X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/7574f99c912236460176f19868a7ea4b42f1c357..3931779dad7aa8dda435bc2d49bff7d00d3e43af:/roles/tilecache.rb?ds=inline diff --git a/roles/tilecache.rb b/roles/tilecache.rb index c7f4ac75a..75a66f5fd 100644 --- a/roles/tilecache.rb +++ b/roles/tilecache.rb @@ -9,13 +9,21 @@ default_attributes( } } }, - :apt => { - :sources => ["nginx"] + :networking => { + :firewall => { + :enabled => false + } }, :nginx => { :access_log => false }, :sysctl => { + :sockets => { + :comment => "Increase size of connection queue", + :parameters => { + "net.core.somaxconn" => 10000 + } + }, :network_conntrack_time_wait => { :comment => "Only track completed connections for 30 seconds", :parameters => { @@ -25,19 +33,41 @@ default_attributes( :network_conntrack_max => { :comment => "Increase max number of connections tracked", :parameters => { - "net.netfilter.nf_conntrack_max" => "262142" + "net.netfilter.nf_conntrack_max" => "524288" + } + }, + :network_local_port_range => { + :comment => "Increase available local port range", + :parameters => { + "net.ipv4.ip_local_port_range" => "1024\t65535" } }, - :kernel_tfo_listen_enable => { - :comment => "Enable TCP Fast Open for listening sockets", + :network_tcp_timewait_reuse => { + :comment => "Allow tcp timewait reuse", :parameters => { - "net.ipv4.tcp_fastopen" => 3 + "net.ipv4.tcp_tw_reuse" => 1 } }, :squid_swappiness => { :comment => "Prefer not to swapout to free memory", :parameters => { - "vm.swappiness" => "30" + "vm.swappiness" => "1" + } + }, + :sched_wakeup => { + :comment => "Tune scheduler", + :parameters => { + "kernel.sched_min_granularity_ns" => "10000000", + "kernel.sched_wakeup_granularity_ns" => "15000000" + } + } + }, + :tools => { + :cron => { + :load => { + :nice => 19, + :io_scheduling_class => "best-effort", + :io_scheduling_priority => 7 } } }