Skip to content

[v10] add agent config scaling section #25794

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
fspmarshall merged 1 commit into from
May 8, 2023
Merged

[v10] add agent config scaling section #25794

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions docs/pages/management/operations/scaling.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,21 @@ teleport:
max_users: 1000
```

## Agent configuration

Agents cache roles and other configuration locally in order to make access-control decisions quickly.
By default agents are fairly aggressive in trying to re-initialize their caches if they lose connectivity
to the Auth Service. In very large clusters, this can contribute to a "thundering herd" effect,
where control plane elements experience excess load immediately after restart. Setting the `max_backoff`
parameter to something in the 8-16 minute range can help mitigate this effect:

```yaml
teleport:
cache:
enabled: yes
max_backoff: 12m
```

## Kernel parameters

Tweak Teleport's systemd unit parameters to allow a higher amount of open
Expand Down