Apache Kudu Configuration Reference

block cache capacity in MB

Whether the Log/WAL should explicitly call fsync() after each write.

Comma-separated list of directories with data blocks. If this is not specified, fs_wal_dir will be used as the sole data block directory.

Directory with write-ahead logs. If this is not specified, the program will not start. May be the same as fs_data_dirs

Comma-separated list of the RPC addresses belonging to all Masters in this cluster. NOTE: if not specified, configures a non-replicated Master.

Path to the Kerberos Keytab file for this server. Specifying a keytab file will cause the server to kinit, and enable Kerberos to be used to authenticate RPC connections.

Comma-separated list of addresses to bind to for RPC connections. Currently, ephemeral ports (i.e. port 0) are not allowed.

The list of usernames to allow as super users, comma-separated. A '*' entry indicates that all authenticated users are allowed. If this is left unset or blank, the default behavior is that the identity of the daemon itself determines the superuser. If the daemon is logged in from a Keytab, then the local username from the Kerberos principal is used; otherwise, the local Unix username is used.

The list of usernames who may access the cluster, comma-separated. A '*' entry indicates that all authenticated users are allowed.

The location of the debug webserver’s SSL certificate file, in PEM format. If empty, webserver SSL support is not enabled

Port to bind to for the web server

The full path to the private key used as a counterpart to the public key contained in --ssl_server_certificate. If --ssl_server_certificate is set, this option must be set as well.

A Unix command whose output returns the password used to decrypt the Webserver’s certificate private key file specified in --webserver_private_key_file. If the PEM key file is not password-protected, this command will not be invoked. The output of the command will be truncated to 1024 bytes, and then all trailing whitespace will be trimmed before it is used to decrypt the private key

Prefix of log filename - full path is <log_dir>/<log_filename>.[INFO|WARN|ERROR|FATAL]

Size of the maintenance manager thread pool. For spinning disks, the number of threads should not be above the number of devices.

Maximum amount of memory this daemon should use, in bytes. A value of 0 autosizes based on the total system memory. A value of -1 disables all memory limiting.

load flags from file

show help on all flags [tip: all flags can have two dashes]

show version and build info and exit

color messages logged to stderr (if supported by terminal)

If specified, logfiles are written into this directory instead of the default logging directory.

log messages go to stderr instead of logfiles

approx. maximum log file size (in MB). A value of 0 will be silently overridden to 1.

Enables heap profiling for the lifetime of the process. Profile output will be stored in the directory specified by -heap_profile_path. Enabling this option will disable the on-demand/remote server profile handlers.

Output path to store heap profiles. If not set profiles are stored in /tmp/<process-name>.<pid>.<n>.heap.

Unlock flags marked as 'experimental'. These flags are not guaranteed to be maintained across releases of Kudu, and may enable features or behavior known to be unstable. Use at your own risk.

Unlock flags marked as 'unsafe'. These flags are not guaranteed to be maintained across releases of Kudu, and enable features or behavior known to be unsafe. Use at your own risk.

set flags from the environment [use 'export FLAGS_flag1=value']

set flags from the environment if present

comma-separated list of flag names that it is okay to specify on the command line even if the program does not define a flag with that name. IMPORTANT: flags in this list that have arguments MUST use the flag=value format

show help on modules whose name contains the specified substr

show help on the modules named by this flag value

show help on all modules in the main package

show help on only the main module for this program

produce an xml version of help

Put additional links to the log files in this directory

Prepend the log prefix to the start of each log line

Messages logged at a lower level than this don’t actually get logged anywhere

log messages at or above this level are copied to stderr in addition to logfiles. This flag obsoletes --alsologtostderr.

Stop attempting to log to disk if the disk is full.

Symbolize the stack trace in the tombstone

Show all VLOG(m) messages for m ⇐ this. Overridable by --vmodule.

per-module verbose level. Argument is a comma-separated list of <module name>=<log level>. <module name> is a glob pattern, matched against the filename base (that is, name ignoring .cc/.h./-inl.h). <log level> overrides any value given by --v.

block cache capacity in MB

Whether the Log/WAL should explicitly call fsync() after each write.

Comma-separated list of directories with data blocks. If this is not specified, fs_wal_dir will be used as the sole data block directory.

