{
  "id": "config",
  "title": "rladmin cluster config",
  "url": "https://redis.io/docs/latest/operate/rs/7.8/references/cli-utilities/rladmin/cluster/config/",
  "summary": "Updates the cluster's configuration.",
  "content": "\nUpdates the cluster configuration.\n\n```sh\n rladmin cluster config \n        [ auditing db_conns audit_protocol { TCP | local } \n           audit_address \u003caudit_address\u003e audit_port \u003caudit_port\u003e ]\n        [bigstore_driver {speedb | rocksdb} ]\n        [ control_cipher_suites \u003cBoringSSL cipher list\u003e ]\n        [ cm_port \u003cnumber\u003e ]\n        [ cm_session_timeout_minutes \u003cminutes\u003e ]\n        [ cnm_http_port \u003cnumber\u003e ]\n        [ cnm_https_port \u003cnumber\u003e ]\n        [ crdb_coordinator_port \u003cnumber\u003e ]\n        [ data_cipher_list \u003copenSSL cipher list\u003e ]\n        [ data_cipher_suites_tls_1_3 \u003copenSSL cipher list\u003e ]\n        [ debuginfo_path \u003cfilepath\u003e ]\n        [ encrypt_pkeys { enabled | disabled } ]\n        [ envoy_admin_port \u003cnew-port\u003e ]\n        [ envoy_mgmt_server_port \u003cnew-port\u003e ]\n        [ external_ipv6 { enabled | disabled } ]\n        [ gossip_envoy_admin_port \u003cnew-port\u003e ]\n        [ handle_redirects { enabled | disabled } ]\n        [ handle_metrics_redirects { enabled | disabled } ]\n        [ http_support { enabled | disabled } ]\n        [ ipv6 { enabled | disabled } ]\n        [ min_control_TLS_version { 1.2 | 1.3 } ]\n        [ min_data_TLS_version { 1.2 | 1.3 } ]\n        [ min_sentinel_TLS_version { 1.2 | 1.3 } ]\n        [ reserved_ports \u003clist of ports/port ranges\u003e ]\n        [ s3_url \u003cURL\u003e ]\n        [ s3_ca_cert \u003cfilepath\u003e ]\n        [ sentinel_tls_mode { allowed | required | disabled } ]\n        [ sentinel_cipher_suites \u003cgolang cipher list\u003e ]\n        [ services { alert_mgr | cm_server | crdb_coordinator | \n                     crdb_worker | entraid_agent_mgr | \n                     ldap_agent_mgr | mdns_server | pdns_server | \n                     stats_archiver } { enabled | disabled } ]\n        [ upgrade_mode { enabled | disabled } ]\n```\n\n### Parameters\n\n| Parameter | Type/Value | Description |\n|-----------|------------|-------------|\n| audit_address | string | TCP/IP address where a listener can capture [audit event notifications]() |\n| audit_port | string | Port where a listener can capture [audit event notifications]() |\n| audit_protocol | `tcp`\u003cbr/\u003e`local` | Protocol used for [audit event notifications]()\u003cbr/\u003eFor production systems, only `tcp` is supported. |\n| control_cipher_suites | list of ciphers | Cipher suites used for TLS connections to the Cluster Manager UI (specified in the format understood by the BoringSSL library)\u003cbr /\u003e(previously named `cipher_suites`) |\n| cm_port | integer | UI server listening port |\n| cm_session_timeout_minutes | integer | Timeout in minutes for the CM session\n| cnm_http_port | integer | HTTP REST API server listening port |\n| cnm_https_port | integer | HTTPS REST API server listening port |\n| crdb_coordinator_port | integer, (range:\u0026nbsp;1024-65535) (default:\u0026nbsp;9081) | CRDB coordinator port |\n| data_cipher_list | list of ciphers | Cipher suites used by the the data plane (specified in the format understood by the OpenSSL library) |\n| data_cipher_suites_tls_1_3 |  list of ciphers | Specifies the enabled TLS 1.3 ciphers for the data plane |\n| debuginfo_path | filepath | Local directory to place generated support package files |\n| encrypt_pkeys | `enabled`\u003cbr /\u003e`disabled` | Enable or turn off encryption of private keys |\n| envoy_admin_port | integer, (range:\u0026nbsp;1024-65535) | Envoy admin port. Changing this port during runtime might result in an empty response because envoy serves as the cluster gateway.