-20 GMT+08:00
View PDF
Share

Configuring SSL of a RocketMQ Instance

Scenario

You can access a RocketMQ instance in plaintext or ciphertext. This section describes how to change the access mode on the console.

RocketMQ instances support the following access modes:

  • SSL: Ciphertext access with high security, but lower performance.
  • PLAINTEXT: Plaintext access with high performance, but lower security.
  • PERMISSIVE: Both ciphertext and plaintext access, depending on the client.

SSL is not supported for basic edition RocketMQ 5.x.

Operation Impact

Table 1 lists the impact of changing the access mode.

PERMISSIVE is unavailable for some existing RocketMQ instances. For details, see the console.

Table 1 Impact of changing the access mode

Server Access Mode Change

Impact

PLAINTEXT > SSL
  • Existing instances will restart and services will be interrupted. Change the access mode on the client.
  • New instances will not be restarted but services will be interrupted. Change the access mode on the client.

SSL > PLAINTEXT

PLAINTEXT > PERMISSIVE

Instances will not be restarted and services will not be interrupted.

SSL > PERMISSIVE

PERMISSIVE > PLAINTEXT
  • If data is transmitted in plaintext on the client, instances will not be restarted and services will not be interrupted after the access mode is changed on the server.
  • If data is transmitted in ciphertext on the client, instances will not be restarted but services will be interrupted after the access mode is changed on the server. Change the access mode on the client.

PERMISSIVE > SSL
  • If data is transmitted in ciphertext on the client, instances will not be restarted and services will not be interrupted after the access mode is changed on the server.
  • If data is transmitted in plaintext on the client, instances will not be restarted but services will be interrupted after the access mode is changed on the server. Change the access mode on the client.

Prerequisite

You can change the access mode of a RocketMQ instance only when the instance is in the Running state.

Procedure

  1. Log in to the console.
  2. Click in the upper left corner to select a region.

    Select the region where your RocketMQ instance is located.

  3. Click and choose Middleware > Distributed Message Service for RocketMQ to open the console of DMS for RocketMQ.
  4. Click a RocketMQ instance name to go to the instance details page.
  5. In the Connection area, specify SSL option. The Confirm dialog box is displayed.
  6. Click OK. The Background Tasks page is displayed.

    If the rocketmqConfigPortProtocol task is in the Successful state, the instance access mode is changed successfully.

Parent topic: Managing Instances