Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id BD522200B59 for ; Mon, 8 Aug 2016 16:00:20 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id BBCFE160A77; Mon, 8 Aug 2016 14:00:20 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id BDCC7160A91 for ; Mon, 8 Aug 2016 16:00:18 +0200 (CEST) Received: (qmail 17819 invoked by uid 500); 8 Aug 2016 14:00:18 -0000 Mailing-List: contact commits-help@qpid.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@qpid.apache.org Delivered-To: mailing list commits@qpid.apache.org Received: (qmail 17748 invoked by uid 99); 8 Aug 2016 14:00:17 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 08 Aug 2016 14:00:17 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id BEA7BDFCB8; Mon, 8 Aug 2016 14:00:17 +0000 (UTC) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: gmurthy@apache.org To: commits@qpid.apache.org Date: Mon, 08 Aug 2016 14:00:18 -0000 Message-Id: <1c73b784c2d94df581cd069d44038519@git.apache.org> In-Reply-To: References: X-Mailer: ASF-Git Admin Mailer Subject: [2/7] qpid-site git commit: NO-JIRA - Updated qpid-dispatch-master documentation archived-at: Mon, 08 Aug 2016 14:00:20 -0000 http://git-wip-us.apache.org/repos/asf/qpid-site/blob/3cbe9ebf/input/releases/qpid-dispatch-master/index.md ---------------------------------------------------------------------- diff --git a/input/releases/qpid-dispatch-master/index.md b/input/releases/qpid-dispatch-master/index.md index 775e7a4..685fc17 100644 --- a/input/releases/qpid-dispatch-master/index.md +++ b/input/releases/qpid-dispatch-master/index.md @@ -27,7 +27,7 @@ Code and documentation found here may be unstable, incorrect, or incomplete. For a smoother experience, see the [current stable release]({{current_dispatch_release_url}}/index.html). -This content was generated at 15:45 on Thursday, 30 June 2016. +This content was generated at 09:51 on Monday, 08 August 2016. http://git-wip-us.apache.org/repos/asf/qpid-site/blob/3cbe9ebf/input/releases/qpid-dispatch-master/qdmanage.8.html.in ---------------------------------------------------------------------- diff --git a/input/releases/qpid-dispatch-master/qdmanage.8.html.in b/input/releases/qpid-dispatch-master/qdmanage.8.html.in index 82a43f8..576260c 100644 --- a/input/releases/qpid-dispatch-master/qdmanage.8.html.in +++ b/input/releases/qpid-dispatch-master/qdmanage.8.html.in @@ -1,52 +1,76 @@ -

NAME

qdmanage - - management client to control or query qdrouterd(8) -

SYNOPSIS

qdmanage [OPTIONS] OPERATION [ARGUMENTS]

DESCRIPTION

An AMQP management client for use with qdrouterd. Sends AMQP management +

SYNOPSIS

qdmanage [OPTIONS] OPERATION [ARGUMENTS]

DESCRIPTION

An AMQP management client for use with qdrouterd. Sends AMQP management operations requests and prints the response in JSON format. This is a generic AMQP management tool and can be used with any standard AMQP -managed endpoint, not just with qdrouter.

OPTIONS

-h, --help -: show this help message and exit

--version -: Print version and exit.

--type=TYPE -: Type of entity to operate on.

--name=NAME -: Name of entity to operate on.

--identity=ID -: Identity of entity to operate on.

--indent=INDENT -: Pretty-printing indent. -1 means don’t pretty-print (default 2)

--stdin -: Read attributes as JSON map or list of maps from stdin.

--body=BODY -: JSON value to use as body of a non-standard operation call.

--properties=PROPERTIES -: JSON map to use as properties for a non-standard operation call.

Connection Options

-b URL, --bus=URL -: URL of the messaging bus to connect to (default 0.0.0.0)

-r ROUTER-ID, --router=ROUTER-ID -: Router to be queried

-t SECS, --timeout=SECS -: Maximum time to wait for connection in seconds (default 5)

--ssl-certificate=CERT -: Client SSL certificate (PEM Format)

--ssl-key=KEY -: Client SSL private key (PEM Format)

--ssl-trustfile=TRUSTED-CA-DB -: Trusted Certificate Authority Database file (PEM Format)

--ssl-password=PASSWORD -: Certificate password, will be prompted if not specifed.

OPERATIONS

-query [ATTR…] +managed endpoint, not just with qdrouter.

OPTIONS

-h, --help +: show this help message and exit

--version +: Print version and exit.

--type=TYPE +: Type of entity to operate on.

--name=NAME +: Name of entity to operate on.

--identity=ID +: Identity of entity to operate on.

--indent=INDENT +: Pretty-printing indent. -1 means don’t pretty-print

--stdin +: Read attributes as JSON map or list of maps from

--body=BODY +: JSON value to use as body of a non-standard operation

--properties=PROPERTIES +: JSON map to use as properties for a non-standard operation call.

Connection Options

-b URL, --bus=URL +: URL of the messaging bus to connect to (default 0.0.0.0)

-r ROUTER-ID, --router=ROUTER-ID +: Router to be queried

-t SECS, --timeout=SECS +: Maximum time to wait for connection in seconds (default 5)

--ssl-certificate=CERT +: Client SSL certificate (PEM Format)

--ssl-key=KEY +: Client SSL private key (PEM Format)

--ssl-trustfile=TRUSTED-CA-DB +: Trusted Certificate Authority Database file (PEM Format)

--ssl-password=PASSWORD +: Certificate password, will be prompted if not specifed.

--ssl-password-file=SSL-PASSWORD-FILE +: Certificate password, will be prompted if not specifed.