|\n| envoy_mgmt_server_port | integer, (range:\u0026nbsp;1024-65535) | Envoy management server port|\n| external_ipv6 | `enabled`\u003cbr /\u003e`disabled` | Enable or disable use of IPv6 for external cluster communications |\n| gossip_envoy_admin_port | integer, (range:\u0026nbsp;1024-65535) | Gossip envoy admin port|\n| handle_redirects | `enabled`\u003cbr /\u003e`disabled` | Enable or turn off handling DNS redirects when DNS is not configured and running behind a load balancer |\n| handle_metrics_redirects | `enabled`\u003cbr /\u003e`disabled` | Enable or turn off handling cluster redirects internally for Metrics API |\n| http_support | `enabled`\u003cbr /\u003e`disabled` | Enable or turn off using HTTP for REST API connections |\n| ipv6 | `enabled`\u003cbr /\u003e`disabled` | Enable or turn off IPv6 connections to the Cluster Manager UI (deprecated; use `external_ipv6` instead) |\n| min_control_TLS_version | `1.2`\u003cbr /\u003e`1.3` | The minimum TLS protocol version that is supported for the control path |\n| min_data_TLS_version | `1.2`\u003cbr /\u003e`1.3` | The minimum TLS protocol version that is supported for the data path |\n| min_sentinel_TLS_version | `1.2`\u003cbr /\u003e`1.3` | The minimum TLS protocol version that is supported for the discovery service |\n| options_method_forbidden | `enabled`\u003cbr /\u003e`disabled` | Enable or turn off forbidding `OPTIONS` method for CNM HTTPS port |\n| reserved_ports | list of ports/port ranges | List of reserved ports and/or port ranges to avoid using for database endpoints (for example `reserved_ports 11000 13000-13010`) |\n| s3_url | string | The URL of S3 export and import |\n| s3_ca_cert | string | The CA certificate filepath for S3 export and import |\n| sentinel_cipher_suites | list of ciphers | Cipher suites used by the discovery service (supported ciphers are implemented by the [cipher_suites.go](\u003chttps://golang.org/src/crypto/tls/cipher_suites.go\u003e) package) |\n| sentinel_tls_mode | `allowed`\u003cbr /\u003e`required`\u003cbr /\u003e`disabled` | Define the SSL policy for the discovery service\u003cbr /\u003e(previously named `sentinel_ssl_policy`) |\n| services | `alert_mgr`\u003cbr /\u003e`cm_server`\u003cbr /\u003e`crdb_coordinator`\u003cbr /\u003e`crdb_worker`\u003cbr /\u003e`entraid_agent_mgr`\u003cbr /\u003e`ldap_agent_mgr`\u003cbr /\u003e`mdns_server`\u003cbr /\u003e`pdns_server`\u003cbr /\u003e`stats_archiver`\u003cbr /\u003e\u003cbr /\u003e`enabled`\u003cbr /\u003e`disabled` | Enable or turn off selected cluster services |\n| upgrade_mode | `enabled`\u003cbr /\u003e`disabled` | Enable or turn off upgrade mode on the cluster |\n\n### Returns\n\nReports whether the cluster was configured successfully. Displays an error message if the configuration attempt fails.\n\n### Example\n\n```sh\n$ rladmin cluster config cm_session_timeout_minutes 20\nCluster configured successfully\n```\n",
  "tags": ["docs","operate","rs"],
  "last_updated": "2026-04-01T08:10:08-05:00"
}