From dffa1dc2cc765859d6b3615a24a76dc9e412289c Mon Sep 17 00:00:00 2001 From: Dmitry Kropachev Date: Tue, 18 Feb 2025 22:20:37 -0400 Subject: [PATCH] tls: enable session ticket cache by default --- cluster.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/cluster.go b/cluster.go index d54a4d534..76c33dd35 100644 --- a/cluster.go +++ b/cluster.go @@ -503,6 +503,8 @@ func setupTLSConfig(sslOpts *SslOptions) (*tls.Config, error) { if sslOpts.Config == nil { tlsConfig = &tls.Config{ InsecureSkipVerify: !sslOpts.EnableHostVerification, + // Ticket max size is 16371 bytes, so it can grow up to 16mb max. + ClientSessionCache: tls.NewLRUClientSessionCache(1024), } } else { // use clone to avoid race.