--sasl-mechanisms=SASL-MECHANISMS +: Allowed sasl mechanisms to be supplied during the sasl handshake.

--sasl-username=SASL-USERNAME +: User name for SASL plain authentication

--sasl-password=SASL-PASSWORD +: Password for SASL plain authentication

--sasl-password-file=SASL-PASSWORD-FILE +: Password for SASL plain authentication

--ssl-disable-peer-name-verify +: Disables SSL peer name verification. WARNING - This option is insecure and must not be used in production environments

OPERATIONS

+query [ATTR…]

@@ -56,8 +80,8 @@ managed endpoint, not just with qdrouter.

listed.

-create [ATTR=VALUE…] +

+create [ATTR=VALUE…]

@@ -67,7 +91,7 @@ managed endpoint, not just with qdrouter.

multiple entities.

+

read

@@ -76,8 +100,8 @@ managed endpoint, not just with qdrouter.

--identity options.

-update [ATTR=VALUE…] +

+update [ATTR=VALUE…]

@@ -87,7 +111,7 @@ managed endpoint, not just with qdrouter.

update a single entity, or a JSON list of maps to update multiple entities.

+

delete

@@ -95,8 +119,8 @@ managed endpoint, not just with qdrouter.

Delete an entity specified by the --name or --identity options.

-get-types [TYPE] +

+get-types [TYPE]

@@ -104,8 +128,8 @@ managed endpoint, not just with qdrouter.

types.

-get-operations [TYPE] +

+get-operations [TYPE]

@@ -113,8 +137,8 @@ managed endpoint, not just with qdrouter.

types.

-get-attributes [TYPE] +

+get-attributes [TYPE]

@@ -122,8 +146,8 @@ managed endpoint, not just with qdrouter.

types.

-get-annotations [TYPE] +

+get-annotations [TYPE]

@@ -131,7 +155,7 @@ managed endpoint, not just with qdrouter.

types.

+

get-mgmt-nodes

@@ -139,8 +163,8 @@ managed endpoint, not just with qdrouter.

List all other known management nodes connected to this one.

-get-json-schema [INDENT] +

+get-json-schema [INDENT]

@@ -148,18 +172,22 @@ managed endpoint, not just with qdrouter.

formatted output.

-get-log [INDENT] +

+get-log [INDENT]

Get recent log entries from the router.

FILES

+

FILES

/usr/local/share/doc/qpid-dispatch/qdrouter.json

@@ -167,7 +195,7 @@ managed endpoint, not just with qdrouter.

Management schema for qdrouterd.

+

/usr/local/share/doc/qpid-dispatch/qdrouter.json.readme.txt

@@ -175,28 +203,43 @@ managed endpoint, not just with qdrouter.

Explanation of the management schema.

EXAMPLES

Show the logging configuration

+ + + +

EXAMPLES

Show the logging configuration

qdmanage query --type=log

Enable debug and higher log messages by default:

+ +

Enable debug and higher log messages by default:

qdmanage update name=log/DEFAULT enable=debug+

Enable trace log messages only for the MESSAGE module and direct MESSAGE logs to the file "test.log"

+ +

Enable trace log messages only for the MESSAGE module and direct MESSAGE logs to the file "test.log"

qdmanage update name=log/MESSAGE enable=trace output=test.log

Set MESSAGE logging back to the default

+ +

Set MESSAGE logging back to the default

qdmanage update name=log/MESSAGE enable=default

Disable MESSAGE logging

+ +

Disable MESSAGE logging

qdmanage update name=log/MESSAGE enable=none

NAME

qdrouterd - - routes AMQP messages. -

SYNOPSIS

qdrouterd [OPTIONS]

DESCRIPTION

The Qpid Dispatch router (qdrouterd) is a network daemon that directs +

SYNOPSIS

qdrouterd [OPTIONS]

DESCRIPTION

The Qpid Dispatch router (qdrouterd) is a network daemon that directs AMQP 1.0 messages between endpoints, such as messaging clients and -servers.

OPTIONS

-c, --config=PATH (/usr/local/etc/qpid-dispatch/qdrouterd.conf) -: Load configuration from file at PATH

-I, --include=PATH (/usr/local/lib/qpid-dispatch/python) -: Location of Dispatch’s Python library

-d, --daemon -: Run process as a SysV-style daemon

-P, --pidfile -: If daemon, the file for the stored daemon pid

-U, --user -: If daemon, the username to run as

-h, --help -: Print this help

FILES

+servers.

OPTIONS

-c, --config=PATH (/usr/local/etc/qpid-dispatch/qdrouterd.conf) +: Load configuration from file at PATH

-I, --include=PATH (/usr/local/lib/qpid-dispatch/python) +: Location of Dispatch’s Python library

-d, --daemon +: Run process as a SysV-style daemon

-P, --pidfile +: If daemon, the file for the stored daemon pid

-U, --user +: If daemon, the username to run as

-h, --help +: Print this help

FILES

/usr/local/etc/qdrouterd.conf

@@ -31,7 +41,13 @@ servers.

Configuration flie.

NAME

qdrouterd.conf - - configuration file for the dispatch router. -

SYNOPSIS

Provides the initial configuration when qdrouterd(8) starts. The configuration -of a running router can be modified using qdmanage(8).

DESCRIPTION

The configuration file is made up of sections with this syntax:

SYNOPSIS

Provides the initial configuration when qdrouterd(8) starts. The configuration +of a running router can be modified using qdmanage(8).

