TLS Session Ticket Key Plugin API

This interface enables a plugin to update the session ticket encryption keys used for TLS session resumption.

注釈

The session ID-based session cache and its associated APIs (TSSslSessionGet, TSSslSessionGetBuffer, TSSslSessionInsert, TSSslSessionRemove, and TS_SSL_SESSION_HOOK) were removed in ATS 11.x. TLS session resumption is now only supported via session tickets.

Utility Functions

• TSSslTicketKeyUpdate()

Example Use Case

Consider deploying a set of ATS servers as a farm behind a layer 4 load balancer. To enable TLS session ticket-based resumption across all servers, they need to share the same session ticket encryption keys.

A plugin can engage in a protocol to periodically update the session ticket encryption key and communicate the new key to its peers. The plugin calls TSSslTicketKeyUpdate() to update the local ATS process with the newest keys and the last N keys.