On Wed, 2011-01-26 at 10:11 -0500, Micah Anderson wrote:
> http {
> default_type application/octet-stream;
>
> sendfile on;
> tcp_nopush on;
> tcp_nodelay on;
>
> large_client_header_buffers 1024 2048k;
> client_max_body_size 150m;
> proxy_buffers 128 4k;
>
> keepalive_timeout 65;
>
> gzip on;
> gzip_min_length 1000;
> gzip_types text/plain;
>
> ssl on;
> ssl_certificate /var/lib/puppet/ssl/certs/puppetmaster.pem;
> ssl_certificate_key
> /var/lib/puppet/ssl/private_keys/puppetmaster.pem;
> ssl_client_certificate /var/lib/puppet/ssl/ca/ca_crt.pem;
> ssl_ciphers SSLv2:-LOW:-EXPORT:RC4+RSA;
> ssl_session_cache shared:SSL:8m;
> ssl_session_timeout 5m;
>
> proxy_read_timeout 600;
> upstream puppet_mongrel {
> fair;
> server 127.0.0.1:18140;
> server 127.0.0.1:18141;
> server 127.0.0.1:18142;
> server 127.0.0.1:18143;
> }
> log_format noip '0.0.0.0 - $remote_user [$time_local] '
> '"$request" $status $body_bytes_sent '
> '"$http_referer" "$http_user_agent"';
>
> proxy_cache_path /var/cache/nginx/cache levels=1:2
> keys_zone=puppetcache:10m;
make this:
proxy_cache_path /var/cache/nginx/cache levels=1:2
keys_zone=puppetcache:50m inactive=300m
The default inactive is 10 minute which is too low for a sleeptime of 60
minutes, and it is possible the cached catalog to be evicted.
--
Brice Figureau
Follow the latest Puppet Community evolutions on www.planetpuppet.org!
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