DESCRIPTION

The configuration file is made up of sections with this syntax:

sectionName {
     attributeName: attributeValue
     attributeName: attributeValue
     ...
 }

For example you can define a router using the router section

+ +

For example you can define a router using the router section

router {
     mode: standalone
     id: Router.A
     ...
 }

or define a listener using the listener section

+ +

or define a listener using the listener section

listener {
     host: 0.0.0.0
     port: 20102
     saslMechanisms: ANONYMOUS
     ...
 }

or define a connector using the connector section

+ +

or define a connector using the connector section

connector {
     role: inter-router
     host: 0.0.0.0
@@ -40,11 +46,12 @@ of a running router can be modified using qdmanage(8).
     saslMechanisms: ANONYMOUS
     ...
 }

An sslProfile section with SSL credentials can be included in multiple listener or connector entities. Here’s an example, note -how the sslProfile attribute of listener sections references the name -attribute of sslProfile sections.

+ +

An sslProfile section with SSL credentials can be included in multiple listener or connector entities. Here’s an example, note +how the sslProfile attribute of listener sections references the name +attribute of sslProfile sections.

sslProfile {
     name: my-ssl
     certDb: ca-certificate-1.pem
@@ -58,949 +65,948 @@ listener {
     port: 20102
     saslMechanisms: ANONYMOUS
 }

Configuration Sections

sslProfile

Attributes for setting TLS/SSL configuration for connections.

Used by: listener, connector.

-name (string) + + + +
+
Configuration Sections
+
+
+
router
+
Tracks peer routers and computes routes to destinations.
+
+
+id (string)

- name of the sslProfile -
-
-
-certDb (path) -
-
-
- The absolute path to the database that contains the public certificates of trusted certificate authorities (CA). -
-
-
-certFile (path) -
-
-
- The absolute path to the file containing the PEM-formatted public certificate to be used on the local end of any connections using this profile. + Router’s unique identity. One of id or routerId is required. The router will fail to start without id or routerId

-
-keyFile (path) +
+mode (One of [standalone, interior], default=standalone)

- The absolute path to the file containing the PEM-formatted private key for the above certificate. + In standalone mode, the router operates as a single component. It does not participate in the routing protocol and therefore will not cooperate with other routers. In interior mode, the router operates in cooperation with other interior routers in an interconnected network.

-
-passwordFile (path) +
+helloInterval (integer, default=1)

- If the above private key is password protected, this is the absolute path to a file containing the password that unlocks the certificate key. + Interval in seconds between HELLO messages sent to neighbor routers.

-
-password (string) +
+helloMaxAge (integer, default=3)

- An alternative to storing the password in a file referenced by passwordFile is to supply the password right here in the configuration file. This option can be used by supplying the password in the password option. Don’t use both password and passwordFile in the same profile. + Time in seconds after which a neighbor is declared lost if no HELLO is received.

-
-uidFormat (string) +
+raInterval (integer, default=30)

- A list of x509 client certificate fields that will be used to build a string that will uniquely identify the client certificate owner. For e.g. a value of cou indicates that the uid will consist of c - common name concatenated with o - organization-company name concatenated with u - organization unit; or a value of o2 indicates that the uid will consist of o (organization name) concatenated with 2 (the sha256 fingerprint of the entire certificate) . Allowed values can be any combination of c( ISO3166 two character country code), s(state or province), l(Locality; generally - city), o(Organization - Company Name), u(Organization Unit - typically certificate type or brand), n(CommonName - typically a user name for client certificates) and 1(sha1 certificate fingerprint, as displayed in the fingerprints section when looking at a certificate with say a web browser is the hash of the entire certificate) and 2 (sha256 certifi cate fingerprint) and 5 (sha512 certificate fingerprint). + Interval in seconds between Router-Advertisements sent to all routers in a stable network.

-
-displayNameFile (string) +
+raIntervalFlux (integer, default=4)

- The absolute path to the file containing the unique id to dispay name mapping + Interval in seconds between Router-Advertisements sent to all routers during topology fluctuations.

-
-
container
-
(DEPRECATED)Attributes related to the AMQP container. This entity has been deprecated. Use the router entity instead.
-
-
-containerName (string) +
+remoteLsMaxAge (integer, default=60)

- The name of the AMQP container. If not specified, the container name will be set to a value of the container’s choosing. The automatically assigned container name is not guaranteed to be persistent across restarts of the container. + Time in seconds after which link state is declared stale if no RA is received.

-
-workerThreads (integer, default=4) +
+workerThreads (integer, default=4)

The number of threads that will be created to process message traffic and other application work (timers, non-amqp file descriptors, etc.) .

-
-debugDump (path) +
+debugDump (path)

A file to dump debugging information that can’t be logged normally.

-
-saslConfigPath (path) +
+saslConfigPath (path)

Absolute path to the SASL configuration file.

-
-saslConfigName (string) +
+saslConfigName (string, default=qdrouterd)

- Name of the SASL configuration. This string + .conf is the name of the configuration file. + Name of the SASL configuration. This string + .conf is the name of the configuration file.

-
-
router
-
Tracks peer routers and computes routes to destinations.
-
-
-routerId (string) +
+routerId (string)

(DEPRECATED) Router’s unique identity. This attribute has been deprecated. Use id instead

-
-id (string) +
+mobileAddrMaxAge (integer, default=60)

- Router’s unique identity. One of id or routerId is required. The router will fail to start without id or routerId -
-
-
-mode (One of [standalone, interior], default=standalone) -
-
-
- In standalone mode, the router operates as a single component. It does not participate in the routing protocol and therefore will not cooperate with other routers. In interior mode, the router operates in cooperation with other interior routers in an interconnected network. -
-
-
-helloInterval (integer, default=1) -
-
-
- Interval in seconds between HELLO messages sent to neighbor routers. -
-
-
-helloMaxAge (integer, default=3) -
-
-
- Time in seconds after which a neighbor is declared lost if no HELLO is received. -
-
-
-raInterval (integer, default=30) -
-
-
- Interval in seconds between Router-Advertisements sent to all routers in a stable network. -
-
-
-raIntervalFlux (integer, default=4) -
-
-
- Interval in seconds between Router-Advertisements sent to all routers during topology fluctuations. + (DEPRECATED) This value is no longer used in the router.

