openstack/openstack-ansible-openstack_hosts
Code Issues Proposed changes

Make nf_conntrack_max configurable

Browse Source 
Some OpenStack clouds host applications that handle a large amount of
concurrent connections and this exhausts the default
`nf_conntrack_max` value of `262144`.

This patch allows deployers to easily specify a larger amount of
connections by setting ``openstack_host_nf_conntrack_max``.

Closes-Bug: 1660991
Change-Id: I62b6ad8805b962050664880e6011abdab7514481
This commit is contained in:
Major Hayden 2017-02-01 08:03:30 -06:00
parent a436640aa7
commit 86c83d08d0
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
defaults/main.yml
View File

@ -63,13 +63,16 @@ openstack_host_environment_path:
- /usr/games - /usr/games
- /usr/local/games - /usr/local/games
# Set the maximum size of the connection tracking table.
openstack_host_nf_conntrack_max: 262144
# System control kernel tuning # System control kernel tuning
openstack_kernel_options: openstack_kernel_options:
- { key: 'fs.inotify.max_user_watches', value: 36864 } - { key: 'fs.inotify.max_user_watches', value: 36864 }
- { key: 'net.ipv4.conf.all.rp_filter', value: 0 } - { key: 'net.ipv4.conf.all.rp_filter', value: 0 }
- { key: 'net.ipv4.conf.default.rp_filter', value: 0 } - { key: 'net.ipv4.conf.default.rp_filter', value: 0 }
- { key: 'net.ipv4.ip_forward', value: 1 } - { key: 'net.ipv4.ip_forward', value: 1 }
- { key: 'net.netfilter.nf_conntrack_max', value: 262144 } - { key: 'net.netfilter.nf_conntrack_max', value: "{{ openstack_host_nf_conntrack_max }}" }
- { key: 'vm.dirty_background_ratio', value: 5 } - { key: 'vm.dirty_background_ratio', value: 5 }
- { key: 'vm.dirty_ratio', value: 10 } - { key: 'vm.dirty_ratio', value: 10 }
- { key: 'vm.swappiness', value: 5 } - { key: 'vm.swappiness', value: 5 }

7
releasenotes/notes/configurable-conntrack-max-44e3d1af4921bdf0.yaml Normal file
View File

@ -0,0 +1,7 @@
---
features:
- |
Deployers can set ``openstack_host_nf_conntrack_max`` to control the
maximum size of the netfilter connection tracking table. The default of
``262144`` should be increased if virtual machines will be handling large
amounts of concurrent connections.