X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/21958591555b0b80370e944e3128ac5d533c281d..13ef9975b5d6b159207273e971cf614477c793ca:/roles/base.rb diff --git a/roles/base.rb b/roles/base.rb index 529d23ba4..718b288a5 100644 --- a/roles/base.rb +++ b/roles/base.rb @@ -10,16 +10,21 @@ default_attributes( :jburgess => { :status => :administrator } } }, - :apt => { - :sources => ["openstreetmap"] - }, :networking => { :roles => { - :internal => { :metric => 200, :zone => "loc" }, + :internal => { :metric => 200 }, :external => { :metric => 100 } }, :search => ["openstreetmap.org"] }, + :prometheus => { + :metrics => { + :exim_queue_limit => { + :help => "Mail queue alert level", + :metric => 50 + } + } + }, :sysctl => { :panic => { :comment => "Reboot automatically after a panic", @@ -27,20 +32,27 @@ default_attributes( }, :blackhole => { :comment => "Do TCP level MTU probing if we seem to have an ICMP blackhole", - :parameters => { "net.ipv4.tcp_mtu_probing" => "1" } + :parameters => { + "net.ipv4.tcp_mtu_probing" => "1", + "net.ipv4.tcp_base_mss" => "1024" + } }, :network_buffers => { :comment => "Tune network buffers", :parameters => { "net.core.rmem_max" => "16777216", "net.core.wmem_max" => "16777216", - "net.ipv4.tcp_rmem" => "4096\t87380\t16777216", - "net.ipv4.tcp_wmem" => "4096\t65536\t16777216" + "net.ipv4.tcp_rmem" => "4096 87380 16777216", + "net.ipv4.tcp_wmem" => "4096 65536 16777216", + "net.ipv4.udp_mem" => "3145728 4194304 16777216" } }, :network_backlog => { :comment => "Increase maximum backlog for incoming network packets", - :parameters => { "net.core.netdev_max_backlog" => "2500" } + :parameters => { + "net.core.netdev_max_backlog" => "2500", + "net.core.netdev_budget" => "600" + } }, :network_conntrack_established => { :comment => "Only track established connections for four hours", @@ -53,14 +65,17 @@ default_attributes( :parameters => { "net.ipv4.tcp_syncookies" => "1" } - } - }, - :sysfs => { - :cpufreq_ondemand => { - :comment => "Tune the ondemand CPU frequency governor", + }, + :default_qdisc => { + :comment => "Use fq as the default queuing discipline", + :parameters => { + "net.core.default_qdisc" => "fq" + } + }, + :tune_cpu_scheduler => { + :comment => "Tune CPU scheduler for server scheduling", :parameters => { - "devices/system/cpu/cpufreq/ondemand/up_threshold" => "25", - "devices/system/cpu/cpufreq/ondemand/sampling_down_factor" => "100" + "kernel.sched_autogroup_enabled" => 0 } } } @@ -72,7 +87,7 @@ run_list( "recipe[chef]", "recipe[devices]", "recipe[hardware]", - "recipe[munin]", + "recipe[prometheus]", "recipe[networking]", "recipe[exim]", "recipe[ntp]",