瀏覽代碼

tls/docs: Update tls.reload docs

Xenofon Karamanos 1 年之前
父節點
當前提交
4c9cfa7a6a
共有 2 個文件被更改,包括 4 次插入5 次删除
  1. 4 0
      src/modules/tls/doc/rpc.xml
  2. 0 5
      src/modules/tls/doc/tls.xml

+ 4 - 0
src/modules/tls/doc/rpc.xml

@@ -70,6 +70,10 @@
 			terminated and they continue to use the old certificates. The new configuration
 			terminated and they continue to use the old certificates. The new configuration
 			will be used for new connections.
 			will be used for new connections.
 		</para>
 		</para>
+		<para>
+		Reload is generally safe and usable in production environments. If possible should
+		be done in a time where the service has lower usage/connections.
+		</para>
 		<para>
 		<para>
 			This RPC command is exported with "RPC_EXEC_DELTA" flag, therefore its
 			This RPC command is exported with "RPC_EXEC_DELTA" flag, therefore its
 			execution rate can be restricted to specific time intervals by setting
 			execution rate can be restricted to specific time intervals by setting

+ 0 - 5
src/modules/tls/doc/tls.xml

@@ -284,10 +284,6 @@ make -C modules/tls extra_defs="-DTLS_WR_DEBUG -DTLS_RD_DEBUG"
 			but also not exactly standard conforming (the verification should happen during TLS
 			but also not exactly standard conforming (the verification should happen during TLS
 			connection establishment and not after).
 			connection establishment and not after).
 		</para>
 		</para>
-		<para>
-			TLS specific config reloading is not safe, so for now better don't use it,
-			especially under heavy traffic.
-		</para>
 		<para>
 		<para>
 			This documentation is incomplete.
 			This documentation is incomplete.
 			The provided selects are not documented in this file. A list with all the
 			The provided selects are not documented in this file. A list with all the
@@ -364,4 +360,3 @@ event_route[tls:connection-out] {
 	</section>
 	</section>
 	</chapter>
 	</chapter>
 </book>
 </book>
-