Directory with write-ahead logs. If this is not specified, the program will not start. May be the same as fs_data_dirs

Path to the Kerberos Keytab file for this server. Specifying a keytab file will cause the server to kinit, and enable Kerberos to be used to authenticate RPC connections.

Comma-separated list of addresses to bind to for RPC connections. Currently, ephemeral ports (i.e. port 0) are not allowed.

The list of usernames to allow as super users, comma-separated. A '*' entry indicates that all authenticated users are allowed. If this is left unset or blank, the default behavior is that the identity of the daemon itself determines the superuser. If the daemon is logged in from a Keytab, then the local username from the Kerberos principal is used; otherwise, the local Unix username is used.

The list of usernames who may access the cluster, comma-separated. A '*' entry indicates that all authenticated users are allowed.

The location of the debug webserver’s SSL certificate file, in PEM format. If empty, webserver SSL support is not enabled

Port to bind to for the web server

The full path to the private key used as a counterpart to the public key contained in --ssl_server_certificate. If --ssl_server_certificate is set, this option must be set as well.

A Unix command whose output returns the password used to decrypt the Webserver’s certificate private key file specified in --webserver_private_key_file. If the PEM key file is not password-protected, this command will not be invoked. The output of the command will be truncated to 1024 bytes, and then all trailing whitespace will be trimmed before it is used to decrypt the private key

Comma separated addresses of the masters which the tablet server should connect to. The masters do not read this flag — configure the masters separately using 'rpc_bind_addresses'.

Prefix of log filename - full path is <log_dir>/<log_filename>.[INFO|WARN|ERROR|FATAL]

Size of the maintenance manager thread pool. For spinning disks, the number of threads should not be above the number of devices.

Maximum amount of memory this daemon should use, in bytes. A value of 0 autosizes based on the total system memory. A value of -1 disables all memory limiting.

load flags from file

show help on all flags [tip: all flags can have two dashes]

show version and build info and exit

color messages logged to stderr (if supported by terminal)

If specified, logfiles are written into this directory instead of the default logging directory.

log messages go to stderr instead of logfiles

approx. maximum log file size (in MB). A value of 0 will be silently overridden to 1.

Enables heap profiling for the lifetime of the process. Profile output will be stored in the directory specified by -heap_profile_path. Enabling this option will disable the on-demand/remote server profile handlers.

Output path to store heap profiles. If not set profiles are stored in /tmp/<process-name>.<pid>.<n>.heap.

Unlock flags marked as 'experimental'. These flags are not guaranteed to be maintained across releases of Kudu, and may enable features or behavior known to be unstable. Use at your own risk.

Unlock flags marked as 'unsafe'. These flags are not guaranteed to be maintained across releases of Kudu, and enable features or behavior known to be unsafe. Use at your own risk.

set flags from the environment [use 'export FLAGS_flag1=value']

set flags from the environment if present

comma-separated list of flag names that it is okay to specify on the command line even if the program does not define a flag with that name. IMPORTANT: flags in this list that have arguments MUST use the flag=value format

show help on modules whose name contains the specified substr

show help on the modules named by this flag value

show help on all modules in the main package

show help on only the main module for this program

produce an xml version of help

Put additional links to the log files in this directory

Prepend the log prefix to the start of each log line

Messages logged at a lower level than this don’t actually get logged anywhere

log messages at or above this level are copied to stderr in addition to logfiles. This flag obsoletes --alsologtostderr.

Stop attempting to log to disk if the disk is full.

Symbolize the stack trace in the tombstone

Show all VLOG(m) messages for m ⇐ this. Overridable by --vmodule.

per-module verbose level. Argument is a comma-separated list of <module name>=<log level>. <module name> is a glob pattern, matched against the filename base (that is, name ignoring .cc/.h./-inl.h). <log level> overrides any value given by --v.

Which type of block cache to use for caching data. Valid choices are 'DRAM' or 'NVM'. DRAM, the default, caches data in regular memory. 'NVM' caches data in a memory-mapped file using the NVML library.

