Skip to content

Fortified IDDocs

JdbcClient

Module for outbound JDBC access

The JdbcClient module manages connections and access to JDBC compatible databases (RDBMS).

Each module (instance) manages a single pooled connection to a single RDBMS (a destination). To configure connections to multiple servers, use multiple modules. To increase throughput, increase the number of module instances.

The module provides a service on the internal event bus with a JSON based protocol and a java library for simplified use.

This module is used for all internal JDBC access, including the bundled JDBC valves.

RDBMS specific driver available on class path.

NameDescriptionDefaultMandatory
nameDestination name. Unique identifier for a specific configuration/connection/service. This value must be unique for all jdbcclient configurations."default"
instancesNumber of instances to deploy1
jdbcJDBC connection and pool configuration object.{}
jdbc.urlRDBMS specific JDBC URL
jdbc.usernameDatabase username.""
jdbc.passwordDatabase password.""
jdbc.max_pool_sizeMaximum number of pooled database connections.15
jdbc.idleTimeoutSeconds a connection may sit idle before being evicted. Set below the database server's idle timeout and any network-level TCP idle timeout (e.g. Azure Load Balancer default: 240 s).1800
jdbc.maxLifetimeMaximum age in seconds of a connection before it is recycled, regardless of activity.3600
jdbc.poolCleanerPeriodInterval in milliseconds at which the pool cleaner checks for idle or expired connections.1000
jdbc.autoGeneratedKeysRequests generated keys from supported JDBC drivers.false
tzTimezone used when mapping SQL timestamp values, for example "Europe/Stockholm".JVM default timezone

JDBC requires a RDBMS specific driver. This driver must be manually downloaded and added to the server class path (restart required).

The JdbcClient can record an audit trail for write operations (INSERT, UPDATE, DELETE) and optionally read operations (SELECT). Audit logging is disabled by default and must be explicitly enabled per operation type.

When audit is enabled, the caller is expected to supply an AuditContext containing the subject (the authenticated user performing the operation) and a correlation ID. The JDBC valves automatically construct this context from the session and the pipe trace ID.

The audit block is placed at the top level of the module config, alongside jdbc.

NameDescriptionDefaultMandatory
audit.createRecord an audit event for INSERT statements.false
audit.updateRecord an audit event for UPDATE statements.false
audit.deleteRecord an audit event for DELETE statements.false
audit.readRecord an audit event for SELECT statements.false

Each audit event contains the following information extracted from the SQL statement and its parameters:

Field Description
operation CREATE (INSERT), UPDATE, DELETE, or READ (SELECT)
entityType Name of the primary table
entityId WHERE clause with ? placeholders substituted by actual parameter values
changes Column names and values from SET (UPDATE) or VALUES (INSERT) clauses
subject Authenticated user from the pipe session, or anonymous
traceId Pipe trace ID used as correlation ID

The defaults protect existing deployments that have no explicit pool configuration. Set idleTimeout below whichever threshold is lower — the database server's own idle timeout or any network-level TCP idle timeout (e.g. Azure Load Balancer default: 240 s).

Key Default Description
jdbc.max_pool_size 15 Maximum number of pooled connections.
jdbc.idleTimeout 1800 s Evict connections idle longer than this.
jdbc.maxLifetime 3600 s Recycle connections older than this regardless of activity.
jdbc.poolCleanerPeriod 1000 ms How often the pool cleaner checks for idle or expired connections.