TCP Connection
TCP Connection is the endpoint resource TCP Client sends to. It holds the address, the socket options, the timeouts, and the TLS configuration.
TLS is off by default. Enabling it exposes a trust mode, hostname verification, the certificate resources to use, and optional protocol and cipher-suite restrictions.
The resource has three tabs: Configuration, Advanced, and TLS.
Configuration
| Field | Required | Description |
|---|---|---|
| Name | Optional | Name of the resource. |
| Description | Optional | Description of the resource. |
| Host | Optional | Target hostname or IP. Mapping and vault values are supported. |
| Port | Optional | Target TCP port, 1–65535. Required. |
| TCP Keep-Alive | Optional | Defaults to selected. |
| TCP No-Delay (Nagle off) | Optional | Defaults to selected. |
Advanced
| Field | Required | Description |
|---|---|---|
| Connect Timeout (ms) | Optional | Defaults to 10000. |
| Read Timeout (ms) | Optional | Defaults to 30000. |
Both timeouts can be overridden per-activity on TCP Client.
TLS
| Field | Required | Description |
|---|---|---|
| Enable TLS | Optional | Defaults to cleared. |
| Trust Mode | Optional | How the server certificate is trusted. Defaults to Default (JVM truststore). |
| Verify Hostname | Optional | Defaults to selected. |
| Trust Certificate | Optional | Certificate resource for server trust — the same picker as Encrypt/Decrypt. The certificate or keystore and its password live in the resource; nothing is entered here. |
| Client Certificate (mTLS) | Optional | Certificate resource holding the client certificate and key for mutual TLS. |
| Certificate Type | Optional | Encryption resource type used to resolve the certificate. Defaults to ssl. |
| Enabled Protocols | Optional | For example TLSv1.3, TLSv1.2. Empty uses the JVM default. |
| Enabled Cipher Suites | Optional | Empty uses the JVM default. |
Trust Mode
| Option | Meaning |
|---|---|
| Default (JVM truststore) | Trust certificates in the JVM truststore. |
| Custom truststore | Trust certificates from a supplied truststore. |
| Pinned certificate | Trust a specific pinned certificate. |
| Insecure — trust all (dev/test only) | Trust any certificate. |
warning
Leave Verify Hostname on. Disabling it exposes the connection to MITM.