Technologies/Envoy/envoy.listener.ssl.handshake
EnvoyEnvoyMetric

envoy.listener.ssl.handshake

Successful SSL/TLS handshakes
Dimensions:None
Available on:Native (1)
Interface Metrics (1)
Native
Total number of successful SSL/TLS handshakes on the listener
Dimensions:None

Technical Annotations (7)

Configuration Parameters (3)
trafficPolicy.connectionPool.http.maxRequestsPerConnectionrecommended: 0
Never close connection based on request count in DestinationRule
trafficPolicy.connectionPool.http.h2UpgradePolicyrecommended: UPGRADE
Multiplex requests over HTTP/2 to reduce handshakes in DestinationRule
trafficPolicy.connectionPool.tcp.tcpKeepalive.timerecommended: 7200s
TCP keepalive time in DestinationRule
Technical References (4)
SDSprotocolSANconceptmTLSprotocolDestinationRulecomponent
Related Insights (2)
TLS certificate rotation failures cause handshake errors and traffic breakscritical
mTLS handshakes are the biggest CPU consumerwarning