If a column compression codec is configured, but the codec is unable to achieve a compression ratio at least as good as the configured value, then the data will be written uncompressed. This will reduce CPU overhead on the read side at the expense of a small amount of extra space if the codec encounters portions of data that are not easily compressible.

The default block size to use in cfiles

Default cfile block compression codec.

What to do to cfile blocks when writing is finished. Possible values are 'close', 'flush', or 'nothing'.

Whether to print the LLVM IR for generated functions

Whether to dump the disassembly of the machine code for generated functions.

Number of entries which may be stored in the code generation cache.

Whether to print time that each code generation request took.

The maximum per-tablet RPC batch size when updating peers.

Seconds that a leader is unable to successfully heartbeat to a follower after which the follower is considered to be failed and evicted from the config.

Maximum size of the group commit queue in bytes

Codec to use for compressing WAL segments.

The maximum number of past log segments to keep at all times for the purposes of catching up other peers.

The minimum number of past log segments to keep at all times, regardless of what is required for durability. Must be at least 1.

Server-wide version of 'log_cache_size_limit_mb'. The total memory used for caching log entries across all tablets is kept under this threshold.

The total per-tablet size of consensus entries which may be kept in memory. The log cache attempts to keep all entries which have not yet been replicated to all followers in memory, but if the total size of those entries exceeds this limit within an individual tablet, the oldest will be evicted.

Whether the WAL segments preallocation should happen asynchronously

Whether the WAL should preallocate the entire segment before writing to it

The default segment size for log roll-overs, in MB

Whether to evict followers from the Raft config that have fallen too far behind the leader’s log to catch up normally or have been unreachable by the leader for longer than follower_unavailable_considered_failed_sec

Maximum time to sleep in between leader election retries, in addition to the regular timeout. When leader election fails the interval in between retries increases exponentially, up to this value.

Maximum heartbeat periods that the leader can fail to heartbeat in before we consider the leader to be failed. The total failure timeout in milliseconds is raft_heartbeat_interval_ms times leader_failure_max_missed_heartbeat_periods. The value passed to this flag may be fractional.

The mean failure-checking interval of the randomized failure monitor. If this is configured to -1 (the default), uses the value of 'raft_heartbeat_interval_ms'.

The standard deviation of the failure-checking interval of the randomized failure monitor. If this is configured to -1 (the default), this is set to half of the mean check interval.

When enabled, candidates will call a pre-election before running a real leader election.

The heartbeat interval for Raft replication. The leader produces heartbeats to followers at this interval. The followers expect a heartbeat at this interval and consider a leader to have failed if it misses several in a row.

The maximum raft heartbeat periods since the tablet has seen safe time advanced before refusing scans at snapshots that aren’t yet safe and forcing clients to try again.

Whether to enable the advancement of "safe" time in the absense of write operations

The maximum amount of time we allow safe time to lag behind the requested timestampbefore forcing the client to retry, in milliseconds.

Coalesce synchronization of data during CloseBlocks()

Maximum number of open file descriptors to be used for data blocks. If 0, there is no limit. If -1, Kudu will use 40% of its resource limit as per getrlimit(). This is a soft limit.

Number of seconds we cache the full-disk status in the block manager. During this time, writes to the corresponding root path will not be attempted.

Which block manager to use for storage. Valid options are 'file' and 'log'.

Ensure hole punching is supported by the underlying filesystem

Maximum number of blocks (soft) of a log container. Use 0 for no limit. Use -1 for no limit except in the case of a kernel bug with hole punching on ext4 (see KUDU-1508 for details).

Maximum size (soft) of a log container

Number of bytes to preallocate in a log container when creating new blocks. Set to 0 to disable preallocation

Whether the master should delete tablets reported by tablet servers for which there are no corresponding records in the master’s metadata. Use this option with care; it may cause permanent tablet data loss under specific (and rare) cases of master failures!

Default number of replicas for tables that do not have the num_replicas set.

Amount of time to give a newly-elected leader master to load the previous master’s metadata and become active. If this time is exceeded, the node crashes.

Timeout used for the master→TS async rpc calls.

The number of tablets per TS that can be requested for a new table.

Maximum time in milliseconds which clients may cache table locations. New range partitions may not be visible to existing client instances until after waiting for the ttl period.

Timeout used by the master when attempting to create tablet replicas during table creation.

