Curve 설정 가이드¶

curve:
  enabled: true  # Curve 활성화 (기본값: true)

  kafka:
    topic: event.audit.v1  # 메인 토픽 이름
    dlq-topic: event.audit.dlq.v1  # DLQ 토픽 (선택)

  id-generator:
    worker-id: 1  # Snowflake Worker ID (0~1023)
    auto-generate: false  # MAC 주소 기반 자동 생성

***************************
APPLICATION FAILED TO START
***************************

Description:

Binding to target org.springframework.boot.context.properties.bind.BindException:
Failed to bind properties under 'curve' to com.project.curve.autoconfigure.CurveProperties failed:

    Property: curve.id-generator.worker-id
    Value: "2000"
    Reason: workerId must be 1023 or less

curve:
  id-generator:
    worker-id: 1  # 인스턴스 1
    auto-generate: false

# deployment.yaml
env:
  - name: CURVE_ID_GENERATOR_WORKER_ID
    valueFrom:
      fieldRef:
        fieldPath: metadata.uid  # Pod UID 해시값 사용

# docker-compose.yml
services:
  app-1:
    environment:
      - CURVE_ID_GENERATOR_WORKER_ID=1
  app-2:
    environment:
      - CURVE_ID_GENERATOR_WORKER_ID=2

curve:
  id-generator:
    auto-generate: true

curve:
  kafka:
    async-mode: false  # 동기 전송
    request-timeout-ms: 30000  # 30초

curve:
  kafka:
    async-mode: true  # 비동기 전송
    async-timeout-ms: 5000  # 5초 타임아웃

curve:
  kafka:
    topic: event.audit.v1
    dlq-topic: event.audit.dlq.v1  # DLQ 활성화

curve:
  kafka:
    topic: event.audit.v1
    dlq-topic:  # 빈 값 또는 설정 안 함

{
  "eventId": "123456789",
  "originalTopic": "event.audit.v1",
  "originalPayload": "{...}",
  "exceptionType": "org.apache.kafka.common.errors.TimeoutException",
  "exceptionMessage": "Failed to send message after 3 retries",
  "failedAt": 1704067200000
}

curve:
  kafka:
    backup:
      s3-enabled: true
      s3-bucket: "my-event-backup-bucket"
      s3-prefix: "dlq-backup"

curve:
  kafka:
    backup:
      local-enabled: true
    dlq-backup-path: "./dlq-backup"

curve:
  retry:
    enabled: true  # 재시도 활성화
    max-attempts: 3  # 최대 3회 시도
    initial-interval: 1000  # 초기 1초 대기
    multiplier: 2.0  # 2배씩 증가 (1초 -> 2초 -> 4초)
    max-interval: 10000  # 최대 10초

curve:
  retry:
    enabled: false

curve:
  aop:
    enabled: true

curve:
  aop:
    enabled: false

curve:
  async:
    enabled: true  # curveAsyncExecutor 빈 등록
    core-pool-size: 2  # 코어 스레드 풀 크기 (기본값: 2)
    max-pool-size: 10  # 최대 스레드 풀 크기 (기본값: 10)
    queue-capacity: 500  # 작업 큐 용량 (기본값: 500)

curve:
  async:
    enabled: false

curve:
  pii:
    enabled: true  # PII 보호 활성화 (기본값: true)
    crypto:
      default-key: ${PII_ENCRYPTION_KEY}  # 암호화 키 (환경변수 필수)
      salt: ${PII_HASH_SALT}              # 해싱 솔트 (환경변수 권장)

# 32바이트 AES-256 키 생성
openssl rand -base64 32
# 출력 예시: K7gNU3sdo+OL0wNhqoVWhr3g6s1xYv72ol/pe/Unols=

# Linux/macOS
export PII_ENCRYPTION_KEY=K7gNU3sdo+OL0wNhqoVWhr3g6s1xYv72ol/pe/Unols=
export PII_HASH_SALT=your-random-salt-value

# Windows PowerShell
$env:PII_ENCRYPTION_KEY="K7gNU3sdo+OL0wNhqoVWhr3g6s1xYv72ol/pe/Unols="
$env:PII_HASH_SALT="your-random-salt-value"

curve:
  pii:
    crypto:
      default-key: ${PII_ENCRYPTION_KEY}
      salt: ${PII_HASH_SALT}

public class CustomerInfo {
    @PiiField(type = PiiType.NAME, strategy = PiiStrategy.MASK)
    private String name;

    @PiiField(type = PiiType.EMAIL, strategy = PiiStrategy.MASK)
    private String email;

    @PiiField(type = PiiType.PHONE, strategy = PiiStrategy.ENCRYPT)
    private String phone;

    @PiiField(strategy = PiiStrategy.HASH)
    private String ssn;  // 주민등록번호
}

# deployment.yaml
env:
  - name: PII_ENCRYPTION_KEY
    valueFrom:
      secretKeyRef:
        name: curve-secrets
        key: pii-encryption-key
  - name: PII_HASH_SALT
    valueFrom:
      secretKeyRef:
        name: curve-secrets
        key: pii-hash-salt

