Bug 57712 - Include ARP cache kernel parameters in UCR and increase default values.
Summary: Include ARP cache kernel parameters in UCR and increase default values.
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: Kernel
Version: UCS 5.0
Hardware: Other Linux
: P5 enhancement
Target Milestone: UCS 5.0-9-errata
Assignee: Johannes Königer
QA Contact: Jürn Brodersen
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-10-30 16:34 CET by Johannes Königer
Modified: 2024-11-20 13:42 CET (History)
0 users

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID:
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Königer univentionstaff 2024-10-30 16:34:42 CET
The ARP cache is currently set to the Linux kernel defaults:

net.ipv4.neigh.default.gc_thresh1 = 128
net.ipv4.neigh.default.gc_thresh2 = 512
net.ipv4.neigh.default.gc_thresh3 = 1024

https://docs.kernel.org/networking/ip-sysctl.html

In a test environment related to the UCS@school computer room module, the maximum number of 1024 cache entries was not enough and let to very long request times and request timeouts. It is conceivable that this can happen in customer environments with many connected devices and the "right" network setup during time windows where the most devices are active. Additionally, any containerized application may increase the number of entries in the ARP cache significantly, as all namespaced networks share the system level ARP cache.

Proposal:

Make these kernel values UCR configurable and set the default values to:

net.ipv4.neigh.default.gc_thresh1 = 1024
net.ipv4.neigh.default.gc_thresh2 = 2048
net.ipv4.neigh.default.gc_thresh3 = 4096
Comment 3 Johannes Königer univentionstaff 2024-11-15 12:43:57 CET
Merged with commit 6d7187b6028e9fad3aa7e347d72bcf68fb9c5d1b

```
Successful build
Package: univention-base-files
Version: 9.0.9-2
Branch: 5.0-0
Scope: errata5.0-9
```
Comment 4 Johannes Königer univentionstaff 2024-11-18 13:08:06 CET
Ported to 5.1 and 5.2:
```
Package: univention-base-files
Version: 11.0.7
Branch: 5.2-0
```
```
Package: univention-base-files
Version: 10.0.8
Branch: 5.1-0
```
Comment 5 Jürn Brodersen univentionstaff 2024-11-19 09:25:31 CET
Change -> OK
Install and upgrade -> OK
YAML -> OK
jenkins -> OK
Comment 6 Christian Castens univentionstaff 2024-11-20 13:42:19 CET
<https://errata.software-univention.de/#/?erratum=5.0x1178>