Server First Connection Attributes

Use these attributes to set the number of connections to a TimesTen server, the number of servers for each DSN and the size of each connection to the server.

These attributes allow you to specify multiple client connections to a single server. By default, TimesTen creates only one connection to a server per child process.

Server first connection attributes are specified in the server DSN only and are read at first connection. See Defining Server DSNs for TimesTen Server on a Linux or UNIX System in Oracle TimesTen In-Memory Database Operations Guide.

Note:

These attributes must be specified in the DSN. If these attributes are specified in a connection string, TimesTen ignores them and their values.

There are also TimesTen main daemon options that can specify multiple server connections. In the case that both the daemon options and these attributes have been specified, the value of the attributes takes precedence.

The server first connection attributes are described in detail next.

CipherSuites

The CipherSuites attribute lists the cipher suite or suites that can be used, depending also on the client setting.

Specify one or more of the following cipher suites, separated by a comma, and in order of preference:
  • SSL_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  • SSL_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
  • SSL_RSA_WITH_AES_128_CBC_SHA256
There is no default setting.

You must set this attribute for both the client and the server. For TLS to be used, the server and client settings must include at least one common suite.

See Configuration for TLS for Client/Server in Oracle TimesTen In-Memory Database Security Guide for more details.

Required Privilege

No privilege is required to change the value of this attribute.

Usage in TimesTen Scaleout and TimesTen Classic

This attribute is supported in TimesTen Classic but not supported in TimesTen Scaleout.

Setting

Set CipherSuites as follows.

Where to set the attribute How the attribute is represented Setting

C or Java programs or UNIX and Linux systems odbc.ini file in TimesTen Classic

CipherSuites

Specify SSL_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, SSL_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, or both, comma-separated and in order of preference

Windows ODBC Data Source Administrator

Encryption field on the Oracle TimesTen Client DSN Setup dialog.

Specify SSL_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, SSL_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, or both, comma-separated and in order of preference

Encryption

The Encryption attribute specifies whether encryption is accepted, rejected, requested, or required for a client/server connection.

You must set this attribute for both the client and the server. Cipher settings must be the same on both the client and server, in most cases.

See Configuration for TLS for Client/Server in Oracle TimesTen In-Memory Database Security Guide for more details.

Required Privilege

No privilege is required to change the value of this attribute.

Usage in TimesTen Scaleout and TimesTen Classic

This attribute is supported in TimesTen Classic but not supported in TimesTen Scaleout.

Setting

Set Encryption as follows.

Where to set the attribute How the attribute is represented Setting

C or Java programs or UNIX and Linux systems odbc.ini file in TimesTen Classic

Encryption

  • accepted: Enable an encrypted session if required or requested by the client; use an unencrypted session otherwise. (default)

  • rejected: Demand an unencrypted session. (If the server does not support encryption, TimesTen behaves as if this is the setting on the server.) The connection is rejected if the client requires encryption.

  • requested: Request an encrypted session if the client allows it (if the client has any setting other than rejected); use an unencrypted session otherwise.

  • required: Demand an encrypted session. Reject the connection if the client rejects encryption.

Windows ODBC Data Source Administrator

Encryption field on the Oracle TimesTen Client DSN Setup dialog.

  • accepted: Enable an encrypted session if required or requested by the client; use an unencrypted session otherwise. (default)

  • rejected: Demand an unencrypted session. (If the server does not support encryption, TimesTen behaves as if this is the setting on the server.) The connection is rejected if the client requires encryption.

  • requested: Request an encrypted session if the client allows it (if the client has any setting other than rejected); use an unencrypted session otherwise.

  • required: Demand an encrypted session. Reject the connection if the client rejects encryption.

SSLClientAuthentication

The SSLClientAuthentication attribute specifies whether SSL client authentication is required (setting of 1) or not (setting of 0, the default).

With client authentication, the server validates an identity presented by the client, and requires an identity (public/private key) in the client wallet.

Regardless of the client authentication setting, server authentication is performed, where the client validates the server.

You must set this attribute for both the client and the server. Regardless of the client authentication setting, server authentication is performed, where the client validates the server.

See Configuration for TLS for Client/Server in Oracle TimesTen In-Memory Database Security Guide for more details.

Required Privilege

No privilege is required to change the value of this attribute.

Usage in TimesTen Scaleout and TimesTen Classic

This attribute is supported in TimesTen Classic but not supported in TimesTen Scaleout.

Setting

Set SSLClientAuthentication as follows.