After this amount of time, the master will stop attempting to contact a tablet server in order to perform operations such as deleting a tablet.

Period of time for which an issued authentication token is valid. It’s not possible to renew a token, hence the token validity interval defines the longest possible lifetime of an external job which uses a token for authentication.

Timeout for retrieving master registration over RPC.

Number of seconds between consecutive activations of newly generated TSKs (Token Signing Keys).

validity interval for self-signed root CA certifcate issued by Kudu IPKI (Internal Private Key Infrastructure, a.k.a. Internal Kudu CA)

the number of bits for self-signed root CA cert used by Kudu IPKI (Internal Private Key Infrastructure, a.k.a. Internal Kudu CA)

validity interval for server certificates issued by Kudu IPKI (Internal Private Key Infrastructure, a.k.a. Internal Kudu CA)

The period of time that a Master can go without receiving a heartbeat from a tablet server before considering it unresponsive. Unresponsive servers are not selected when assigning replicas during table creation or re-replication.

Socket backlog parameter used when listening for RPC connections. This defines the maximum length to which the queue of pending TCP connections inbound to the RPC server may grow. If a connection request arrives when the queue is full, the client may receive an error. Higher values may help the server ride over bursts of new inbound connection requests.

Path to the PEM encoded X509 certificate of the trusted external certificate authority. The provided certificate should be the root issuer of the certificate passed in '--rpc_certificate_file'.

Path to a PEM encoded X509 certificate to use for securing RPC connections with SSL/TLS. If set, '--rpc_private_key_file' and '--rpc_ca_certificate_file' must be set as well.

If an RPC connection from a client is idle for this amount of time, the server will disconnect the client.

Path to a PEM encoded private key paired with the certificate from '--rpc_certificate_file'

Whether to encrypt data transfer on RPC connections that stay within a single host. Encryption here is likely to offer no additional security benefit since only a local 'root' user could intercept the traffic, and wire encryption does not suitably protect against such an attacker.

If enabled, dump traces of all RPC negotiations to the log

The maximum number of cycles for which an RPC callback should be allowed to run without emitting a warning. (Advanced debugging option)

Timeout for negotiating an RPC connection.

Maximum amount of time, in milliseconds, the server "remembers" a client for the purpose of caching its responses. After this period without hearing from it, the client is no longer remembered and the memory occupied by its responses is reclaimed. Retries of requests older than 'remember_clients_ttl_ms' are treated as new ones.

Maximum amount of time, in milliseconds, the server "remembers" a response to a specific request for a client. After this period has elapsed, the response may have been garbage collected and the client might get a response indicating the request is STALE.

If true, dump all RPC traces at INFO level

The maximum size of a message that any RPC that the server will accept. Must be at least 1MB.

Kerberos principal that this daemon will log in as. The special token _HOST will be replaced with the FQDN of the local host.

the number of bits for server cert’s private key. The server cert is used for TLS connections to and from clients and other servers.

The cipher suite preferences to use for TLS-secured RPC connections. Uses the OpenSSL cipher preference list format. See man (1) ciphers for more information.

The minimum protocol version to allow when for securing RPC connections with TLS. May be one of 'TLSv1', 'TLSv1.1', or 'TLSv1.2'.

Number of bits in RSA keys used for token signing.

The maximum number of bytes to display on the debug webserver’s log page

Maximum allowed clock synchronization error as reported by NTP before the server will abort.

Number of RPC acceptor threads for each bound address

Number of RPC worker threads to run

Default length of queue for incoming RPC requests

Maximum number of connection negotiation threads.

Minimum number of connection negotiation threads.

Number of libev reactor threads to start.

Whether to enable the web server on this daemon. NOTE: disabling the web server is also likely to prevent monitoring systems from properly capturing metrics.

Interval (in milliseconds) at which the server will dump its metrics to a local log file. The log files are located in the same directory as specified by the -log_dir flag. If this is not a positive value, then metrics logging will be disabled.

The maximum length of a POST request that will be accepted by the embedded web server.

The webserver will add an 'X-Frame-Options' HTTP header with this value to all responses. This can help prevent clickjacking attacks.

