X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/a8896544fa1c6cd4f10f0826e088ec6c9b512621..b7c12630cb9de017d76fe60ff296534d6d061399:/roles/lockheed.rb diff --git a/roles/lockheed.rb b/roles/lockheed.rb index dde4cdb3f..f4ace47e0 100644 --- a/roles/lockheed.rb +++ b/roles/lockheed.rb @@ -2,49 +2,81 @@ name "lockheed" description "Master role applied to lockheed" default_attributes( - :accounts => { - :administrators => %w[luc qt fat115 tcit chocobozzz qdupont josephk spf pyg] - }, - :hardware => { - :shm_size => "12g" - }, - :location => "Falkenstein, Germany", :networking => { :interfaces => { - :external_ipv4 => { - :interface => "ens13", - :role => :external, - :family => :inet, - :address => "176.9.171.103", - :prefix => "28", - :gateway => "176.9.171.97" + :internal => { + :interface => "bond0", + :role => :internal, + :inet => { + :address => "10.0.48.16" + }, + :bond => { + :mode => "802.3ad", + :lacprate => "fast", + :xmithashpolicy => "layer3+4", + :slaves => %w[eno49 eno50] + } }, - :external_ipv6 => { - :interface => "ens13", + :external => { + :interface => "bond0.3", :role => :external, - :family => :inet6, - :address => "2a01:4f8:13a:209::103", - :prefix => "64", - :gateway => "2a01:4f8:13a:209::3" + :inet => { + :address => "184.104.179.144" + }, + :inet6 => { + :address => "2001:470:1:fa1::10" + } } } }, - :squid => { - :version => 4, - :cache_mem => "8192 MB", - :cache_dir => [ - "rock /store/squid/rock-4096 20000 swap-timeout=200 slot-size=4096 max-size=3996", - "rock /store/squid/rock-8192 25000 swap-timeout=200 slot-size=8192 min-size=3997 max-size=8092", - "rock /store/squid/rock-16384 35000 swap-timeout=200 slot-size=16384 min-size=8093 max-size=16284", - "rock /store/squid/rock-32768 45000 swap-timeout=200 slot-size=32768 min-size=16285 max-size=262144" - ] + :sysctl => { + :sockets => { + :comment => "Increase size of connection queue", + :parameters => { + "net.core.somaxconn" => 10000 + } + }, + :network_conntrack_time_wait => { + :comment => "Only track completed connections for 30 seconds", + :parameters => { + "net.netfilter.nf_conntrack_tcp_timeout_time_wait" => "30" + } + }, + :network_conntrack_max => { + :comment => "Increase max number of connections tracked", + :parameters => { + "net.netfilter.nf_conntrack_max" => "524288" + } + }, + :no_tcp_slow_start => { + :comment => "Disable TCP slow start", + :parameters => { + "net.ipv4.tcp_slow_start_after_idle" => "0" + } + }, + :tcp_use_bbr => { + :comment => "Use TCP BBR Congestion Control", + :parameters => { + "net.core.default_qdisc" => "fq", + "net.ipv4.tcp_congestion_control" => "bbr" + } + } }, - :tilecache => { - :tile_parent => "france.render.openstreetmap.org" + :nginx => { + :cache => { + :proxy => { + :enable => true, + :keys_zone => "proxy_cache_zone:256M", + :inactive => "180d", + :max_size => "51200M" + } + } } ) run_list( - "role[hetzner]", - "role[tilecache]" + "role[equinix-ams]", + "role[hp-g9]", + "recipe[imagery::za_ngi_aerial]", + "recipe[imagery::us_imagery]" )