encrypt-entire-message.xml

<!-- ************ JGroups Protocol Stack Configuration ************** -->
<!-- This encrypts the entire message, even UNICAST and NAKACK headers (to reveal sequence numbers).
     Note that ENCRYPT could be placed even lower, e.g. just above UDP -->

<config>
    <UDP mcast_recv_buf_size="64000" mcast_send_buf_size="32000" mcast_port="45566" ucast_recv_buf_size="64000"
        use_incoming_packet_handler="false" mcast_addr="228.8.8.8" use_outgoing_packet_handler="false"
        loopback="true" ucast_send_buf_size="32000" ip_ttl="32"/>
    <PING timeout="2000" num_initial_members="3"/>
    <MERGE2 max_interval="10000" min_interval="5000"/>
    <FD timeout="2000" max_tries="3" shun="true"/>
    <VERIFY_SUSPECT timeout="1500"/>
    <ENCRYPT encrypt_entire_message="false" sym_init="128" sym_algorithm="AES/ECB/PKCS5Padding" asym_init="512" asym_algorithm="RSA"/>
    <pbcast.NAKACK max_xmit_size="8192" gc_lag="50" retransmit_timeout="600,1200,2400,4800"/>
    <UNICAST timeout="1200,2400,3600"/>
    <pbcast.STABLE stability_delay="1000" desired_avg_gossip="20000" max_bytes="0"/>
    <FRAG frag_size="8192" down_thread="false" up_thread="false"/>
    <pbcast.GMS print_local_addr="true" join_timeout="3000" join_retry_timeout="2000" shun="true"/>
</config>