Switch remaining servers to nftables

[chef.git] / roles / equinix-dub.rb

diff --git a/roles/equinix-dub.rb b/roles/equinix-dub.rb
index fb074324c1eef408e3299430b723f7f50f31ddaa..c4f30e2ff90ffe4d4433d3ac89a61b1f2744c9ef 100644 (file)
--- a/roles/equinix-dub.rb
+++ b/roles/equinix-dub.rb
@@ -2,6 +2,15 @@ name "equinix-dub"
 description "Role applied to all servers at Equinix Dublin"
 
 default_attributes(
+  :sysctl => {
+    :enable_bbr_10g => {
+      :comment => "Enable BBR. Equinix Dub has 10G uplink unlikely to buffer overrun",
+      :parameters => {
+        "net.ipv4.tcp_congestion_control" => "bbr",
+        "net.ipv4.tcp_notsent_lowat" => "16384"
+      }
+    }
+  },
   :networking => {
     :roles => {
       :internal => {
@@ -37,7 +46,7 @@ default_attributes(
 
 override_attributes(
   :networking => {
-    :nameservers => ["10.0.64.2", "1.1.1.1", "1.0.0.1"],
+    :nameservers => ["10.0.64.2", "8.8.8.8", "8.8.4.4"],
     :search => ["dub.openstreetmap.org", "openstreetmap.org"]
   },
   :ntp => {