Merge pull request #393 from dkropachev/dk/enable-tls-tickets-cache

tls: enable session ticket cache by default
scylladb · Feb 21, 2025 · e2627ca · e2627ca
2 parents b631024 + dffa1dc
commit e2627ca
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/cluster.go b/cluster.go
@@ -523,6 +523,8 @@ func setupTLSConfig(sslOpts *SslOptions) (*tls.Config, error) {
 	if sslOpts.Config == nil {
 		tlsConfig = &tls.Config{
 			InsecureSkipVerify: !sslOpts.EnableHostVerification,
+			// Ticket max size is 16371 bytes, so it can grow up to 16mb max.
+			ClientSessionCache: tls.NewLRUClientSessionCache(1024),
 		}
 	} else {
 		// use clone to avoid race.