Skip to main content

HTTP client properties

HTTP client properties allow you to configure the connection from Trino to external services using HTTP.

The following properties can be used after adding the specific prefix to the property. For example, for OAuth 2.0 authentication, you can enable HTTP for interactions with the external OAuth 2.0 provider by adding the prefix oauth2-jwk to the http-client.connect-timeout property, and increasing the connection timeout to ten seconds by setting the value to 10:

oauth2-jwk.http-client.connect-timeout=10s

The following prefixes are supported:

General properties​

http-client.connect-timeout​

Timeout value for establishing the connection to the external service.

max-content-length​

Maximum content size for each HTTP request and response.

http-client.request-timeout​

Timeout value for the overall request.

TLS and security properties​

http-client.https.excluded-cipher​

A comma-separated list of regexes for the names of cipher algorithms to exclude.

http-client.https.included-cipher​

A comma-separated list of regexes for the names of the cipher algorithms to use.

http-client.https.hostname-verification​

Verify that the server hostname matches the server DNS name in the SubjectAlternativeName (SAN) field of the certificate.

http-client.key-store-password​

Password for the keystore.

http-client.key-store-path​

File path on the server to the keystore file.

http-client.secure-random-algorithm​

Set the secure random algorithm for the connection. The default varies by operating system. Algorithms are specified according to standard algorithm name documentation.

Possible types include NativePRNG, NativePRNGBlocking, NativePRNGNonBlocking, PKCS11, and SHA1PRNG.

http-client.trust-store-password​

Password for the truststore.

http-client.trust-store-path​

File path on the server to the truststore file.

Proxy properties​

http-client.http-proxy​

Host and port for an HTTP proxy with the format example.net:8080.

http-client.http-proxy.user​

Username for basic authentication with the HTTP proxy.

http-client.http-proxy.password​

Password for basic authentication with the HTTP proxy.

http-client.http-proxy.secure​

Enable HTTPS for the proxy.

http-client.socks-proxy​

Host and port for a SOCKS proxy.

Request logging​

http-client.log.compression.enabled​

Enable log file compression. The client uses the .gz format for log files.

http-client.log.enabled​

Enable logging of HTTP requests.

http-client.log.flush-interval​

Frequency of flushing the log data to disk.

http-client.log.max-history​

Retention limit of log files in days. Files older than the max-history are deleted when the HTTP client creates files for new logging periods.

http-client.log.max-size​

Maximum total size of all log files on disk.

http-client.log.path​

Sets the path of the log files. All log files are named http-client.log, and have the prefix of the specific HTTP client added. For example, jwk-http-client.log.

http-client.log.queue-size​

Size of the HTTP client logging queue.