Filippo Giunchedi has uploaded a new change for review.
https://gerrit.wikimedia.org/r/318129
Change subject: swift: don't track connection to backend services
......................................................................
swift: don't track connection to backend services
We've seen close to exhaustion for conntrack also due to many connections to
swift backend services, set notrack for those.
Change-Id: Ie182894a41cd24aec50141908bcc14618406713c
---
M modules/role/manifests/swift/proxy.pp
1 file changed, 18 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/29/318129/1
diff --git a/modules/role/manifests/swift/proxy.pp
b/modules/role/manifests/swift/proxy.pp
index 653c49b..93cb701 100644
--- a/modules/role/manifests/swift/proxy.pp
+++ b/modules/role/manifests/swift/proxy.pp
@@ -27,6 +27,24 @@
port => '80',
}
+ ferm::service { 'swift-object-server':
+ proto => 'tcp',
+ notrack => true,
+ port => '6000',
+ }
+
+ ferm::service { 'swift-container-server':
+ proto => 'tcp',
+ notrack => true,
+ port => '6001',
+ }
+
+ ferm::service { 'swift-account-server':
+ proto => 'tcp',
+ notrack => true,
+ port => '6002',
+ }
+
$swift_frontends = hiera('swift::proxyhosts')
$swift_frontends_ferm = join($swift_frontends, ' ')
--
To view, visit https://gerrit.wikimedia.org/r/318129
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ie182894a41cd24aec50141908bcc14618406713c
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Filippo Giunchedi <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