Files under <webserver_doc_root> are accessible via the debug webserver. Defaults to $KUDU_HOME/www, or if $KUDU_HOME is not set, disables the document root

If true, webserver may serve static files from the webserver_doc_root

Interface to start debug webserver on. If blank, webserver binds to 0.0.0.0

Maximum number of threads to start for handling web server requests

The target size for DiskRowSets during flush/compact when the budgeted compaction policy is used

Approximation ratio allowed for optimal compaction calculation. A value of 1.05 indicates that the policy may use an approximate result if it is known to be within 5% of the optimal solution.

Block size for delta files. In the future, this may become configurable on a per-table basis.

The compression codec used when writing deltafiles.

Block size used for composite key indexes.

Minimum ratio of sizeof(deltas) to sizeof(base data) before a major compaction can run (Advanced option)

How many delta stores are required before forcing a minor delta compaction (Advanced option)

Block size of the bloom filters used for tablet keys.

Target false-positive rate (between 0 and 1) to size tablet key bloom filters. A lower false positive rate may reduce the number of disk seeks required in heavy insert workloads, at the expense of more space and RAM required for bloom filters.

Budget for a single compaction

Number of seconds to retain tablet history. Reads initiated at a snapshot that is older than this age will be rejected. To disable history removal, set to -1.

Burst factor for write RPC throttling. The maximum rate the throttler allows within a token refill period (100ms) equals burst factor multiply base rate.

Maximum write RPC IO rate (byte/s) allowed for a tablet, write RPC exceeding this limit will be throttled. 0 means no limit.

Maximum write RPC rate (op/s) allowed for a tablet, write RPC exceeding this limit will be throttled. 0 means no limit.

The maximum number of milliseconds we will spend initializing UNDO delta blocks per invocation of UndoDeltaBlockGCOp. Existing delta blocks must be initialized once per process startup to determine when they can be deleted.

Size at which MemRowSet flushes are triggered. A MRS can still flush below this threshold if it if hasn’t flushed in a while, or if the server-wide memory limit has been reached.

Number of seconds after which a non-empty MemRowSet will become flushable even if it is not large.

Maximum amount of memory that may be consumed by all in-flight transactions belonging to a particular tablet. When this limit is reached, new transactions will be rejected and clients will be forced to retry them. If -1, transaction memory tracking is disabled.

Interval at which the TS heartbeats to the master.

Maximum number of consecutive heartbeat failures until the Tablet Server backs off to the normal heartbeat interval, rather than retrying.

Timeout used for the TS→Master heartbeat RPCs.

Number of milliseconds of inactivity allowed for a scannerbefore it may be expired

The number of rows to batch for servicing scan requests.

The default size for batches of scan results

The maximum batch size that a client may request for scan results.

The maximum amount of time (in milliseconds) we’ll hang a scanner thread waiting for safe time to advance or transactions to commit, even if its deadline allows waiting longer.

Number of threads available to copy tablets from remote servers.

Number of threads available to open tablets during startup. If this is set to 0 (the default), then the number of bootstrap threads will be set based on the number of data directories. If the data directories are on some very fast storage device such as SSD or a RAID array, it may make sense to manually tune this.

Trace pattern specifying which trace events should be dumped directly to the console

Use fsync(2) instead of fdatasync(2) for synchronizing dirty data to disk.

Never fsync() anything to disk. This is used by certain test cases to speed up runtime. This is very unsafe to use in production.

Kill the process if an I/O operation results in EIO

Period of time (in ms) between removing expired file cache descriptors

Disable core dumps when this process crashes.

Comma-separated list of redactions. Supported redactions are 'flag', 'log' and 'all'. If 'flag' is specified, configuration flags which may include sensitive data will be redacted whenever server configuration is emitted. If 'log' is specified, row data will be redacted from log and error messages. If 'all' is specified, all of above will be redacted.

The umask that will be used when creating files and directories. Permissions of top-level data directories will also be modified at start-up to conform to the given umask. Changing this value may enable unauthorized local users to read or modify data stored by Kudu.

Maximum number of log files to retain per severity level. The most recent log files are retained. If set to 0, all log files are retained.

The (exclusive) minimum number of megabytes of ancient data on disk, per tablet, needed to prioritize deletion of that data.