-
-remoteLsMaxAge (integer, default=60) +
+
+
+
sslProfile
+
Attributes for setting TLS/SSL configuration for connections.
+
+
+certDb (path)

- Time in seconds after which link state is declared stale if no RA is received. + The absolute path to the database that contains the public certificates of trusted certificate authorities (CA).

-
-mobileAddrMaxAge (integer, default=60) +
+certFile (path)

- (DEPRECATED) This value is no longer used in the router. + The absolute path to the file containing the PEM-formatted public certificate to be used on the local end of any connections using this profile.

-
-workerThreads (integer, default=4) +
+keyFile (path)

- The number of threads that will be created to process message traffic and other application work (timers, non-amqp file descriptors, etc.) . + The absolute path to the file containing the PEM-formatted private key for the above certificate.

-
-debugDump (path) +
+passwordFile (path)

- A file to dump debugging information that can’t be logged normally. + If the above private key is password protected, this is the absolute path to a file containing the password that unlocks the certificate key.

-
-saslConfigPath (path) +
+password (string)

- Absolute path to the SASL configuration file. + An alternative to storing the password in a file referenced by passwordFile is to supply the password right here in the configuration file. This option can be used by supplying the password in the password option. Don’t use both password and passwordFile in the same profile.

-
-saslConfigName (string, default=qdrouterd) +
+uidFormat (string)

- Name of the SASL configuration. This string + .conf is the name of the configuration file. + A list of x509 client certificate fields that will be used to build a string that will uniquely identify the client certificate owner. For e.g. a value of cou indicates that the uid will consist of c - common name concatenated with o - organization-company name concatenated with u - organization unit; or a value of o2 indicates that the uid will consist of o (organization name) concatenated with 2 (the sha256 fingerprint of the entire certificate) . Allowed values can be any combination of c( ISO3166 two character country code), s(state or province), l(Locality; generally - city), o(Organization - Company Name), u(Organization Unit - typically certificate type or brand), n(CommonName - typically a user name for client certificates) and 1(sha1 certificate fingerprint, as displayed in the fingerprints section when looking at a certificate with say a web browser is the hash of the entire certificate) and 2 (sha256 certificate fingerprint) and 5 (sha512 certificate fingerprint).

-
-
listener
-
Listens for incoming connections to the router.
-
-
-name (string) +
+displayNameFile (string)

- Unique name optionally assigned by user. Can be changed. + The absolute path to the file containing the unique id to dispay name mapping

-
-host (string) +
+
+
+
listener
+
Listens for incoming connections to the router.
+
+
+host (string, default=127.0.0.1)

IP address: ipv4 or ipv6 literal or a host name

-
-port (string) +
+port (string, default=amqp)

Port number or symbolic service name.

-
-protocolFamily (One of [IPv4, IPv6]) +
+protocolFamily (One of [IPv4, IPv6])

- [IPv4, IPv6] IPv4: Internet Protocol version 4; IPv6: Internet Protocol version 6. If not specified, the protocol family will be automatically determined from the address. + [IPv4, IPv6] IPv4: Internet Protocol version 4; IPv6: Internet Protocol version 6. If not specified, the protocol family will be automatically determined from the address.

-
-role (One of [normal, inter-router, route-container, on-demand]) +
+role (One of [normal, inter-router, route-container, on-demand], default=normal)

The role of an established connection. In the normal role, the connection is assumed to be used for AMQP clients that are doing normal message delivery over the connection. In the inter-router role, the connection is assumed to be to another router in the network. Inter-router discovery and routing protocols can only be used over inter-router connections. route-container role can be used for router-container connections, for example, a router-broker connection. on-demand role has been deprecated.

-
-cost (integer) +
+cost (integer, default=1)

- For the inter-router role only. This value assigns a cost metric to the inter-router connection. The default (and minimum) value is one. Higher values represent higher costs. The cost is used to influence the routing algorithm as it attempts to use the path with the lowest total cost from ingress to egress. + For the inter-router role only. This value assigns a cost metric to the inter-router connection. The default (and minimum) value is one. Higher values represent higher costs. The cost is used to influence the routing algorithm as it attempts to use the path with the lowest total cost from ingress to egress.

-
-sslProfile (string) +
+sslProfile (string)

- name of the sslProfile + Name of the sslProfile.

-
-saslMechanisms (string) +
+saslMechanisms (string)

Space separated list of accepted SASL authentication mechanisms.

-
-authenticatePeer (boolean) +
+authenticatePeer (boolean)

yes: Require the peer’s identity to be authenticated; no: Do not require any authentication.

-
-requireEncryption (boolean) +
+requireEncryption (boolean)

yes: Require the connection to the peer to be encrypted; no: Permit non-encrypted communication with the peer

-
-requireSsl (boolean) +
+requireSsl (boolean)

yes: Require the use of SSL or TLS on the connection; no: Allow clients to connect without SSL or TLS.

-
-trustedCerts (path) +
+trustedCerts (path)

This optional setting can be used to reduce the set of available CAs for client authentication. If used, this setting must provide the absolute path to a PEM file that contains the trusted certificates.

-
-maxFrameSize (integer, default=16384) +
+maxFrameSize (integer, default=16384)

Defaults to 16384. If specified, it is the maximum frame size in octets that will be used in the connection-open negotiation with a connected peer. The frame size is the largest contiguous set of uninterrupted data that can be sent for a message delivery over the connection. Interleaving of messages on different links is done at frame granularity.

