By default, Fortanix DSM makes API calls to DSM for performing message digest operations, but from the 4.10 release onwards, it will not make the API calls and will perform the message digest operations locally without the user’s intervention through the SUN provider’s implementation. Local Digest is now set as the default behavior in the Fortanix DSM JCE Provider from the 4.10 release onwards. This will create a log file /path/to/logfile-folder/sdkms-jce.log.

To enable debug logs, set the environment variable:Įxport FORTANIX_LOG_FOLDER='/path/to/logfile-folder'.

With the 3.21 release, by default the logging option is disabled, and in order to enable it export the following environment variables: For example,Įxport FORTANIX_CONN_KEEPALIVE=4000 6.0 Logging To configure keep-alive, declare it as a system environment variable. The default value is 5000 milliseconds ( 5 seconds) in case it is not configured. The environment variable FORTANIX_CONN_KEEPALIVE is a configurable property that is used to keep the duration of a live connection open for reuse in case of subsequent requests.

Observation: higher latency, which is expected since threads are now waiting for connections to get free.

Behavior: Maximum X sockets open with reuse.

FORTANIX_CONN_MAX = X, Concurrent threads greater than X.

Observation: The sockets are also being reused.

Behavior: Less than X sockets open at a time.

FORTANIX_CONN_MAX = X, Concurrent threads less than X.

Existing behavior: number of sockets is equal to the number of concurrent threads.

This is similar to JCE behavior prior to version 3.21. When the environment variable FORTANIX_CONN_MAX is not exported or is set to ` 0`, JCE will behave without any connection pooling/limit. The environment variable FORTANIX_CONN_MAX is set to the maximum number of connections from that instance of the JCE application. This allows setting some safe limits on each JCE application so that no single applicationĬan overwhelm the server.

5.0 Connection Poolingįortanix DSM version 3.21 and above supports a new feature called Connection Pooling.Ĭonnection pooling allows restriction and reuse of connections with a maximum limit specified.

SHA1withRSAandPKCS1V15 SHA256withRSAandPKCS1V15 SHA384withRSAandPKCS1V15 SHA512withRSAandPKCS1V15įor a full list of supported algorithms refer to Algorithm Support.

SHA1withECDSA, SHA256withECDSA, SHA384withECDSA, SHA512withECDSA SHA1withRSA, SHA256withRSA, SHA384withRSA, SHA512withRSA

Instal Fort Firewall 3.9.