BBlack has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/317499

Change subject: reduce cache local ports slightly
......................................................................

reduce cache local ports slightly

Just In Case.  1024-65535 seems a bit heavy-handed.  1024 itself
is technically a "reserved" port and shouldn't be used.  65535 is
probably suspicious for breaking an edge case.  Also, we make
heavy use of ports in the 3xxx range for varnish itself.  In the
net, this reduces the available ephemeral port count from 64512 to
61534.  If that's actually an issue, we have bigger issues (also,
the 8x varnish-fe ports should help mitigate this regardless).

Bug: T107749
Change-Id: Iea0de3c8ebfd7bd480240821dd77ce7f5b9ffcb9
---
M modules/role/manifests/cache/perf.pp
1 file changed, 1 insertion(+), 1 deletion(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/99/317499/1

diff --git a/modules/role/manifests/cache/perf.pp 
b/modules/role/manifests/cache/perf.pp
index a51b4f9..5cddc6e 100644
--- a/modules/role/manifests/cache/perf.pp
+++ b/modules/role/manifests/cache/perf.pp
@@ -33,7 +33,7 @@
     sysctl::parameters { 'cache proxy network tuning':
         values => {
             # Increase the number of ephemeral ports
-            'net.ipv4.ip_local_port_range'       => [ 1024, 65535 ],
+            'net.ipv4.ip_local_port_range'       => [ 4000, 65534 ],
 
             # All prod caches are 10GbE, standard recommendation is 300K for 
10G
             # and 30K for 1G.  Our inbound traffic max is closer to 1G levels,

-- 
To view, visit https://gerrit.wikimedia.org/r/317499
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Iea0de3c8ebfd7bd480240821dd77ce7f5b9ffcb9
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to