The probability that we will prioritize data GC over performance improvement operations. If set to 1.0, we will always prefer to delete old data before running performance improvement operations such as delta compaction.

The target maximum size of logs to be replayed at startup. If a tablet has in-memory operations that are causing more than this size of logs to be retained, then the maintenance manager will prioritize flushing these operations to disk.

Percentage of the hard memory limit that this daemon may consume before memory throttling of writes begins. The greater the excess, the higher the chance of throttling. In general, a lower soft limit leads to smoother write latencies but decreased throughput, and vice versa for a higher soft limit.

Percentage of the hard memory limit that this daemon may consume before WARNING level messages are periodically logged.

Maximum percentage of the RSS that tcmalloc is allowed to use for reserved but unallocated memory.

The minimum number of milliseconds a metric will be kept for after it is no longer active. (Advanced option)

Whether to enable minidump generation upon process crash or SIGUSR1. Currently only supported on Linux systems.

Size limit hint for minidump files in KB. If a minidump exceeds this value, then breakpad will reduce the stack memory it collects for each thread from 8KB to 2KB. However it will always include the full stack memory for the first 20 threads, including the thread that crashed.

IP to bind to when making outgoing socket connections. This must be an IP address of the form A.B.C.D, not a hostname. Advanced parameter, subject to change.

The number of times that the NVM cache will retry attempts to allocate memory for new entries. In between attempts, a cache entry will be evicted.

The path at which the NVM cache will try to allocate its memory. This can be a tmpfs or ramfs for testing purposes.

Drop in-memory buffers of log contents. Logs can grow very quickly and they are rarely read before they need to be evicted from memory. Instead, drop them from memory as soon as they are flushed to disk.

Emit a backtrace when logging at file:linenum.

Buffer log messages logged at this level or lower (-1 means don’t buffer; 0 means buffer INFO only; …​)

Buffer log messages for at most this many seconds

Which type of block cache to use for caching data. Valid choices are 'DRAM' or 'NVM'. DRAM, the default, caches data in regular memory. 'NVM' caches data in a memory-mapped file using the NVML library.

If a column compression codec is configured, but the codec is unable to achieve a compression ratio at least as good as the configured value, then the data will be written uncompressed. This will reduce CPU overhead on the read side at the expense of a small amount of extra space if the codec encounters portions of data that are not easily compressible.

The default block size to use in cfiles

Default cfile block compression codec.

What to do to cfile blocks when writing is finished. Possible values are 'close', 'flush', or 'nothing'.

Whether to print the LLVM IR for generated functions

Whether to dump the disassembly of the machine code for generated functions.

Number of entries which may be stored in the code generation cache.

Whether to print time that each code generation request took.

The maximum per-tablet RPC batch size when updating peers.

Seconds that a leader is unable to successfully heartbeat to a follower after which the follower is considered to be failed and evicted from the config.

Maximum size of the group commit queue in bytes

Codec to use for compressing WAL segments.

The maximum number of past log segments to keep at all times for the purposes of catching up other peers.

The minimum number of past log segments to keep at all times, regardless of what is required for durability. Must be at least 1.

Server-wide version of 'log_cache_size_limit_mb'. The total memory used for caching log entries across all tablets is kept under this threshold.

The total per-tablet size of consensus entries which may be kept in memory. The log cache attempts to keep all entries which have not yet been replicated to all followers in memory, but if the total size of those entries exceeds this limit within an individual tablet, the oldest will be evicted.

Whether the WAL segments preallocation should happen asynchronously

Whether the WAL should preallocate the entire segment before writing to it

The default segment size for log roll-overs, in MB

Whether to evict followers from the Raft config that have fallen too far behind the leader’s log to catch up normally or have been unreachable by the leader for longer than follower_unavailable_considered_failed_sec

Maximum time to sleep in between leader election retries, in addition to the regular timeout. When leader election fails the interval in between retries increases exponentially, up to this value.

Maximum heartbeat periods that the leader can fail to heartbeat in before we consider the leader to be failed. The total failure timeout in milliseconds is raft_heartbeat_interval_ms times leader_failure_max_missed_heartbeat_periods. The value passed to this flag may be fractional.

