Skip to content

Add registration admission control for httpd #495

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
pablomh wants to merge 1 commit into
base: master
Choose a base branch
from
Draft

Add registration admission control for httpd #495

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions src/roles/httpd/defaults/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,12 @@ httpd_threads_per_child: 16
httpd_thread_limit: 64
httpd_listen_backlog: 511

# Registration admission control: maximum concurrent connections to Puma
# for /rhsm and /register endpoints via an Apache balancer pool.
# Set to 0 to disable. When enabled, requests beyond this limit are queued
# by Apache instead of overwhelming Puma during registration bursts.
httpd_registration_admission_max: 0

# External authentication configuration
httpd_external_authentication: "{{ external_authentication | default(None) }}"
httpd_ipa_manage_sssd: true
Expand Down
9 changes: 9 additions & 0 deletions src/roles/httpd/templates/foreman-ssl-vhost.conf.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -95,6 +95,15 @@
ProxyPass /icons !
ProxyPass /images !
ProxyPass /server-status !
{% if httpd_registration_admission_max | default(0) | int > 0 %}
<Proxy balancer://foreman-registration>
BalancerMember {{ httpd_foreman_backend }} retry=0 timeout=900 max={{ httpd_registration_admission_max }}
</Proxy>
ProxyPass /rhsm balancer://foreman-registration/rhsm
ProxyPassReverse /rhsm balancer://foreman-registration/rhsm
ProxyPass /register balancer://foreman-registration/register
ProxyPassReverse /register balancer://foreman-registration/register
{% endif %}
ProxyPass / {{ httpd_foreman_backend }}/ retry=0 timeout=900 upgrade=websocket
ProxyPassReverse / {{ httpd_foreman_backend }}/

Expand Down
9 changes: 9 additions & 0 deletions src/roles/httpd/templates/foreman-vhost.conf.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,6 +58,15 @@
ProxyPass /icons !
ProxyPass /images !
ProxyPass /server-status !
{% if httpd_registration_admission_max | default(0) | int > 0 %}
<Proxy balancer://foreman-registration>
BalancerMember {{ httpd_foreman_backend }} retry=0 timeout=900 max={{ httpd_registration_admission_max }}
</Proxy>
ProxyPass /rhsm balancer://foreman-registration/rhsm
ProxyPassReverse /rhsm balancer://foreman-registration/rhsm
ProxyPass /register balancer://foreman-registration/register
ProxyPassReverse /register balancer://foreman-registration/register
{% endif %}
ProxyPass / {{ httpd_foreman_backend }}/ retry=0 timeout=900 upgrade=websocket
ProxyPassReverse / {{ httpd_foreman_backend }}/

Expand Down
1 change: 1 addition & 0 deletions src/vars/tuning/extra-extra-large.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ min_ram_mb: 262144

httpd_server_limit: 64
httpd_max_request_workers: 1024
httpd_registration_admission_max: 2400

postgresql_max_connections: 1000
postgresql_shared_buffers: 32GB
Expand Down
1 change: 1 addition & 0 deletions src/vars/tuning/extra-large.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ min_ram_mb: 131072

httpd_server_limit: 64
httpd_max_request_workers: 1024
httpd_registration_admission_max: 1200

postgresql_max_connections: 1000
postgresql_shared_buffers: 16GB
Expand Down
1 change: 1 addition & 0 deletions src/vars/tuning/large.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ min_ram_mb: 65536

httpd_server_limit: 64
httpd_max_request_workers: 1024
httpd_registration_admission_max: 600

postgresql_max_connections: 1000
postgresql_shared_buffers: 8GB
Expand Down
1 change: 1 addition & 0 deletions src/vars/tuning/medium.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ min_ram_mb: 32768

httpd_server_limit: 64
httpd_max_request_workers: 1024
httpd_registration_admission_max: 300

postgresql_max_connections: 1000
postgresql_shared_buffers: 4GB
Expand Down
Loading