-
-idleTimeoutSeconds (integer, default=16) +
+idleTimeoutSeconds (integer, default=16)

The idle timeout, in seconds, for connections through this listener. If no frames are received on the connection for this time interval, the connection shall be closed.

-
-requirePeerAuth (boolean) +
+stripAnnotations (One of [in, out, both, no], default=both)

- (DEPRECATED) This attribute is now controlled by the authenticatePeer attribute. + [in, out, both, no] in: Strip the dispatch router specific annotations only on ingress; out: Strip the dispatch router specific annotations only on egress; both: Strip the dispatch router specific annotations on both ingress and egress; no - do not strip dispatch router specific annotations

-
-allowUnsecured (boolean) +
+linkCapacity (integer)

- (DEPRECATED) This attribute is now controlled by the requireEncryption attribute. + The capacity of links within this connection, in terms of message deliveries. The capacity is the number of messages that can be in-flight concurrently for each link.

-
-allowNoSasl (boolean) +
+addr (string, default=127.0.0.1)

- (DEPRECATED) This attribute is now controlled by the authenticatePeer attribute. + (DEPRECATED)IP address: ipv4 or ipv6 literal or a host name. This attribute has been deprecated. Use host instead

-
-stripAnnotations (One of [in, out, both, no], default=both) +
+allowNoSasl (boolean)

- [in, out, both, no] in: Strip the dispatch router specific annotations only on ingress; out: Strip the dispatch router specific annotations only on egress; both: Strip the dispatch router specific annotations on both ingress and egress; no - do not strip dispatch router specific annotations + (DEPRECATED) This attribute is now controlled by the authenticatePeer attribute.

-
-linkCapacity (integer) +
+requirePeerAuth (boolean)

- The capacity of links within this connection, in terms of message deliveries. The capacity is the number of messages that can be in-flight concurrently for each link. + (DEPRECATED) This attribute is now controlled by the authenticatePeer attribute.

-
-
connector
-
Establishes an outgoing connection from the router.
-
-
-name (string) +
+allowUnsecured (boolean)

- Unique name optionally assigned by user. Can be changed. + (DEPRECATED) This attribute is now controlled by the requireEncryption attribute.

-
-host (string) +
+
+
+
connector
+
Establishes an outgoing connection from the router.
+
+
+host (string, default=127.0.0.1)

IP address: ipv4 or ipv6 literal or a host name

-
-port (string) +
+port (string, default=amqp)

Port number or symbolic service name.

-
-protocolFamily (One of [IPv4, IPv6]) +
+protocolFamily (One of [IPv4, IPv6])

- [IPv4, IPv6] IPv4: Internet Protocol version 4; IPv6: Internet Protocol version 6. If not specified, the protocol family will be automatically determined from the address. + [IPv4, IPv6] IPv4: Internet Protocol version 4; IPv6: Internet Protocol version 6. If not specified, the protocol family will be automatically determined from the address.

-
-role (One of [normal, inter-router, route-container, on-demand]) +
+role (One of [normal, inter-router, route-container, on-demand], default=normal)

The role of an established connection. In the normal role, the connection is assumed to be used for AMQP clients that are doing normal message delivery over the connection. In the inter-router role, the connection is assumed to be to another router in the network. Inter-router discovery and routing protocols can only be used over inter-router connections. route-container role can be used for router-container connections, for example, a router-broker connection. on-demand role has been deprecated.

-
-cost (integer) +
+cost (integer, default=1)

- For the inter-router role only. This value assigns a cost metric to the inter-router connection. The default (and minimum) value is one. Higher values represent higher costs. The cost is used to influence the routing algorithm as it attempts to use the path with the lowest total cost from ingress to egress. + For the inter-router role only. This value assigns a cost metric to the inter-router connection. The default (and minimum) value is one. Higher values represent higher costs. The cost is used to influence the routing algorithm as it attempts to use the path with the lowest total cost from ingress to egress.

-
-sslProfile (string) +
+sslProfile (string)

- name of the sslProfile + Name of the sslProfile.

-
-saslMechanisms (string) +
+saslMechanisms (string)

Space separated list of accepted SASL authentication mechanisms.

-
-allowRedirect (boolean, default=True) +
+allowRedirect (boolean, default=True)

Allow the peer to redirect this connection to another address.

-
-maxFrameSize (integer, default=65536) +
+maxFrameSize (integer, default=65536)

Maximum frame size in octets that will be used in the connection-open negotiation with a connected peer. The frame size is the largest contiguous set of uninterrupted data that can be sent for a message delivery over the connection. Interleaving of messages on different links is done at frame granularity.

-
-idleTimeoutSeconds (integer, default=16) +
+idleTimeoutSeconds (integer, default=16)

The idle timeout, in seconds, for connections through this connector. If no frames are received on the connection for this time interval, the connection shall be closed.

-
-stripAnnotations (One of [in, out, both, no], default=both) +
+stripAnnotations (One of [in, out, both, no], default=both)

- [in, out, both, no] in: Strip the dispatch router specific annotations only on ingress; out: Strip the dispatch router specific annotations only on egress; both: Strip the dispatch router specific annotations on both ingress and egress; no - do not strip dispatch router specific annotations + [in, out, both, no] in: Strip the dispatch router specific annotations only on ingress; out: Strip the dispatch router specific annotations only on egress; both: Strip the dispatch router specific annotations on both ingress and egress; no - do not strip dispatch router specific annotations

-
-linkCapacity (integer) +
+linkCapacity (integer)

The capacity of links within this connection, in terms of message deliveries. The capacity is the number of messages that can be in-flight concurrently for each link.

