/ DOCS
nav-img
Advanced

Configuring SSL of a RocketMQ Instance

Scenario

You can access a RocketMQ instance in plaintext or ciphertext. This section describes how to change the access mode on the console.

RocketMQ instances support the following access modes:

  • SSL: Ciphertext access with high security, but lower performance.
  • PLAINTEXT: Plaintext access with high performance, but lower security.
  • PERMISSIVE: Both ciphertext and plaintext access, depending on the client.

Operation Impact

Table 1 lists the impact of changing the access mode.

PERMISSIVE is unavailable for some existing RocketMQ instances. For details, see the console.

Table 1 Impact of changing the access mode

Server Access Mode Change

Impact

PLAINTEXT > SSL

  • Existing instances will restart and services will be interrupted. Change the access mode on the client.
  • New instances will not be restarted but services will be interrupted. Change the access mode on the client.

SSL > PLAINTEXT

PLAINTEXT > PERMISSIVE

Instances will not be restarted and services will not be interrupted.

SSL > PERMISSIVE

PERMISSIVE > PLAINTEXT

  • If data is transmitted in plaintext on the client, instances will not be restarted and services will not be interrupted after the access mode is changed on the server.
  • If data is transmitted in ciphertext on the client, instances will not be restarted but services will be interrupted after the access mode is changed on the server. Change the access mode on the client.

PERMISSIVE > SSL

  • If data is transmitted in ciphertext on the client, instances will not be restarted and services will not be interrupted after the access mode is changed on the server.
  • If data is transmitted in plaintext on the client, instances will not be restarted but services will be interrupted after the access mode is changed on the server. Change the access mode on the client.

Prerequisite

You can change the access mode of a RocketMQ instance only when the instance is in the Running state.

Procedure

  1. Log in to the console.
  2. Click in the upper left corner to select a region.

    Note

    Select the region where your RocketMQ instance is located.

  3. Click and choose Application > Distributed Message Service for RocketMQ to open the console of DMS for RocketMQ.
  4. Click a RocketMQ instance name to go to the instance details page.
  5. In the Connection area, specify SSL option. The Confirm dialog box is displayed.
  6. Click OK. The Background Tasks page is displayed.

    If the rocketmqConfigPortProtocol task is in the Successful state, the instance access mode is changed successfully.

Parent topic: Managing Instances
Предыдущая статья
Exporting Instance Information
Следующая статья
Viewing Background Tasks
Была ли эта статья полезна?
Поддержка Юридические документы
© 2025 Cloud.ru