Muehlenhoff has uploaded a new change for review. https://gerrit.wikimedia.org/r/240335
Change subject: Disable the ferm rules cache ...................................................................... Disable the ferm rules cache Disable the local cache of generated rules. If rules e.g. use DNS names (which are resolved at the time of rule initialisation), the cache won't pick up DNS changes when restarting ferm. The performance loss is hardly noticable. I ran some tests in labs on a relatively standard rule set (default rules plus a handful of service rules): Ferm restart with the cache enabled: real 0m0.020s user 0m0.000s sys 0m0.019s Ferm restart with the cache disabled: real 0m0.085s user 0m0.064s sys 0m0.019s Bug: T113380 Change-Id: Iece5c9a253bc6948f083951a48346def048d307b --- M modules/ferm/files/ferm.default 1 file changed, 1 insertion(+), 1 deletion(-) git pull ssh://gerrit.wikimedia.org:29418/operations/puppet refs/changes/35/240335/1 diff --git a/modules/ferm/files/ferm.default b/modules/ferm/files/ferm.default index 7864a2e..5e9d3df 100644 --- a/modules/ferm/files/ferm.default +++ b/modules/ferm/files/ferm.default @@ -4,7 +4,7 @@ FAST=yes # cache the output of ferm --lines in /var/cache/ferm? -CACHE=yes +CACHE=no # additional paramaters for ferm (like --def '$foo=bar') OPTIONS= -- To view, visit https://gerrit.wikimedia.org/r/240335 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: Iece5c9a253bc6948f083951a48346def048d307b Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits