clustered ssl hornetq-configuration.xml

<configuration xmlns="urn:hornetq"
               xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
               xsi:schemaLocation="urn:hornetq /schema/hornetq-configuration.xsd">

   <cluster-user>cluster</cluster-user>
   <cluster-password>pass</cluster-password>
   <paging-directory>/data/hornetq/paging</paging-directory>

   <bindings-directory>/data/hornetq/bindings</bindings-directory>

   <journal-directory>/data/hornetq/journal</journal-directory>

   <journal-min-files>10</journal-min-files>

   <large-messages-directory>/data/hornetq/large-messages</large-messages-directory>

   <connectors>
      <connector name="netty">
         <factory-class>org.hornetq.core.remoting.impl.netty.NettyConnectorFactory</factory-class>
         <param key="host"  value="${hornetq.remoting.netty.host:0.0.0.0}"/>
         <param key="port"  value="${hornetq.remoting.netty.port:61616}"/>
         <param key="ssl-enabled" value="true"/>
         <param key="key-store-path" value="broker.ks"/>
         <param key="key-store-password" value="pass"/>
         <param key="trust-store-path" value="broker.ks"/>
         <param key="trust-store-password" value="pass"/>
      </connector>

      <connector name="mq00d-connector">
         <factory-class>org.hornetq.core.remoting.impl.netty.NettyConnectorFactory</factory-class>
         <param key="host"  value="${hornetq.remoting.netty.host:172.28.60.5}"/>
         <param key="port"  value="${hornetq.remoting.netty.port:61616}"/>
         <param key="ssl-enabled" value="true"/>
         <param key="key-store-path" value="broker.ks"/>
         <param key="key-store-password" value="pass"/>
         <param key="trust-store-path" value="broker.ks"/>
         <param key="trust-store-password" value="pass"/>
      </connector>
      <connector name="mq01d-connector">
         <factory-class>org.hornetq.core.remoting.impl.netty.NettyConnectorFactory</factory-class>
         <param key="host"  value="${hornetq.remoting.netty.host:172.28.60.6}"/>
         <param key="port"  value="${hornetq.remoting.netty.port:61616}"/>
         <param key="ssl-enabled" value="true"/>
         <param key="key-store-path" value="broker.ks"/>
         <param key="key-store-password" value="pass"/>
         <param key="trust-store-path" value="broker.ks"/>
         <param key="trust-store-password" value="pass"/>
      </connector>
      <connector name="mq00k-connector">
         <factory-class>org.hornetq.core.remoting.impl.netty.NettyConnectorFactory</factory-class>
         <param key="host"  value="${hornetq.remoting.netty.host:10.20.88.5}"/>
         <param key="port"  value="${hornetq.remoting.netty.port:61616}"/>
         <param key="ssl-enabled" value="true"/>
         <param key="key-store-path" value="broker.ks"/>
         <param key="key-store-password" value="pass"/>
         <param key="trust-store-path" value="broker.ks"/>
         <param key="trust-store-password" value="pass"/>
      </connector>
      <connector name="mq01k-connector">
         <factory-class>org.hornetq.core.remoting.impl.netty.NettyConnectorFactory</factory-class>
         <param key="host"  value="${hornetq.remoting.netty.host:10.20.88.6}"/>
         <param key="port"  value="${hornetq.remoting.netty.port:61616}"/>
         <param key="ssl-enabled" value="true"/>
         <param key="key-store-path" value="broker.ks"/>
         <param key="key-store-password" value="pass"/>
         <param key="trust-store-path" value="broker.ks"/>
         <param key="trust-store-password" value="pass"/>
      </connector>
   </connectors>

