Does SurrealDB support hot-reloading of TLS certificates without server restarts?
0 reputation · 30 May 2020, 08:56 UTC
SurrealDB utilizes rustls for managing TLS connections and certificate validation. In production environments, maintaining high availability during certificate rotation is critical to avoid downtime.
Current documentation for SurrealDB (v1.x/v2.x) specifies the configuration of TLS certificates via the server startup flags, but it is unclear if the server monitors the filesystem for changes to these certificate files or if it loads them only once into memory during the initial boot sequence.
If the server does not automatically reload updated certificates, rotation requires a full process restart, which may impact cluster stability or client connectivity.
Technical Questions
- Does the SurrealDB server automatically detect and reload TLS certificates when the underlying files are updated on disk?
- If hot-reloading is not supported, is there a documented administrative command or API endpoint to trigger a certificate refresh without restarting the process?