zulip/puppet/zulip_ops/manifests
Alex Vandiver 42f84a8cc7 puppet: Use existing autossh tunnels as OpenSSH "master" sockets.
A number of autossh connections are already left open for
port-forwarding Munin ports; autossh starts the connections and
ensures that they are automatically restarted if they are severed.

However, this represents a missed opportunity.  Nagios's monitoring
uses a large number of SSH connections to the remote hosts to run
commands on them; each of these connections requires doing a complete
SSH handshake and authentication, which can have non-trivial network
latency, particularly for hosts which may be located far away, in a
network topology sense (up to 1s for a no-op command!).

Use OpenSSH's ability to multiplex multiple connections over a single
socket, to reuse the already-established connection.  We leave an
explicit `ControlMaster no` in the general configuration, and not
`auto`, as we do not wish any of the short-lived Nagios connections to
get promoted to being a control socket if the autossh is not running
for some reason.

We enable protocol-level keepalives, to give a better chance of the
socket being kept open.
2022-11-01 22:24:40 -07:00
..
profile puppet: Use existing autossh tunnels as OpenSSH "master" sockets. 2022-11-01 22:24:40 -07:00
prometheus puppet: Add a redis exporter. 2022-05-03 17:13:44 -07:00
teleport puppet: Only include "app_service" section if there are apps. 2022-04-26 16:36:13 -07:00
apache.pp puppet: Remove quotes for enumerable values. 2022-04-29 22:06:46 -07:00
app_frontend.pp puppet: Remove quotes for enumerable values. 2022-04-29 22:06:46 -07:00
app_frontend_monitoring.pp puppet: Add a prometheus monitor for tornado processes. 2022-03-20 16:12:11 -07:00
camo.pp puppet: Default go-camo to listening on localhost for standalone deploys. 2021-11-19 15:58:26 -08:00
firewall.pp puppet: Configure ip6tables in parallel to ipv4. 2021-08-24 16:05:46 -07:00
firewall_allow.pp puppet: Put comments on iptables lines. 2022-01-21 16:46:14 -08:00
ksplice_uptrack.pp puppet: Remove quotes for enumerable values. 2022-04-29 22:06:46 -07:00
munin_node.pp puppet: Remove quotes for enumerable values. 2022-04-29 22:06:46 -07:00
munin_plugin.pp puppet: Remove quotes for enumerable values. 2022-04-29 22:06:46 -07:00
prod_app_frontend_once.pp nagios: Switch check_user_zephyr_mirror_liveness to run via cron. 2022-06-22 12:07:38 -07:00