Filippo Giunchedi has submitted this change and it was merged.
Change subject: swift: don't track connection to backend services
......................................................................
swift: don't track connection to backend services
We've seen close to exhaustion for conntrack also due to many connections to
swift backend services, set notrack for those.
Change-Id: Ie182894a41cd24aec50141908bcc14618406713c
---
M modules/role/manifests/swift/proxy.pp
1 file changed, 18 insertions(+), 0 deletions(-)
Approvals:
Filippo Giunchedi: Looks good to me, approved
Muehlenhoff: Looks good to me, but someone else must approve
jenkins-bot: Verified
diff --git a/modules/role/manifests/swift/proxy.pp
b/modules/role/manifests/swift/proxy.pp
index 653c49b..93cb701 100644
--- a/modules/role/manifests/swift/proxy.pp
+++ b/modules/role/manifests/swift/proxy.pp
@@ -27,6 +27,24 @@
port => '80',
}
+ ferm::service { 'swift-object-server':
+ proto => 'tcp',
+ notrack => true,
+ port => '6000',
+ }
+
+ ferm::service { 'swift-container-server':
+ proto => 'tcp',
+ notrack => true,
+ port => '6001',
+ }
+
+ ferm::service { 'swift-account-server':
+ proto => 'tcp',
+ notrack => true,
+ port => '6002',
+ }
+
$swift_frontends = hiera('swift::proxyhosts')
$swift_frontends_ferm = join($swift_frontends, ' ')
--
To view, visit https://gerrit.wikimedia.org/r/318129
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ie182894a41cd24aec50141908bcc14618406713c
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Filippo Giunchedi <[email protected]>
Gerrit-Reviewer: BBlack <[email protected]>
Gerrit-Reviewer: Faidon Liambotis <[email protected]>
Gerrit-Reviewer: Filippo Giunchedi <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