-
-verifyHostName (boolean, default=True) +
+verifyHostName (boolean, default=True)

yes: Ensures that when initiating a connection (as a client) the host name in the URL to which this connector connects to matches the host name in the digital certificate that the peer sends back as part of the SSL connection; no: Does not perform host name verification

-
-saslUsername (string) +
+saslUsername (string)

The user name that the connector is using to connect to a peer.

-
-saslPassword (string) +
+saslPassword (string)

The password that the connector is using to connect to a peer.

-
-
log
-
Configure logging for a particular module. You can use the UPDATE operation to change log settings while the router is running.
-
-
-module (One of [ROUTER, ROUTER_CORE, ROUTER_HELLO, ROUTER_LS, ROUTER_MA, MESSAGE, SERVER, AGENT, CONTAINER, ERROR, POLICY, DEFAULT], required) +
+addr (string, default=127.0.0.1)

- Module to configure. The special module DEFAULT specifies defaults for all modules. + (DEPRECATED)IP address: ipv4 or ipv6 literal or a host name. This attribute has been deprecated. Use host instead

-
-enable (string) +
+
+
+
log
+
Configure logging for a particular module. You can use the UPDATE operation to change log settings while the router is running.
+
+
+module (One of [ROUTER, ROUTER_CORE, ROUTER_HELLO, ROUTER_LS, ROUTER_MA, MESSAGE, SERVER, AGENT, CONTAINER, ERROR, POLICY, DEFAULT], required)

- Levels are: trace, debug, info, notice, warning, error, critical. The enable string is a comma-separated list of levels. A level may have a trailing + to enable that level and above. For example trace,debug,warning+ means enable trace, debug, warning, error and critical. The value none means disable logging for the module. + Module to configure. The special module DEFAULT specifies defaults for all modules.

-
-timestamp (boolean) +
+enable (string) +
+
+
+ Levels are: trace, debug, info, notice, warning, error, critical. The enable string is a comma-separated list of levels. A level may have a trailing + to enable that level and above. For example trace,debug,warning+ means enable trace, debug, warning, error and critical. The value none means disable logging for the module. +
+
+
+timestamp (boolean)

Include timestamp in log messages.

-
-source (boolean) +
+source (boolean)

Include source file and line number in log messages.

-
-output (string) +
+output (string)

- Where to send log messages. Can be stderr, stdout, syslog or a file name. + Where to send log messages. Can be stderr, stdout, syslog or a file name.

-
-
fixedAddress
-
(DEPRECATED) Establishes treatment for addresses starting with a prefix. This entity has been deprecated. Use address instead
-
-
-prefix (string, required) +
+
+
+
address
+
Entity type for address configuration. This is used to configure the treatment of message-routed deliveries within a particular address-space. The configuration controls distribution and address phasing.
+
+
+prefix (string, required)

- The address prefix (always starting with /). + The address prefix for the configured settings

-
-phase (integer) +
+distribution (One of [multicast, closest, balanced], default=balanced)

- The phase of a multi-hop address passing through one or more waypoints. + Treatment of traffic associated with the address

-
-fanout (One of [multiple, single], default=multiple) +
+waypoint (boolean)

- One of multiple or single. Multiple fanout is a non-competing pattern. If there are multiple consumers using the same address, each consumer will receive its own copy of every message sent to the address. Single fanout is a competing pattern where each message is sent to only one consumer. + Designates this address space as being used for waypoints. This will cause the proper address-phasing to be used.

-
-bias (One of [closest, spread], default=closest) +
+ingressPhase (integer)

- Only if fanout is single. One of closest or spread. Closest bias means that messages to an address will always be delivered to the closest (lowest cost) subscribed consumer. Spread bias will distribute the messages across subscribers in an approximately even manner. + Advanced - Override the ingress phase for this address

-
-
waypoint
-
(DEPRECATED) A remote node that messages for an address pass through. This entity has been deprecated. Use autoLink instead
-
-
-address (string, required) +
+egressPhase (integer)

- The AMQP address of the waypoint. + Advanced - Override the egress phase for this address

-
-connector (string, required) +
+
+
+
linkRoute
+
Entity type for link-route configuration. This is used to identify remote containers that shall be destinations for routed link-attaches. The link-routing configuration applies to an addressing space defined by a prefix.
+
+
+prefix (string, required)

- The name of the on-demand connector used to reach the waypoint’s container. + The address prefix for the configured settings

-
-inPhase (integer, default=-1) +
+containerId (string)

- The phase of the address as it is routed to the waypoint. + ContainerID for the target container

-
-outPhase (integer, default=-1) +
+connection (string)

- The phase of the address as it is routed from the waypoint. + The name from a connector or listener

-
-
linkRoutePattern
-
(DEPRECATED) An address pattern to match against link sources and targets to cause the router to link-route the attach across the network to a remote node. This entity has been deprecated. Use linkRoute instead
-
-
-prefix (string, required) +
+distribution (One of [linkBalanced], default=linkBalanced)

- An address prefix to match against target and source addresses. This pattern must be of the form <text>.<text1>.<textN> or <text> or <text>. and matches any address that contains that prefix. For example, if the prefix is set to org.apache (or org.apache.), any address that has the prefix org.apache (like org.apache.dev) will match. Note that a prefix must not start with a (.), can end in a (.) and can contain zero or more dots (.). Any characters between the dots are simply treated as part of the address + Treatment of traffic associated with the address

-
-dir (One of [in, out, both], default=both) +
+dir (One of [in, out], required)

- Link direction for match: in matches only links inbound to the client; out matches only links outbound from the client; both matches any link. + The permitted direction of links: in means client senders; out means client receivers

-
-connector (string) +
+
+
+
autoLink
+
Entity type for configuring auto-links. Auto-links are links whose lifecycle is managed by the router. These are typically used to attach to waypoints on remote containers (brokers, etc.).
+
+
+addr (string, required)

- The name of the on-demand connector used to reach the target node’s container. If this value is not provided, it means that the target container is expected to be connected to a different router in the network. This prevents links to a link-routable address from being misinterpreted as message-routing links when there is no route to a valid destination available. + The address of the provisioned object

-
-
address
-
Entity type for address configuration. This is used to configure the treatment of message-routed deliveries within a particular address-space. The configuration controls distribution and address phasing.
-
-
-prefix (string, required) +
+dir (One of [in, out], required)

- The address prefix for the configured settings + The direction of the link to be created. In means into the router, out means out of the router.

