BBlack has uploaded a new change for review.
https://gerrit.wikimedia.org/r/231006
Change subject: tlsproxy: add deferred/backlog options
......................................................................
tlsproxy: add deferred/backlog options
deferred enables TCP_DEFER_ACCEPT, potentially reducing nginx
process wakeups per conn. backlog is set to 4096 to match the
somaxconn sysctl that's set from webserver::sysctl_settings,
included by tlsproxy::instance.
Change-Id: If276c8ea5a860ba2f8dc175283cc4bfafadcc199
---
M modules/tlsproxy/templates/localssl.erb
1 file changed, 2 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/06/231006/1
diff --git a/modules/tlsproxy/templates/localssl.erb
b/modules/tlsproxy/templates/localssl.erb
index ed09074..a52b4df 100644
--- a/modules/tlsproxy/templates/localssl.erb
+++ b/modules/tlsproxy/templates/localssl.erb
@@ -3,8 +3,8 @@
# SSL proxying
server {
- listen [::]:443 <%= @default_server ? "default_server reuseport
ipv6only=on " : "" %>ssl spdy;
- listen 443 <%= @default_server ? "default_server reuseport " : "" %>ssl
spdy;
+ listen [::]:443 <%= @default_server ? "default_server deferred
backlog=4096 reuseport ipv6only=on " : "" %>ssl spdy;
+ listen 443 <%= @default_server ? "default_server deferred backlog=4096
reuseport " : "" %>ssl spdy;
ssl on;
server_name <%= ([@server_name] + @server_aliases).join(" ") %>;
--
To view, visit https://gerrit.wikimedia.org/r/231006
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: If276c8ea5a860ba2f8dc175283cc4bfafadcc199
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
