812293 - increase ephemeral port range on all persona servers

Status: RESOLVED FIXED

(Cloud Services :: Operations: Deployment Requests - DEPRECATED, task)

Description

[Lloyd Trevor Hilaiel]

this is a duplicate of bug 716940

We should increase the ephemeral port range on all persona servers, including client boxes, stage boxes, and production machines.

any reason I need seperate tickets for the different environments?

Comment 1

[Lloyd Trevor Hilaiel]

echo "1024 65535" > /proc/sys/net/ipv4/ip_local_port_range

Comment 2

[John Morrison [:jrgm]]

(Just for future reference I'll note that while we were at 2.5M, we were 77% full on the ephemeral port range as it is currently set (32768, 61000). (from one netstat snapshot)).

Comment 3

[John Morrison [:jrgm]]

We'll need this someday soon.

Comment 4

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

*should* be doable with the exisiting puppet sysctl provider. Need to see if there's a provision for a range versus discreet values.

Comment 5

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

yup

sysctl::set_value {
  "net.ipv4.ip_local_port_range":
     val => "1024 65535";
}

Comment 6

[Gene Wood [:gene]]

And to make this persistent add this line

net.ipv4.ip_local_port_range = 1024 65535

to /etc/sysctl.conf

Comment 7

[Daniel Thorn [:relud]]

persona stack 0618 in staging has been deployed with this change.

Comment 8

[Gene Wood [:gene]]

Commited at 

https://github.com/mozilla/identity-ops/commit/c85e208b6a465eac35e8725ba808b3bfd7ed2c31
and
https://github.com/mozilla/identity-ops/commit/68cb7a0705a527b936729c2c4ec79d4ad2d2918a

Deployed manually yesterday and it will be deployed using Chef today

Comment 9

[Daniel Thorn [:relud]]

prod stack 0620 in us-east-1 deployed on 6/20/14 at 3:45PM includes this change.

univ stacks in staging and prod don't have this change (yet)

Comment 10

[Daniel Thorn [:relud]]

fixed now