BBlack has uploaded a new change for review.
https://gerrit.wikimedia.org/r/291914
Change subject: tlsproxy: double ssl session cache size
......................................................................
tlsproxy: double ssl session cache size
This is an experiment to see if there's any notable impact on
session reuse since the last time we checked.
Change-Id: Ia3eceab6d4d870a48feb3dfb1a033070bc7e3208
---
M modules/tlsproxy/templates/nginx.conf.erb
1 file changed, 2 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/14/291914/1
diff --git a/modules/tlsproxy/templates/nginx.conf.erb
b/modules/tlsproxy/templates/nginx.conf.erb
index a99d7d5..e67dfff 100644
--- a/modules/tlsproxy/templates/nginx.conf.erb
+++ b/modules/tlsproxy/templates/nginx.conf.erb
@@ -72,11 +72,11 @@
# Enable a shared cache, since it is defined at this level
# it will be used for all virtual hosts. 1m = 4000 active sessions,
- # so we are allowing 400,000 active sessions. Any fixed value here is
+ # so we are allowing 800,000 active sessions. Any fixed value here is
# probably less than ideal, as we'll want to vary it based on cluster
# traffic levels and pybal node weightings, but for now we're just
# experimenting with the fixed value to get ballpark ideas.
- ssl_session_cache shared:SSL:100m;
+ ssl_session_cache shared:SSL:200m;
ssl_session_timeout 15m;
# Disable RFC5077 tickets (may revisit later when client support is better)
--
To view, visit https://gerrit.wikimedia.org/r/291914
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ia3eceab6d4d870a48feb3dfb1a033070bc7e3208
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits