Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

httpd: download servers fix to 408's

Browse source 
The Fedora download servers are experiencing a large number of 408's
every day. This is causing timeouts and breaks on yum update. I talked
with the CentOS admins and they pointed me to
https://github.com/CentOS/ansible-role-httpd/ which I shameless borrowed
some code for just the dl. box.
This commit is contained in:
Stephen Smoogen 2020-04-30 09:55:06 +00:00
parent 4a4ac25436
commit f10f66ef82
2 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
roles/download/templates/httpd/dl.fedoraproject.org.conf
View file

@ -29,3 +29,10 @@
Include "conf.d/dl.fedoraproject.org/*.conf"
</VirtualHost>
# Prefork tuning
<IfModule mpm_prefork_module>
ServerLimit {{ httpd_maxrequestworkers * 1.5 }}
MaxRequestWorkers {{ httpd_maxrequestworkers }}
MaxConnectionsPerChild {{ httpd_maxrequestworkers * 5 }}
</IfModule>

2
vars/global.yml
View file

@ -61,6 +61,8 @@ fedora31_x86_64: Fedora-Cloud-Base-31-1.9.x86_64
ssl_protocols: "+all -SSLv3 -TLSv1 -TLSv1.1"
ssl_ciphers: "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK"
httpd_maxrequestworkers: 512
# Set a default hostname base to transient. Override in host vars or command line.
hostbase: transient
global_pkgs_inst: ['bind-utils', 'mailx', 'nc', 'openssh-clients',