# Secret 생성
kubectl create secret generic curve-secrets \
  --from-literal=pii-encryption-key=$(openssl rand -base64 32) \
  --from-literal=pii-hash-salt=$(openssl rand -base64 16)

curve:
  outbox:
    enabled: true  # Outbox 활성화
    poll-interval-ms: 1000  # 폴링 간격 (1초)
    batch-size: 100  # 배치 크기
    max-retries: 3  # 최대 재시도 횟수
    send-timeout-seconds: 10  # 전송 타임아웃
    cleanup-enabled: true  # 오래된 이벤트 정리 활성화
    retention-days: 7  # 보관 기간 (7일)
    cleanup-cron: "0 0 2 * * *"  # 정리 작업 실행 시간 (매일 새벽 2시)
    initialize-schema: embedded  # 스키마 초기화 모드 (embedded, always, never)

curve:
  serde:
    type: JSON  # JSON (기본값), AVRO, PROTOBUF

curve:
  serde:
    type: AVRO
    schema-registry-url: http://localhost:8081  # Schema Registry 주소

spring:
  kafka:
    producer:
      value-serializer: io.confluent.kafka.serializers.KafkaAvroSerializer
    properties:
      schema.registry.url: http://localhost:8081

{
  "type": "record",
  "name": "EventEnvelope",
  "namespace": "com.project.curve.core.envelope",
  "fields": [
    {"name": "eventId", "type": "string"},
    {"name": "eventType", "type": "string"},
    {"name": "severity", "type": "string"},
    {"name": "metadata", "type": { ... }},
    {"name": "payload", "type": "string"}, // JSON String
    {"name": "occurredAt", "type": "long", "logicalType": "timestamp-millis"},
    {"name": "publishedAt", "type": "long", "logicalType": "timestamp-millis"}
  ]
}

curve:
  enabled: true

  id-generator:
    worker-id: ${INSTANCE_ID}  # 환경 변수에서 주입
    auto-generate: false

  kafka:
    topic: event.audit.v1
    dlq-topic: event.audit.dlq.v1
    async-mode: false  # 동기 전송
    retries: 5
    retry-backoff-ms: 1000
    request-timeout-ms: 30000

    # 백업 전략
    backup:
      s3-enabled: true
      s3-bucket: "prod-event-backups"
      local-enabled: false

  retry:
    enabled: true
    max-attempts: 5
    initial-interval: 1000
    multiplier: 2.0
    max-interval: 10000

  aop:
    enabled: true

  pii:
    enabled: true
    crypto:
      default-key: ${PII_ENCRYPTION_KEY}  # 환경 변수 필수
      salt: ${PII_HASH_SALT}

  async:
    enabled: true
    core-pool-size: 4
    max-pool-size: 20
    queue-capacity: 1000

  outbox:
    enabled: true
    initialize-schema: never  # Flyway 사용
    cleanup-enabled: true
    retention-days: 14

curve:
  enabled: true

  id-generator:
    worker-id: 1
    auto-generate: false

  kafka:
    topic: event.audit.dev.v1
    dlq-topic: event.audit.dlq.dev.v1
    async-mode: true  # 비동기 전송
    async-timeout-ms: 3000
    retries: 3

    backup:
      local-enabled: true

  retry:
    enabled: true
    max-attempts: 3
    initial-interval: 500
    multiplier: 1.5

  aop:
    enabled: true

  outbox:
    enabled: true
    initialize-schema: always

  async:
    enabled: true

curve:
  enabled: true

  id-generator:
    worker-id: ${WORKER_ID}
    auto-generate: false

  kafka:
    topic: event.audit.v1
    dlq-topic: event.audit.dlq.v1
    async-mode: true  # 비동기 전송
    async-timeout-ms: 5000
    retries: 1  # 최소 재시도

  retry:
    enabled: false  # 재시도 비활성화 (성능 우선)

  aop:
    enabled: true

  async:
    enabled: true
    core-pool-size: 8
    max-pool-size: 32
    queue-capacity: 2000

curve:
  id-generator:
    worker-id: ${UNIQUE_INSTANCE_ID}

curve:
  kafka:
    request-timeout-ms: 60000  # 타임아웃 증가

curve:
  kafka:
    async-mode: true  # 비동기 모드로 전환

ERROR: PII encryption key is not configured!
ERROR: An exception will occur when using @PiiField(strategy = PiiStrategy.ENCRYPT).

# 1. 키 생성
openssl rand -base64 32

# 2. 환경 변수 설정
export PII_ENCRYPTION_KEY=generated_key_value

# 3. application.yml 설정
curve:
  pii:
    crypto:
      default-key: ${PII_ENCRYPTION_KEY}

APPLICATION FAILED TO START
Reason: workerId must be 1023 or less

INFO  c.p.c.a.CurveAutoConfiguration : Curve auto-configuration enabled (disable with curve.enabled=false)

logging:
  level:
    com.project.curve: DEBUG

logging:
  level:
    # Kafka 전송 관련만 DEBUG
    com.project.curve.kafka: DEBUG

    # Auto-Configuration 관련만 DEBUG
    com.project.curve.autoconfigure: DEBUG

    # PII 처리 관련만 DEBUG
    com.project.curve.spring.pii: DEBUG

    # Outbox 관련만 DEBUG
    com.project.curve.spring.outbox: DEBUG