From: Winfried Angele <winfried.angele@gmail.com>
Date: Tue, 31 Jan 2017 06:27:56 +0000 (+0100)
Subject: Tuning unit file for medium sized setups
X-Git-Tag: rec-4.1.0-alpha1~232^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6e7a8652cd03fecf8fe6d3e741d9f08d28e72fb2;p=thirdparty%2Fpdns.git

Tuning unit file for medium sized setups

We would propose to introduce the TasksMax setting in the unit file. The default value of 512 seems too low, at least for our setup. In addition, if present in the unit file, people will be aware of it.

LimitNOFILE seems also a little bit low.

Our setup consists of 8 DNS backend servers. Each Server with 5 IPv4 and 5 IPv6 addresses. That means dnsdist has to deal with 80 backends. For this setup TasksMax=512 (default) was too low and dnsdist stopped working correctly. We saw many of these messages:

Error creating a TCP thread: Resource temporarily unavailable
Had an error accepting new webserver connection: Resource temporarily unavailable
---

diff --git a/pdns/dnsdistdist/dnsdist.service.in b/pdns/dnsdistdist/dnsdist.service.in
index c7e1b4246a..14e37856cd 100644
--- a/pdns/dnsdistdist/dnsdist.service.in
+++ b/pdns/dnsdistdist/dnsdist.service.in
@@ -22,7 +22,8 @@ NoNewPrivileges=true
 ProtectSystem=full
 ProtectHome=true
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
-LimitNOFILE=4096
+LimitNOFILE=16384
+TasksMax=1024
 
 [Install]
 WantedBy=multi-user.target