zulip/puppet/zulip_ops/files
Alex Vandiver 42f84a8cc7 puppet: Use existing autossh tunnels as OpenSSH "master" sockets.
A number of autossh connections are already left open for
port-forwarding Munin ports; autossh starts the connections and
ensures that they are automatically restarted if they are severed.

However, this represents a missed opportunity.  Nagios's monitoring
uses a large number of SSH connections to the remote hosts to run
commands on them; each of these connections requires doing a complete
SSH handshake and authentication, which can have non-trivial network
latency, particularly for hosts which may be located far away, in a
network topology sense (up to 1s for a no-op command!).

Use OpenSSH's ability to multiplex multiple connections over a single
socket, to reuse the already-established connection.  We leave an
explicit `ControlMaster no` in the general configuration, and not
`auto`, as we do not wish any of the short-lived Nagios connections to
get promoted to being a control socket if the autossh is not running
for some reason.

We enable protocol-level keepalives, to give a better chance of the
socket being kept open.
2022-11-01 22:24:40 -07:00
..
apache puppet: Move nagios to behind teleport. 2021-06-02 18:38:38 -07:00
apt/apt.conf.d puppet: Set APT::Periodic::Unattended-Upgrade in apt config. 2021-02-12 08:59:19 -08:00
certs
cron.d cron: Remove unused STATE_FILE environment variable. 2022-06-22 12:07:38 -07:00
grafana grafana: Enable auto-sign-up. 2022-07-19 17:52:17 -07:00
iptables puppet: Configure ip6tables in parallel to ipv4. 2021-08-24 16:05:46 -07:00
munin puppet: Configure munin and nagios under apache with puppet. 2020-07-13 13:23:11 -07:00
munin-plugins munin: Update to use NAGIOS_BOT_HOST. 2021-01-27 12:07:09 -08:00
nagios4 nagios: Switch check_user_zephyr_mirror_liveness to run via cron. 2022-06-22 12:07:38 -07:00
nagios_plugins/zulip_zephyr_mirror zephyr: Write out unix timestamp in check, as check_cron_file expects. 2022-06-30 11:12:26 -07:00
needrestart puppet: Tell needrestart to not default to restarting core services. 2022-07-19 17:51:18 -07:00
nginx/sites-available sharding: Configure Tornado sharding with nginx map. 2022-09-15 16:07:50 -07:00
postgresql puppet: Add a database teleport server. 2021-06-08 22:21:21 -07:00
prometheus puppet: Only fetch from running hosts in Grafana ec2 discovery. 2021-12-09 08:12:03 -08:00
supervisor/conf.d puppet: Move prometheus to external_dep. 2021-12-29 16:35:15 -08:00
chrony.conf puppet: Configure chrony to use AWS-local NTP sources. 2022-03-25 17:07:53 -07:00
common-session
dot_emacs.el cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
krb5.conf puppet: Replace debathena krb5 package with equivalent puppet file. 2022-01-18 14:13:28 -08:00
nagios_ssh_config puppet: Use existing autossh tunnels as OpenSSH "master" sockets. 2022-11-01 22:24:40 -07:00
sshd_config
teleport_app.yaml puppet: Only include "app_service" section if there are apps. 2022-04-26 16:36:13 -07:00
teleport_node.yaml puppet: Only include "app_service" section if there are apps. 2022-04-26 16:36:13 -07:00
teleport_server.yaml teleport: Add explicit WebAuthn config, not just U2F. 2022-07-18 11:41:00 -07:00
tornado_process_exporter.yaml puppet: Add a prometheus monitor for tornado processes. 2022-03-20 16:12:11 -07:00
zephyr-clients puppet: Replace debathena zephyr package with equivalent puppet file. 2022-01-18 14:13:28 -08:00