:jburgess => { :status => :administrator }
}
},
- :apt => {
- :sources => ["openstreetmap"]
- },
:munin => {
:plugins => {
- :ntp_offset => {
- :offset => { :warning => "100", :critical => "250" }
+ :chrony => {
+ :systime => { :warning => "100", :critical => "250" }
}
}
},
:networking => {
:roles => {
:internal => { :metric => 200, :zone => "loc" },
- :external => { :metric => 100 }
+ :external => { :metric => 100, :zone => "osm" }
},
:search => ["openstreetmap.org"]
},
+ :prometheus => {
+ :metrics => {
+ :exim_queue_limit => {
+ :help => "Mail queue alert level",
+ :metric => 50
+ }
+ }
+ },
:sysctl => {
:panic => {
:comment => "Reboot automatically after a panic",
:parameters => {
"net.core.rmem_max" => "16777216",
"net.core.wmem_max" => "16777216",
- "net.ipv4.tcp_rmem" => "4096\t87380\t16777216",
- "net.ipv4.tcp_wmem" => "4096\t65536\t16777216"
+ "net.ipv4.tcp_rmem" => "4096 87380 16777216",
+ "net.ipv4.tcp_wmem" => "4096 65536 16777216",
+ "net.ipv4.udp_mem" => "3145728 4194304 16777216"
}
},
:network_backlog => {
:comment => "Increase maximum backlog for incoming network packets",
- :parameters => { "net.core.netdev_max_backlog" => "2500" }
+ :parameters => {
+ "net.core.netdev_max_backlog" => "2500",
+ "net.core.netdev_budget" => "600"
+ }
},
:network_conntrack_established => {
:comment => "Only track established connections for four hours",
:parameters => {
"net.ipv4.tcp_syncookies" => "1"
}
- }
- },
- :sysfs => {
- :cpufreq_ondemand => {
- :comment => "Tune the ondemand CPU frequency governor",
+ },
+ :default_qdisc => {
+ :comment => "Use fq as the default queuing discipline and cubic for congestion control",
+ :parameters => {
+ "net.core.default_qdisc" => "fq",
+ "net.ipv4.tcp_congestion_control" => "cubic"
+ }
+ },
+ :tune_cpu_scheduler => {
+ :comment => "Tune CPU scheduler for server scheduling",
:parameters => {
- "devices/system/cpu/cpufreq/ondemand/up_threshold" => "25",
- "devices/system/cpu/cpufreq/ondemand/sampling_down_factor" => "100"
+ "kernel.sched_migration_cost_ns" => 50000000,
+ "kernel.sched_autogroup_enabled" => 0
}
}
}
"recipe[chef]",
"recipe[devices]",
"recipe[hardware]",
- "recipe[munin]",
+ "recipe[prometheus]",
+ "recipe[munin::plugins]",
"recipe[networking]",
"recipe[exim]",
"recipe[ntp]",