X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/d1feb3c5baa074d824fd67142de6b43b60dc10dd..5d5c90a9d90bc90b48b50f582e6854ba1c4c941d:/roles/tilecache.rb diff --git a/roles/tilecache.rb b/roles/tilecache.rb index 86a494285..68690730c 100644 --- a/roles/tilecache.rb +++ b/roles/tilecache.rb @@ -12,14 +12,25 @@ default_attributes( :apt => { :sources => ["nginx"] }, - :munin => { - :plugins => { - :cpu => { - :user => { :warning => 100, :critical => 200 } + :networking => { + :tcp_fastopen_key => "tile" + }, + :nginx => { + :access_log => false, + :cache => { + :proxy => { + :enable => true, + :keys_zone => "proxy_cache_zone:64M", } } }, :sysctl => { + :sockets => { + :comment => "Increase size of connection queue", + :parameters => { + "net.core.somaxconn" => 10000 + } + }, :network_conntrack_time_wait => { :comment => "Only track completed connections for 30 seconds", :parameters => { @@ -29,13 +40,38 @@ default_attributes( :network_conntrack_max => { :comment => "Increase max number of connections tracked", :parameters => { - "net.netfilter.nf_conntrack_max" => "131072" + "net.netfilter.nf_conntrack_max" => "524288" + } + }, + :network_local_port_range => { + :comment => "Increase available local port range", + :parameters => { + "net.ipv4.ip_local_port_range" => "1024\t65000" + } + }, + :network_tcp_timewait_reuse => { + :comment => "Allow tcp timewait reuse", + :parameters => { + "net.ipv4.tcp_tw_reuse" => 1 + } + }, + :kernel_tfo_listen_enable => { + :comment => "Enable TCP Fast Open for listening sockets", + :parameters => { + "net.ipv4.tcp_fastopen" => 3 } }, :squid_swappiness => { :comment => "Prefer not to swapout to free memory", :parameters => { - "vm.swappiness" => "30" + "vm.swappiness" => "1" + } + }, + :sched_wakeup => { + :comment => "Tune scheduler", + :parameters => { + "kernel.sched_min_granularity_ns" => "10000000", + "kernel.sched_wakeup_granularity_ns" => "15000000" } } }