[rancid] Throttling per-host (odd situation)
Piegorsch, Weylin William
weylin at bu.edu
Wed Jun 21 20:52:52 UTC 2017
Hello,
This might not be using rancid to independently solve your challenge, but whatever. Can you split this into multiple groups, each tenant gets it’s own group (with one device in router.db), and then you can schedule do-diffs for the various groups at staggered times?
weylin
-----Original Message-----
From: Howard Jones <howie at thingy.com>
Date: Tuesday, June 20, 2017 at 18:06
To: <rancid-discuss at shrubbery.net>
Subject: [rancid] Throttling per-host (odd situation)
I have a homegrown script for grabbing individual configs from a
multi-tenant firewall. It works in conjunction with a small hack to
bin/rancid and bin/control_rancid, so that I can have a "host" called
firewall1[TENANT1], and it knows to take the part in [] off, and use the
remains as a hostname, and also not smash the case of the filename.
The upshot of this though, is that I have many connections to the same
device as part of a rancid run. The device has a limit on the number of
incoming ssh sessions, and even if it didn't I don't really want to DOS
it with rancid. I know I can change PAR_COUNT so that it's less than the
number of allowed connections, but then a complete run takes over an
hour (there are plenty of other devices here) instead of the
already-quite-long 30ish minutes with a PAR_COUNT of 10.
So - is there any convenient way to have rancid throttle connections for
particular devices, groups, or hostnames matching a pattern? Or is it
just a case of turn the timeouts up, and the retries up and let it grind
through? (each attempt will get connection refused until a slot is open
- so I suppose I'd need num_tenants/max_sessions retries, at least,
which itself would be dynamic.
I realise this is not at all a standard situation, but maybe someone
else has similar? Or, e.g. something with access via a serial console
server that has similar limitations?
Without re-engineering the guts of rancid too much, I'm thinking about
something like a pool of lockfiles that clogin (or rancid before it
starts clogin) waits on...
Thanks in advance for any pointers...
Howard
More information about the Rancid-discuss
mailing list