   <acceptors>
<acceptor name="amqp-acceptor">
<factory-class>org.hornetq.core.remoting.impl.netty.NettyAcceptorFactory</factory-class>
<param key="protocol"  value="AMQP"/>
<param key="port"  value="5672"/>
</acceptor>
<acceptor name="stomp-acceptor">
   <factory-class>org.hornetq.core.remoting.impl.netty.NettyAcceptorFactory</factory-class>
   <param key="host"  value="${hornetq.remoting.netty.host:0.0.0.0}"/>
   <param key="protocol"  value="stomp"/>
   <param key="port"  value="61612"/>
         <param key="ssl-enabled" value="true"/>
         <param key="key-store-path" value="client.ks"/>
         <param key="key-store-password" value="pass"/>
</acceptor>

      <acceptor name="netty">
         <factory-class>org.hornetq.core.remoting.impl.netty.NettyAcceptorFactory</factory-class>
         <param key="host"  value="${hornetq.remoting.netty.host:0.0.0.0}"/>
         <param key="port"  value="${hornetq.remoting.netty.port:61616}"/>
         <param key="ssl-enabled" value="true"/>
         <param key="key-store-path" value="broker.ks"/>
         <param key="key-store-password" value="pass"/>
         <param key="trust-store-path" value="broker.ks"/>
         <param key="trust-store-password" value="pass"/>
      </acceptor>
   </acceptors>

   <security-settings>
      <security-setting match="#">
         <permission type="createDurableQueue" roles="cluster"/>
         <permission type="deleteDurableQueue" roles="cluster"/>
         <permission type="createNonDurableQueue" roles="cluster"/>
         <permission type="deleteNonDurableQueue" roles="cluster"/>
         <permission type="consume" roles="cluster"/>
         <permission type="send" roles="cluster"/>
         <permission type="manage" roles="cluster"/>
      </security-setting>
      <security-setting match="jms.*.radius">
         <permission type="createDurableQueue" roles="cluster, radius_producer, radius_consumer"/>
         <permission type="deleteDurableQueue" roles="cluster"/>
         <permission type="createNonDurableQueue" roles="cluster"/>
         <permission type="deleteNonDurableQueue" roles="cluster"/>
         <permission type="consume" roles="cluster, radius_consumer"/>
         <permission type="send" roles="cluster, radius_producer"/>
         <permission type="manage" roles="cluster"/>
      </security-setting>
   </security-settings>

<cluster-connections>
   <cluster-connection name="my-cluster">
      <address>jms</address>
      <connector-ref>netty</connector-ref>
      <check-period>1000</check-period>
      <connection-ttl>5000</connection-ttl>
      <min-large-message-size>50000</min-large-message-size>
      <call-timeout>5000</call-timeout>
      <retry-interval>500</retry-interval>
      <retry-interval-multiplier>1.0</retry-interval-multiplier>
      <max-retry-interval>5000</max-retry-interval>
      <reconnect-attempts>-1</reconnect-attempts>
      <use-duplicate-detection>true</use-duplicate-detection>
      <forward-when-no-consumers>false</forward-when-no-consumers>
      <max-hops>1</max-hops>
      <call-failover-timeout>30000</call-failover-timeout>
      <notification-interval>1000</notification-interval>
      <notification-attempts>2</notification-attempts>
   <static-connectors>
      <connector-ref>mq00d-connector</connector-ref>
      <connector-ref>mq01d-connector</connector-ref>
      <connector-ref>mq00k-connector</connector-ref>
      <connector-ref>mq01k-connector</connector-ref>
   </static-connectors>
   </cluster-connection>
</cluster-connections>


   <address-settings>
      <address-setting match="jms.*.radius">
         <redistribution-delay>1000</redistribution-delay>
         <max-size-bytes>52428800</max-size-bytes>
         <address-full-policy>PAGE</address-full-policy>
      </address-setting>
      <!--default for catch all-->
      <address-setting match="#">
         <dead-letter-address>jms.queue.DLQ</dead-letter-address>
         <expiry-address>jms.queue.ExpiryQueue</expiry-address>
         <redelivery-delay>0</redelivery-delay>
         <max-size-bytes>10485760</max-size-bytes>
         <message-counter-history-day-limit>10</message-counter-history-day-limit>
         <address-full-policy>BLOCK</address-full-policy>
      </address-setting>
   </address-settings>
</configuration>