瀏覽代碼

tls/docs: Update tls.reload docs

Xenofon Karamanos 1 年之前
父節點
當前提交
4c9cfa7a6a
共有 2 個文件被更改,包括 4 次插入5 次删除
  1. 4 0
      src/modules/tls/doc/rpc.xml
  2. 0 5
      src/modules/tls/doc/tls.xml

+ 4 - 0
src/modules/tls/doc/rpc.xml

@@ -70,6 +70,10 @@
 			terminated and they continue to use the old certificates. The new configuration
 			will be used for new connections.
 		</para>
+		<para>
+		Reload is generally safe and usable in production environments. If possible should
+		be done in a time where the service has lower usage/connections.
+		</para>
 		<para>
 			This RPC command is exported with "RPC_EXEC_DELTA" flag, therefore its
 			execution rate can be restricted to specific time intervals by setting

+ 0 - 5
src/modules/tls/doc/tls.xml

@@ -284,10 +284,6 @@ make -C modules/tls extra_defs="-DTLS_WR_DEBUG -DTLS_RD_DEBUG"
 			but also not exactly standard conforming (the verification should happen during TLS
 			connection establishment and not after).
 		</para>
-		<para>
-			TLS specific config reloading is not safe, so for now better don't use it,
-			especially under heavy traffic.
-		</para>
 		<para>
 			This documentation is incomplete.
 			The provided selects are not documented in this file. A list with all the
@@ -364,4 +360,3 @@ event_route[tls:connection-out] {
 	</section>
 	</chapter>
 </book>
-