added max conn configurable

Signed-off-by: Vivek Shankar <vshankar@progress.com>
chef · Sep 13, 2024 · 0a4fb20 · 0a4fb20
1 parent d61d635
commit 0a4fb20
Show file tree

Hide file tree

Showing 6 changed files with 108 additions and 88 deletions.
diff --git a/api/config/pg_gateway/config_request.go b/api/config/pg_gateway/config_request.go
@@ -40,6 +40,7 @@ func DefaultConfigRequest() *ConfigRequest {
 	c.V1.Sys.Timeouts.Connect = w.Int32(5)
 	c.V1.Sys.Timeouts.Idle = w.Int32(43200)
 	c.V1.Sys.Resolvers.EnableSystemNameservers = w.Bool(false)
+	c.V1.Sys.MaxConnections = w.Int32(350)
 
 	return c
 }

diff --git a/api/config/pg_gateway/config_request.pb.go b/api/config/pg_gateway/config_request.pb.go
diff --git a/api/config/pg_gateway/config_request.proto b/api/config/pg_gateway/config_request.proto
@@ -23,6 +23,7 @@ message ConfigRequest {
 			chef.automate.infra.config.Log log = 4;
 			Timeouts timeouts = 5;
 			Resolvers resolvers = 6;
+			google.protobuf.Int32Value max_connections = 7;
 
 			message Resolvers {
 				repeated google.protobuf.StringValue nameservers = 1;

diff --git a/components/automate-backend-postgresql/habitat/default.toml b/components/automate-backend-postgresql/habitat/default.toml
@@ -3,7 +3,7 @@ host = '0.0.0.0'
 
 print_db_statistics = true
 
-max_connections = 350
+max_connections = 1500
 max_locks_per_transaction = 64
 max_wal_size = "1GB"
 min_wal_size = "80MB"
@@ -40,4 +40,9 @@ path = "/hab/svc/automate-ha-postgresql/data/pg_dump"
 [ssl]
 enable = true
 # tls 1.2 ciphersuite (to exclude tlsv1 and tlsv1.1)
-tls_ciphers = "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256"
+tls_ciphers = "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256"# server public cert used for ssl listener
+ssl_cert = """"""
+# server private key
+ssl_key = """"""
+# issuer public cert that signed the above server public cert
+issuer_cert = """"""
diff --git a/components/automate-deployment/pkg/deployment/deployment.go b/components/automate-deployment/pkg/deployment/deployment.go
@@ -15,7 +15,7 @@ import (
 	dc "github.com/chef/automate/api/config/deployment"
 	api "github.com/chef/automate/api/interservice/deployment"
 	"github.com/chef/automate/components/automate-deployment/pkg/certauthority"
-	globalconfig "github.com/chef/automate/components/automate-deployment/pkg/globalConfig"
+	"github.com/chef/automate/components/automate-deployment/pkg/globalconfig"
 	"github.com/chef/automate/components/automate-deployment/pkg/habpkg"
 	"github.com/chef/automate/components/automate-deployment/pkg/manifest"
 	"github.com/chef/automate/components/automate-deployment/pkg/services"

diff --git a/components/automate-pg-gateway/habitat/config/haproxy.conf b/components/automate-pg-gateway/habitat/config/haproxy.conf
@@ -55,10 +55,10 @@ backend automate_postgresql
             {{~#if ../cfg.resolvers.nameservers }}
     server-template {{node.address}} 8 {{node.address}}:{{node.port}} check resolvers pgdns init-addr none  resolve-prefer ipv4
             {{else}}
-    server {{node.address}} {{node.address}}:{{node.port}} maxconn 350 check port 6432
+    server {{node.address}} {{node.address}}:{{node.port}} maxconn {{cfg.max_connections}} check port 6432
             {{~/if}}
        {{else}}
-    server {{node.address}} {{node.address}}:{{node.port}} maxconn 350 check port 6432
+    server {{node.address}} {{node.address}}:{{node.port}} maxconn {{cfg.max_connections}} check port 6432
        {{~/if}}
     {{~/each}}
 {{else~}}