The mean failure-checking interval of the randomized failure monitor. If this is configured to -1 (the default), uses the value of 'raft_heartbeat_interval_ms'.

The standard deviation of the failure-checking interval of the randomized failure monitor. If this is configured to -1 (the default), this is set to half of the mean check interval.

When enabled, candidates will call a pre-election before running a real leader election.

The heartbeat interval for Raft replication. The leader produces heartbeats to followers at this interval. The followers expect a heartbeat at this interval and consider a leader to have failed if it misses several in a row.

The maximum raft heartbeat periods since the tablet has seen safe time advanced before refusing scans at snapshots that aren’t yet safe and forcing clients to try again.

Whether to enable the advancement of "safe" time in the absense of write operations

The maximum amount of time we allow safe time to lag behind the requested timestampbefore forcing the client to retry, in milliseconds.

Coalesce synchronization of data during CloseBlocks()

Maximum number of open file descriptors to be used for data blocks. If 0, there is no limit. If -1, Kudu will use 40% of its resource limit as per getrlimit(). This is a soft limit.

Number of seconds we cache the full-disk status in the block manager. During this time, writes to the corresponding root path will not be attempted.

Which block manager to use for storage. Valid options are 'file' and 'log'.

Ensure hole punching is supported by the underlying filesystem

Maximum number of blocks (soft) of a log container. Use 0 for no limit. Use -1 for no limit except in the case of a kernel bug with hole punching on ext4 (see KUDU-1508 for details).

Maximum size (soft) of a log container

Number of bytes to preallocate in a log container when creating new blocks. Set to 0 to disable preallocation

Socket backlog parameter used when listening for RPC connections. This defines the maximum length to which the queue of pending TCP connections inbound to the RPC server may grow. If a connection request arrives when the queue is full, the client may receive an error. Higher values may help the server ride over bursts of new inbound connection requests.

Path to the PEM encoded X509 certificate of the trusted external certificate authority. The provided certificate should be the root issuer of the certificate passed in '--rpc_certificate_file'.

Path to a PEM encoded X509 certificate to use for securing RPC connections with SSL/TLS. If set, '--rpc_private_key_file' and '--rpc_ca_certificate_file' must be set as well.

If an RPC connection from a client is idle for this amount of time, the server will disconnect the client.

Path to a PEM encoded private key paired with the certificate from '--rpc_certificate_file'

Whether to encrypt data transfer on RPC connections that stay within a single host. Encryption here is likely to offer no additional security benefit since only a local 'root' user could intercept the traffic, and wire encryption does not suitably protect against such an attacker.

If enabled, dump traces of all RPC negotiations to the log

The maximum number of cycles for which an RPC callback should be allowed to run without emitting a warning. (Advanced debugging option)

Timeout for negotiating an RPC connection.

Maximum amount of time, in milliseconds, the server "remembers" a client for the purpose of caching its responses. After this period without hearing from it, the client is no longer remembered and the memory occupied by its responses is reclaimed. Retries of requests older than 'remember_clients_ttl_ms' are treated as new ones.

Maximum amount of time, in milliseconds, the server "remembers" a response to a specific request for a client. After this period has elapsed, the response may have been garbage collected and the client might get a response indicating the request is STALE.

If true, dump all RPC traces at INFO level

The maximum size of a message that any RPC that the server will accept. Must be at least 1MB.

Kerberos principal that this daemon will log in as. The special token _HOST will be replaced with the FQDN of the local host.

the number of bits for server cert’s private key. The server cert is used for TLS connections to and from clients and other servers.

The cipher suite preferences to use for TLS-secured RPC connections. Uses the OpenSSL cipher preference list format. See man (1) ciphers for more information.

The minimum protocol version to allow when for securing RPC connections with TLS. May be one of 'TLSv1', 'TLSv1.1', or 'TLSv1.2'.

The maximum number of bytes to display on the debug webserver’s log page

Maximum allowed clock synchronization error as reported by NTP before the server will abort.

Number of RPC acceptor threads for each bound address

Number of RPC worker threads to run

Default length of queue for incoming RPC requests

Maximum number of connection negotiation threads.

Minimum number of connection negotiation threads.

Number of libev reactor threads to start.