Notice

This document is for a development version of Ceph.

HTTP Frontends

The Ceph Object Gateway supports two embedded HTTP frontend libraries that can be configured with rgw_frontends. See Config Reference for details about the syntax.

Beast

New in version Mimic.

The beast frontend uses the Boost.Beast library for HTTP parsing and the Boost.Asio library for asynchronous network i/o.

Options

port and ssl_port

Description

Sets the ipv4 & ipv6 listening port number. Can be specified multiple times as in port=80 port=8000.

Type

Integer

Default

80

endpoint and ssl_endpoint

Description

Sets the listening address in the form address[:port], where the address is an IPv4 address string in dotted decimal form, or an IPv6 address in hexadecimal notation surrounded by square brackets. Specifying a IPv6 endpoint would listen to v6 only. The optional port defaults to 80 for endpoint and 443 for ssl_endpoint. Can be specified multiple times as in endpoint=[::1] endpoint=192.168.0.100:8000.

Type

Integer

Default

None

ssl_certificate

Description

Path to the SSL certificate file used for SSL-enabled endpoints. If path is prefixed with config://, the certificate will be pulled from the ceph monitor config-key database.

Type

String

Default

None

ssl_private_key

Description

Optional path to the private key file used for SSL-enabled endpoints. If one is not given, the ssl_certificate file is used as the private key. If path is prefixed with config://, the certificate will be pulled from the ceph monitor config-key database.

Type

String

Default

None

ssl_options

Description

Optional colon separated list of ssl context options:

default_workarounds Implement various bug workarounds.

no_compression Disable compression.

no_sslv2 Disable SSL v2.

no_sslv3 Disable SSL v3.

no_tlsv1 Disable TLS v1.

no_tlsv1_1 Disable TLS v1.1.

no_tlsv1_2 Disable TLS v1.2.

single_dh_use Always create a new key when using tmp_dh parameters.

Type

String

Default

no_sslv2:no_sslv3:no_tlsv1:no_tlsv1_1

ssl_ciphers

Description

Optional list of one or more cipher strings separated by colons. The format of the string is described in openssl’s ciphers(1) manual.

Type

String

Default

None

tcp_nodelay

Description

If set the socket option will disable Nagle’s algorithm on the connection which means that packets will be sent as soon as possible instead of waiting for a full buffer or timeout to occur.

1 Disable Nagel’s algorithm for all sockets.

0 Keep the default: Nagel’s algorithm enabled.

Type

Integer (0 or 1)

Default

0

max_connection_backlog

Description

Optional value to define the maximum size for the queue of connections waiting to be accepted. If not configured, the value from boost::asio::socket_base::max_connections will be used.

Type

Integer

Default

None

request_timeout_ms

Description

The amount of time in milliseconds that Beast will wait for more incoming data or outgoing data before giving up. Setting this value to 0 will disable timeout.

Type

Integer

Default

65000

rgw_thread_pool_size

Description

Sets the number of threads spawned by Beast to handle incoming HTTP connections. This effectively limits the number of concurrent connections that the frontend can service.

Type

Integer

Default

512

max_header_size

Description

The maximum number of header bytes available for a single request.

Type

Integer

Default

16384

Maximum

65536

Generic Options

Some frontend options are generic and supported by all frontends:

prefix

Description

A prefix string that is inserted into the URI of all requests. For example, a swift-only frontend could supply a uri prefix of /swift.

Type

String

Default

None