Where to set the attribute How the attribute is represented Setting

C or Java programs or UNIX and Linux systems odbc.ini file in TimesTen Classic

SSLClientAuthentication

1 - Client authentication is required.

0 - No authentication is required (the default).

Windows ODBC Data Source Administrator

SSL Client Authentication field on the Oracle TimesTen Client DSN Setup dialog.

1 - Client authentication is required.

0 - No authentication is required (the default).

MaxConnsPerServer

The MaxConnsPerServer attribute sets the maximum number of concurrent connections to the server which the DSN references.

If you want to support many connections to the server, you must ensure that the per-process file descriptor limit for the UID that TimesTen is being run as is set to a value somewhat more than the number of concurrent child servers that are active. This is the number of anticipated concurrent client connections divided by MaxConnsPerServer. For full details on MaxConnsPerServer, see Connection Attributes for Data Manager DSNs or Server DSNs in the Oracle TimesTen In-Memory Database Operations Guide.

The value of this attribute takes precedence over the setting of the value of the max_conns_per_server attribute in the timesten.conf file. For details, see Specifying Multiple Connections to the TimesTen Server in Oracle TimesTen In-Memory Database Operations Guide .

For limits on the maximum number of connections to a TimesTen database, see System Limits.

Changes to TimesTen server settings do not occur until the TimeTen server is restarted. To restart server, use the command ttDaemonAdmin -restartserver.

Required Privilege

Only a user with operating system privileges on the system DSN in which this attribute is defined can change the value of this attribute to a value other than the one currently in effect.

Usage in TimesTen Scaleout and TimesTen Classic

This attribute is supported in both TimesTen Classic and TimesTen Scaleout.

Setting

Set MaxConnsPerServer as follows:

Where to set the attribute How the attribute is represented Setting

C or Java programs or UNIX and Linux systems odbc.ini file in TimesTen Classic or in the database definition (.dbdef) file in TimesTen Scaleout

MaxConnsPerServer

A value between 1 and 2047. The default is 1, which indicates that each connection has its own separate process, not just a separate thread within a process.

Windows ODBC Data Source Administrator

Not applicable

ServersPerDSN

The ServersPerDSN attribute specifies the number of child server processes for a particular server DSN that will use round-robin connection distribution.

This attribute only has any effect if the TimesTen server is configured to operate in multithreaded mode (MaxConnsPerServer > 1). If ServersPerDSN is set to 1 then the first MaxConnsPerServer client connections to the server DSN will be assigned to one child server process, the next MaxConnsPerServer connections to a second child server process and so on. See Connection attributes for Data Manager DSNs or Server DSNs in the Oracle TimesTen In-Memory Database Operations Guide for more details.

The value of this attribute takes precedence over the setting of the value of the servers_per_dsn attribute in the timesten.conf file. For details, see Specifying Multiple Connections to the TimesTen Server in the Oracle TimesTen In-Memory Database Operations Guide.

Changes to TimesTen server settings do not occur until the TimesTen server is restarted. To restart the server, use the command ttDaemonAdmin -restartserver.

Required Privilege

Only a user with operating system privileges on the system DSN in which this attribute is defined can change the value of this attribute to a value other than the one currently in effect.

Usage in TimesTen Scaleout and TimesTen Classic

This attribute is supported in both TimesTen Classic and TimesTen Scaleout.

Setting

Set ServersPerDSN as follows:

Where to set the attribute How the attribute is represented Setting

C or Java programs or UNIX and Linux systems odbc.ini file in TimesTen Classic or in the database definition (.dbdef) file in TimesTen Scaleout

ServersPerDSN

A value between 1 and 2047. The default is 1.

Windows ODBC Data Source Administrator

Not applicable

ServerStackSize

The ServerStackSize attribute value determines the size of the stack on the server for each connection.

The value of this attribute is only meaningful if the value of MaxConnsPerServer is greater than one. If there is only one connection per server, the child server uses the process' main stack. It is also platform-dependent, as defined in the setting below.

You generally should not need to set the ServerStackSize attribute. However, if the ttcserver process is getting repeatable Access Violations (Windows) or core dumps (Linux and Unix), you may consider increasing the ServerStackSize attribute to 1024 KB or greater.

This value of this attribute takes precedence over the setting of the server_stack_size attribute in the timesten.conf file. For details, see Defining Server DSNs for TimesTen Server on a Linux or UNIX System in Oracle TimesTen In-Memory Database Operations Guide.

