envoy.listener.ssl.handshake

Successful SSL/TLS handshakes

Dimensions:None

Technical Annotations (7)

Configuration Parameters (3)

trafficPolicy.connectionPool.http.maxRequestsPerConnectionrecommended: 0

Never close connection based on request count in DestinationRule

trafficPolicy.connectionPool.http.h2UpgradePolicyrecommended: UPGRADE

Multiplex requests over HTTP/2 to reduce handshakes in DestinationRule

trafficPolicy.connectionPool.tcp.tcpKeepalive.timerecommended: 7200s

TCP keepalive time in DestinationRule

Technical References (4)

SDSprotocolSANconceptmTLSprotocolDestinationRulecomponent

TLS certificate rotation failures cause handshake errors and traffic breakscritical

▸

mTLS handshakes are the biggest CPU consumerwarning

▸