Commit Graph

17 Commits

Author SHA1 Message Date
James Page ece87ba8ca Restrict TLS versions
TLS < 1.2 is considered insecure; where possible limit the versions
of TLS to 1.2 or higher, enabling support for TLS 1.3 when the
required erlang and rabbitmq versions are installed.

Change-Id: Iec5ab60488986f8e332ff0e9a11895822a61c1ee
Closes-Bug: 1892450
Func-Test-PR: https://github.com/openstack-charmers/zaza-openstack-tests/pull/668
2021-11-23 14:20:10 +00:00
James Page 9ed0e2d85c Switch to new configuration file format
For newer RabbitMQ versions, switch to using the new ini style
configuration file format (rabbitmq.conf vs rabbitmq.config).

This allows the charm to configure a wider set of options and
is needed to support limitation of TLS versions use for on the
wire encryption.

Upgrades at RabbitMQ 3.7.0 should switch from old to new format
and file name.

Change-Id: I6deda5ecf5990d527e22373540074d2a4b7bad38
Func-Test-PR: https://github.com/openstack-charmers/zaza-openstack-tests/pull/668
2021-11-16 09:35:31 +00:00
Nicolas Bock 8015d9a365 Add config parameters to tune mnesia settings
When a RabbitMQ cluster is restarted, the mnesia settings determine
how long and how often each broker will try to connect to the cluster
before giving up. It might be useful for an operator to be able to
tune these parameters. This change adds two settings,
`mnesia-table-loading-retry-timeout` and
`mnesia-table-loading-retry-limit`, which set these parameters in the
rabbitmq.config file [1].

[1] https://www.rabbitmq.com/configure.html#config-items

Change-Id: I96aa8c4061aed47eb2e844d1bec44fafd379ac25
Partial-Bug: #1828988
Related-Bug: #1874075
Co-authored-by: Nicolas Bock <nicolas.bock@canonical.com>
Co-authored-by: Aurelien Lourot <aurelien.lourot@canonical.com>
2021-08-16 15:43:19 +02:00
Felipe Reyes 07ec03b5d7 Add queue-master-locator config option
queue-master-locator is a configuration option supported by
rabbitmq-server since 3.6, it allows to have control of where the
master queue will be created.

Change-Id: I38cc019b73d062572e19bd532b6bccdaf88638ba
Func-Test-PR: https://github.com/openstack-charmers/zaza-openstack-tests/pull/382
Closes-Bug: #1890759
Signed-off-by: Nicolas Bock <nicolas.bock@canonical.com>
2020-12-13 15:43:31 -03:00
Alex Kavanagh 79a1ea26d6 Change charm to py3
The tests are still py2; they'll need an update to zaza at some point.

Change-Id: I2c4b1ba0212f96cf4a725c80d87b8b2bfed2186f
2018-10-24 14:50:35 +01:00
Edward Hope-Morley 96fa17720b Expose performance tuning options via charm
Adds connection-backlog and erl-vm-io-thread-multiplier config
options which are required for tuning when deploying in
environments with large numbers of clients and server hosts
with high numbers of cores respectively. Also refactors
rabbitmq-env.conf rendering code so that it is properly
applied by the charm.

Change-Id: I8596eb9a0419d4e64782bfaf9d8c0f67e5de96b1
Closes-Bug: 1693561
2017-06-02 15:43:22 +01:00
Shane Peters 4978fe304b Change default collect_statistics_interval to 30s
By default, the management plugin collects statistics every 5 seconds.
This modifies it to 30s in order to alleviate memory pressure. This
value is only considered when the management plugin is enabled.

Change-Id: I7dbbcfc1cbc0a17c6a3c421914883e52cf74afb5
Closes-Bug: 1656074
2017-02-08 14:53:16 -05:00
Liam Young fa9f068cad Enable cert files etc when ssl_mode is 'only' 2015-10-20 12:18:49 +01:00
Jorge Niedbalski 997f866a0b - Added the cluster_partition_handling option fixes LP: #1442443
- Refactored the ssl handling code.
- Added a generic config loader
2015-04-09 23:34:40 -03:00
James Page 45eeb310d5 Switch back to correct way of setting limits for server processes 2014-06-30 11:15:03 +01:00
Jorge Niedbalski R befba5a137 - Increase default ulimit to something more scalable using /etc/security/limits.d/rabbitmq.limits.conf 2014-06-11 16:05:59 -04:00
James Page ffd8c5b9a6 Backout heartbeat changes 2014-05-23 09:13:05 +01:00
James Page 50f760610b Tune heartbeat 2014-05-21 17:12:49 +01:00
James Page 229473b571 Bump ulimit for rabbitmq to support loads of connections 2014-05-01 11:40:32 +01:00
Kapil Thangavelu 178563b3e0 ssl support 2014-02-23 22:53:46 -05:00
Kapil Thangavelu 2c27cca7a2 update charm helpers, add makefile, expand ssl support 2014-02-23 11:13:37 -05:00
James Page abdf5034bb Add missing hook and template 2013-05-21 06:59:02 +01:00