BBlack has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/291914

Change subject: tlsproxy: double ssl session cache size
......................................................................

tlsproxy: double ssl session cache size

This is an experiment to see if there's any notable impact on
session reuse since the last time we checked.

Change-Id: Ia3eceab6d4d870a48feb3dfb1a033070bc7e3208
---
M modules/tlsproxy/templates/nginx.conf.erb
1 file changed, 2 insertions(+), 2 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/14/291914/1

diff --git a/modules/tlsproxy/templates/nginx.conf.erb 
b/modules/tlsproxy/templates/nginx.conf.erb
index a99d7d5..e67dfff 100644
--- a/modules/tlsproxy/templates/nginx.conf.erb
+++ b/modules/tlsproxy/templates/nginx.conf.erb
@@ -72,11 +72,11 @@
 
     # Enable a shared cache, since it is defined at this level
     # it will be used for all virtual hosts. 1m = 4000 active sessions,
-    # so we are allowing 400,000 active sessions.  Any fixed value here is
+    # so we are allowing 800,000 active sessions.  Any fixed value here is
     # probably less than ideal, as we'll want to vary it based on cluster
     # traffic levels and pybal node weightings, but for now we're just
     # experimenting with the fixed value to get ballpark ideas.
-    ssl_session_cache shared:SSL:100m;
+    ssl_session_cache shared:SSL:200m;
     ssl_session_timeout 15m;
 
     # Disable RFC5077 tickets (may revisit later when client support is better)

-- 
To view, visit https://gerrit.wikimedia.org/r/291914
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ia3eceab6d4d870a48feb3dfb1a033070bc7e3208
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to