-
-distribution (One of [multicast, closest, balanced], default=balanced) +
+phase (integer)

- Treatment of traffic associated with the address + The address phase for this link. Defaults to 0 for out links and 1 for in links.

-
-waypoint (boolean) +
+containerId (string)

- Designates this address space as being used for waypoints. This will cause the proper address-phasing to be used. + ContainerID for the target container

-
-ingressPhase (integer) +
+connection (string)

- Advanced - Override the ingress phase for this address + The name from a connector or listener

-
-egressPhase (integer) +
+
+
+
console
+
Start a websocket/tcp proxy and http file server to serve the web console
+
+
+listener (string)

- Advanced - Override the egress phase for this address + The name of the listener to send the proxied tcp traffic to.

-
-
linkRoute
-
Entity type for link-route configuration. This is used to identify remote containers that shall be destinations for routed link-attaches. The link-routing configuration applies to an addressing space defined by a prefix.
-
-
-prefix (string, required) +
+wsport (integer, default=5673)

- The address prefix for the configured settings + port on which to listen for websocket traffic

-
-containerId (string) +
+proxy (string)

- ContainerID for the target container + The full path to the proxy program to run.

-
-connection (string) +
+home (string)

- The name from a connector or listener + The full path to the html/css/js files for the console.

-
-distribution (One of [linkBalanced], default=linkBalanced) +
+args (string)

- Treatment of traffic associated with the address + Optional args to pass the proxy program for logging, authentication, etc.

-
-dir (One of [in, out], required) +
+
+
+
policy
+
Defines global connection limit
+
+
+maxConnections (integer, default=65535)

- The permitted direction of links: in means client senders; out means client receivers + Global maximum number of concurrent client connections allowed. This limit is always enforced even if no other policy settings have been defined.

-
-
autoLink
-
Entity type for configuring auto-links. Auto-links are links whose lifecycle is managed by the router. These are typically used to attach to waypoints on remote containers (brokers, etc.).
-
-
-addr (string, required) +
+enableVhostPolicy (boolean)

- The address of the provisioned object + Enable vhost policy user groups, connection denial, and resource limit enforcement

-
-dir (One of [in, out], required) +
+policyDir (path)

- The direction of the link to be created. In means into the router, out means out of the router. + Absolute path to a directory that holds vhost definition .json files. All vhost definitions in all .json files in this directory are processed.

-
-phase (integer) +
+defaultVhost (string)

- The address phase for this link. Defaults to 0 for out links and 1 for in links. + Vhost rule set name to use for connections with a vhost that is otherwise not defined. Default vhost processing may be disabled either by erasing the definition of defaultVhost or by not defining a vhost object named $default.

-
-containerId (string) +
+
+
+
vhost
+
AMQP virtual host policy definition of users, user groups, allowed remote hosts, and AMQP restrictions.
+
+
+maxConnections (integer, default=65535)

- ContainerID for the target container + Maximum number of concurrent client connections allowed.

-
-connection (string) +
+maxConnectionsPerUser (integer, default=65535)

- The name from a connector or listener + Maximum number of concurrent client connections allowed for any single user.

-
-
console
-
Start a websocket/tcp proxy and http file server to serve the web console
-
-
-listener (string) +
+maxConnectionsPerHost (integer, default=65535)

- The name of the listener to send the proxied tcp traffic to. + Maximum number of concurrent client connections allowed for any remote host.

-
-wsport (integer, default=5673) +
+allowUnknownUser (boolean)

- port on which to listen for websocket traffic + Unrestricted users, those who are not members of a defined user group, are allowed to connect to this application. Unrestricted users are assigned to the default user group and receive default settings.

-
-proxy (string) +
+groups (map)

- The full path to the proxy program to run. + A map where each key is a user group name and the value is a map of the corresponding settings for that group.

-
-home (string) +
+
+
+
container
+
(DEPRECATED)Attributes related to the AMQP container. This entity has been deprecated. Use the router entity instead.
+
+
+containerName (string)

- The full path to the html/css/js files for the console. + The name of the AMQP container. If not specified, the container name will be set to a value of the container’s choosing. The automatically assigned container name is not guaranteed to be persistent across restarts of the container.

-
-args (string) +
+workerThreads (integer, default=4)

- Optional args to pass the proxy program for logging, authentication, etc. + The number of threads that will be created to process message traffic and other application work (timers, non-amqp file descriptors, etc.) . +
+
+
+debugDump (path) +
+
+
+ A file to dump debugging information that can’t be logged normally.

-
-
policy
-
Defines global connection limit
-
-
-maximumConnections (integer) +
+saslConfigPath (path)

- Global maximum number of concurrent client connections allowed. Zero implies no limit. This limit is always enforced even if no other policy settings have been defined. + Absolute path to the SASL configuration file.

-
-enableAccessRules (boolean) +
+saslConfigName (string)

- Enable user rule set processing and connection denial. + Name of the SASL configuration. This string + .conf is the name of the configuration file.

