CA API Gateway 9.1

9.4 9.1

Service Cluster Properties

The following cluster properties configure services on the . 
gateway94
The following cluster properties configure services on the 
API Gateway
. 
Property
Description
service.anonFederatedPolicies
Controls policies with federated identity assertions. Value is a Boolean.
  • true
     = Treats a policy as if it contains no identity assertions to check whether a policy allows anonymous access. In an identity bridging environment, this allows a
    API Gateway
     - XML VPN Client from another trust domain to download the policy for a federated service.
  • false
     = Maintains the federated identity assertions as is.
Default:
true
service.disabledDownloads
Controls which requestors can download WSDL and policy documents for disabled services. The values are:
  • none
     = forbid all requestors
  • all
     = allow all requestors
  • passthrough
     = permit requestors defined by the cluster property
    service.passthroughdownloads
     (described next)
Default:
none
serviceMetrics.enabled
Controls whether the Gateway collects service metrics in the Gateway database. View these metrics in the Service Metrics window of the Gateway Dashboard.
  • true
     = Metrics are collected. The Gateway adds the log entry:
    INFO: Enabling service metrics collection
    .
  • false
     = Metrics are not collected. The Gateway adds the log entry:
    INFO: Disabling service metrics collection
    . A setting of "false" also makes new data unavailable for the Collect WSDM Metrics Assertion (if present) and stops further notifications for metrics from being sent.
Default:
true
The
serviceMetrics.enabled
 cluster property does
not
 affect the collection of metrics data being sent to an external location. Once the Gateway is configured for external metrics, these metrics are collected even if the cluster property is disabled. 
serviceMetricsEventListener.maxPoolSize
The maximum number of worker threads for the service metrics event listener. Minimum is 1.
Default:
25
service.passthroughdownloads
Remote IPs of requestors allowed to download WSDL and policy documents without credentials. Separate each entry with a space. You may optionally add a netmask to the IP address. Both IPv4 and IPv6 addresses are supported.
Default:
127.0.0.1
The default value allows only pass-through from the localhost. The full IP address of a client must match one of the items in the list before a download is permitted.
Sample values
:
  • 127.0.0.1 192.168.1 allows pass-through from localhost and from any remote address beginning with 192.168.1
  • 127.0.0.1 10.5.4.41 192.168.1 allows pass-through from localhost, from 10.5.4.41, and from any remote address beginning with 192.168.1
  • 10.7.32.0/24 allows pass-through from remote addresses 10.7.32.0 with a 24-bit network mask (which translates to a permitted address range of 10.7.32.0 to 10.7.32.254)
For details, see Manage Interfaces.
service.validateWssTimestamps
Controls whether the built-in services (token service, policy service) on the
API Gateway
 validate WS-Security timestamps. Value is a Boolean.
Default:
true
service.wsdlDependenciesEnabled
Controls whether download of WSDL dependencies (WSDL/Schema) is permitted.
  • true
     =  Available WSDL dependencies can be downloaded.
  • false
     = Only the primary WSDL document for a service is served by the
    API Gateway
    .
Default:
false
Set this cluster property to "true" to permit a WSDL with dependencies to be published to UDDI.
service.wsdlQueryEnabled
Controls whether the download of WSDL using the "?wsdl" URL suffix is permitted. When enabled, the WSDL document can be downloaded using the resolution path of the service. Value is a Boolean.
Default:
true
For details, see Downloading WSDL Documents.

Content feedback and comments