Changes to TimesTen server settings do not occur until the TimesTen server is restarted. To restart the server, use the command ttDaemonAdmin -restartserver.

Required Privilege

Only a user with operating system privileges on the system DSN in which this attribute is defined can change the value of this attribute to a value other than the one currently in effect.

Usage in TimesTen Scaleout and TimesTen Classic

This attribute is supported in both TimesTen Classic and TimesTen Scaleout.

Setting

Set ServerStackSize as follows:

Where to set the attribute How the attribute is represented Setting

C or Java programs or UNIX and Linux systems odbc.ini file in TimesTen Classic or in the database definition (.dbdef) file in TimesTen Scaleout

ServerStackSize

Valid values depend on the platform. The default is 768 KB.

If the sysconf call is available, the minimum is:

sysconf(_SC_THREAD_STACK_MIN)/ 1024

else the minimum is 0.

Windows ODBC Data Source Administrator

Not applicable

SSLRenegotiationPeriod

The SSLRenegotiationPeriod attribute specifies a period of time, in minutes, after which session renegotiation is performed.

The default setting is 0, meaning do not renegotiate based on a time period.

Changes to TimesTen server settings do not occur until the TimesTen server is restarted. To restart the server, use the command ttDaemonAdmin -restartserver.

If both SSLRenegotiationSize and SSLRenegotiationPeriod are set with non-zero values, whichever setting occurs first causes the renegotiation.

See Configuration for TLS for Client/Server in Oracle TimesTen In-Memory Database Security Guide for more details.

Required Privilege

Only a user with operating system privileges on the system DSN in which this attribute is defined can change the value of this attribute to a value other than the one currently in effect.

Usage in TimesTen Scaleout and TimesTen Classic

This attribute is supported in TimesTen Classic but not supported in TimesTen Scaleout.

Setting

Set SSLRenegotiationPeriod as follows:

Where to set the attribute How the attribute is represented Setting

C or Java programs or UNIX and Linux systems odbc.ini file in TimesTen Classic

SSLRenegotiationPeriod

An integer representing the number of minutes to wait to for session renegotiation.

0 - indicates that the time period is not used to renegotiate session start (the default)

Windows ODBC Data Source Administrator

Not applicable

SSLRenegotiationSize

The SSLRenegotiationSize attribute specifies a number of megabytes of data transfer in either direction between the client and server, after which session renegotiation is performed.

The default setting is 0, meaning do not renegotiate based on megabytes transferred.

Changes to TimesTen server settings do not occur until the TimesTen server is restarted. To restart the server, use the command ttDaemonAdmin -restartserver.

If both SSLRenegotiationSize and SSLRenegotiationPeriod are set with non-zero values, whichever setting occurs first causes the renegotiation.

See Configuration for TLS for Client/Server in Oracle TimesTen In-Memory Database Security Guide for more details.

Required Privilege

Only a user with operating system privileges on the system DSN in which this attribute is defined can change the value of this attribute to a value other than the one currently in effect.

Usage in TimesTen Scaleout and TimesTen Classic

This attribute is supported in TimesTen Classic but not supported in TimesTen Scaleout.

Setting

Set SSLRenegotiationSize as follows:

Where to set the attribute How the attribute is represented Setting

C or Java programs or UNIX and Linux systems odbc.ini file in TimesTen Classic

SSLRenegotiationSize

An integer representing the number of megabytes of data transfer after which the session restart is renegotiated.

0 - indicates that the size is not used to renegotiate session start (the default)

Windows ODBC Data Source Administrator

Not applicable

Wallet

The Wallet attribute specifies the fully qualified directory path name, where you placed the certificates that you generated (preferably the same directory path as on the client).

There is no default location. If you specify a relative path, it is relative to the timesten_home/info directory.

You must set this attribute for both the client and the server. You must set the same path on both the client and server.

See Configuration for TLS for Client/Server in Oracle TimesTen In-Memory Database Security Guide for more details.

Required Privilege

No privilege is required to change the value of this attribute.

Usage in TimesTen Scaleout and TimesTen Classic

This attribute is supported in both TimesTen Classic and TimesTen Scaleout.

Setting

Set Wallet as follows.

Where to set the attribute How the attribute is represented Setting

C or Java programs or UNIX and Linux systems odbc.ini file in TimesTen Classic or in the database definition (.dbdef) file in TimesTen Scaleout

Wallet

A fully qualified directory path name (no default).

Windows ODBC Data Source Administrator

Wallet field on the Oracle TimesTen Client DSN Setup dialog.

A fully qualified directory path name (no default).