-
-policyFolder (path) +
+
+
+
waypoint
+
(DEPRECATED) A remote node that messages for an address pass through. This entity has been deprecated. Use autoLink instead
+
+
+address (string, required)

- The absolute path to a folder that holds policyRuleset definition .json files. For a small system the rulesets may all be defined in this file. At a larger scale it is better to have the policy files in their own folder and to have none of the rulesets defined here. All rulesets in all .json files in this folder are processed. + The AMQP address of the waypoint.

-
-defaultApplication (string) +
+connector (string, required)

- Application policyRuleset to use for connections with no open.hostname or a hostname that does not match any existing policy. For users that don’t wish to use open.hostname or any multi-tennancy feature, this default policy can be the only policy in effect for the network. + The name of the on-demand connector used to reach the waypoint’s container.

-
-defaultApplicationEnabled (boolean) +
+inPhase (integer, default=-1)

- Enable defaultApplication policy fallback logic. + The phase of the address as it is routed to the waypoint.

-
-
policyRuleset
-
Per application definition of the locations from which users may connect and the groups to which users belong.
-
-
-maxConnections (integer) +
+outPhase (integer, default=-1)

- Maximum number of concurrent client connections allowed. Zero implies no limit. + The phase of the address as it is routed from the waypoint.

-
-maxConnPerUser (integer) +
+
+
+
fixedAddress
+
(DEPRECATED) Establishes treatment for addresses starting with a prefix. This entity has been deprecated. Use address instead
+
+
+prefix (string, required)

- Maximum number of concurrent client connections allowed for any single user. Zero implies no limit. + The address prefix (always starting with /).

-
-maxConnPerHost (integer) +
+phase (integer)

- Maximum number of concurrent client connections allowed for any remote host. Zero implies no limit. + The phase of a multi-hop address passing through one or more waypoints.

-
-userGroups (map) +
+fanout (One of [multiple, single], default=multiple)

- A map where each key is a user group name and the corresponding value is a CSV string naming the users in that group. Users who are assigned to one or more groups are deemed restricted. Restricted users are subject to connection ingress policy and are assigned policy settings based on the assigned user groups. Unrestricted users may be allowed or denied. If unrestricted users are allowed to connect then they are assigned to user group default. + One of multiple or single. Multiple fanout is a non-competing pattern. If there are multiple consumers using the same address, each consumer will receive its own copy of every message sent to the address. Single fanout is a competing pattern where each message is sent to only one consumer.

-
-ingressHostGroups (map) +
+bias (One of [closest, spread], default=closest)

- A map where each key is an ingress host group name and the corresponding value is a CSV string naming the IP addresses or address ranges in that group. IP addresses may be FQDN strings or numeric IPv4 or IPv6 host addresses. A host range is two host addresses of the same address family separated with a hyphen. The wildcard host address * represents any host address. + Only if fanout is single. One of closest or spread. Closest bias means that messages to an address will always be delivered to the closest (lowest cost) subscribed consumer. Spread bias will distribute the messages across subscribers in an approximately even manner.

-
-ingressPolicies (map) +
+
+
+
linkRoutePattern
+
(DEPRECATED) An address pattern to match against link sources and targets to cause the router to link-route the attach across the network to a remote node. This entity has been deprecated. Use linkRoute instead
+
+
+prefix (string, required)

- A map where each key is a user group name and the corresponding value is a CSV string naming the ingress host group names that restrict the ingress host for the user group. Users who are members of the user group are allowed to connect only from a host in one of the named ingress host groups. + An address prefix to match against target and source addresses. This pattern must be of the form <text>.<text1>.<textN> or <text> or <text>. and matches any address that contains that prefix. For example, if the prefix is set to org.apache (or org.apache.), any address that has the prefix org.apache (like org.apache.dev) will match. Note that a prefix must not start with a (.), can end in a (.) and can contain zero or more dots (.). Any characters between the dots are simply treated as part of the address

-
-connectionAllowDefault (boolean) +
+dir (One of [in, out, both], default=both)

- Unrestricted users, those who are not members of a defined user group, are allowed to connect to this application. Unrestricted users are assigned to the default user group and receive default settings. + Link direction for match: in matches only links inbound to the client; out matches only links outbound from the client; both matches any link.

-
-settings (map) +
+connector (string)

- A map where each key is a user group name and the value is a map of the corresponding settings for that group. + The name of the on-demand connector used to reach the target node’s container. If this value is not provided, it means that the target container is expected to be connected to a different router in the network. This prevents links to a link-routable address from being misinterpreted as message-routing links when there is no route to a valid destination available.

-
-
SEE ALSO
-
qdrouterd(8), qdmanage(8)
-
http://qpid.apache.org/components/dispatch-router
+

+ + + +

NAME

SYNOPSIS

DESCRIPTION

SYNOPSIS

DESCRIPTION

OPTIONS

Connection Options

OPERATIONS

OPTIONS

Connection Options

OPERATIONS

FILES

FILES

EXAMPLES

EXAMPLES

SEE ALSO

SEE ALSO

NAME

SYNOPSIS

DESCRIPTION

SYNOPSIS

DESCRIPTION

OPTIONS

FILES

OPTIONS

FILES

SEE ALSO

SEE ALSO

NAME

SYNOPSIS

DESCRIPTION

SYNOPSIS

DESCRIPTION

Configuration Sections

sslProfile

Configuration Sections

router

container

router

sslProfile

listener

listener

connector

connector

log

log

fixedAddress

address

waypoint

linkRoute

linkRoutePattern

autoLink

address

console

linkRoute

policy

autoLink

vhost

console

container

policy

waypoint

policyRuleset

fixedAddress

linkRoutePattern

SEE ALSO

SEE ALSO