Update SYN cookie alarm to be less aggressive. (#7250)
* Update SYN cookie alarm to be less aggressive. Based on discussion from #6998 * Update SYN queue overflow alarm the same way.
Austin S. Hemmelgarn committed
Nov 5, 2019 at 11:23 UTC
ec9b2632a2fe02fa14a51b821d7974f153cbf8af
1 file changed
+8
-8
health/health.d/tcp_listen.conf
+8
-8
@@ -58,12 +58,12 @@
58
on: ip.tcp_syn_queue
59
os: linux
60
hosts: *
61
- lookup: sum -60s unaligned absolute of TCPReqQFullDrop
61
+ lookup: average -60s unaligned absolute of TCPReqQFullDrop
62
units: drops
63
every: 10s
64
- warn: $this > 0
65
- crit: $this > (($status == $CRITICAL) ? (0) : (60))
66
- delay: up 0 down 5m multiplier 1.5 max 1h
64
+ warn: $this > 1
65
+ crit: $this > (($status == $CRITICAL) ? (0) : (5))
66
+ delay: up 10 down 5m multiplier 1.5 max 1h
67
info: the number of times the TCP SYN queue of the kernel was full and dropped packets, during the last minute
68
to: sysadmin
69
@@ -71,12 +71,12 @@
71
on: ip.tcp_syn_queue
72
os: linux
73
hosts: *
74
- lookup: sum -60s unaligned absolute of TCPReqQFullDoCookies
74
+ lookup: average -60s unaligned absolute of TCPReqQFullDoCookies
75
units: cookies
76
every: 10s
77
- warn: $this > 0
78
- crit: $this > (($status == $CRITICAL) ? (0) : (60))
79
- delay: up 0 down 5m multiplier 1.5 max 1h
77
+ warn: $this > 1
78
+ crit: $this > (($status == $CRITICAL) ? (0) : (5))
79
+ delay: up 10 down 5m multiplier 1.5 max 1h
80
info: the number of times the TCP SYN queue of the kernel was full and sent SYN cookies, during the last minute
81
to: sysadmin
82