Configuring and tuning orchestration
After installing PE, you can change some default settings to further configure the orchestrator and pe-orchestration-services.
Configure the orchestrator and pe-orchestration-services
There are several parameters you can add to configure the behavior of the orchestrator and pe-orchestration-services.
- In the console, click Classification, and in the PE Infrastructure group, select the PE Orchestrator group.
On the Configuration tab, locate the
puppet_enterpriseclass indicated and add any of the following parameters and values as needed.
Disable or enable the PXP service. Set to
false. If you disable this setting you can’t use the orchestrator or the Run Puppet button in the console. Enabled (
true) by default.
An integer that determines the maximum number of concurrent requests orchestrator can make to bolt-server. The default value is set to the current value stored for bolt-server.CAUTION: Do not set a concurrency limit that is higher than the bolt-server limit. This can cause timeouts that lead to failed task runs.
An integer that determines how many concurrent compile requests can be outstanding to the master, across all orchestrator jobs. The default value is
Integer representing the days after which job reports should be removed. Defaults to
An agent needs to connect to the PCP broker in order to do Puppet runs via the orchestrator. Set an integer to specify how much time should pass before the connection times out.The orchestrator defaults to
"30"seconds. If the agent can’t connect to the broker in that time frame, the run times out.
Disable or enable orchestration services. Set to
false. Enabled (
true) by default.
Integer representing the number of tasks that can run at the same time. Defaults to
Disable or enable application management. Set to
false. Disabled (
false) by default.
Controls how frequently PXP agents ping PCP brokers. If the agents don't receive responses, they attempt to reconnect. Defaults to
A string that represents the path to the PXP agent log file. Change as needed. By default, the log files are located at:
The amount of time to keep records of old Puppet or task runs on agents. You can declare time in minutes (30m), hours (2h), and days (14d).
Controls how long tasks should be cached after use. By default, unused tasks are purged after 2 weeks. You can declare time in minutes (30m), hours (2h), and days (14d).
- Click Add Parameter as needed, and commit changes.
- On the node hosting the master, run Puppet.
Configure PXP agent log file location
Use the PXP agent log file to debug issues with the Puppet orchestrator.
By default the log files are at
/var/log/puppetlabs/pxp-agent/pxp-agent.log (on *nix) or
C:/ProgramData/PuppetLabs/pxp-agent/var/log/pxp-agent.log (on Windows). You can configure these locations with Hiera.
puppet_enterprise::pxp_agent::pxp_logfile: '<PATH TO LOG FILE>'
Correct ARP table overflow
In larger deployments that use the PCP broker, you may encounter ARP table overflows and need to adjust some system settings.
Overflows occur when the ARP table—a local cache of IP address to MAC address resolutions—fills and starts evicting old entries. When frequently used entries are evicted, this can lead to an increase of extra network traffic (increasing CPU load on the broker and network latency) to restore them.
A typical log message resembles the following:
[root@s1 peadmin]# tail -f /var/log/messages Aug 10 22:42:36 s1 kernel: Neighbour table overflow. Aug 10 22:42:36 s1 kernel: Neighbour table overflow. Aug 10 22:42:36 s1 kernel: Neighbour table overflow.
To work around this issue:
# Set max table size net.ipv6.neigh.default.gc_thresh3=4096 net.ipv4.neigh.default.gc_thresh3=4096 # Start aggressively clearing the table at this threshold net.ipv6.neigh.default.gc_thresh2=2048 net.ipv4.neigh.default.gc_thresh2=2048 # Don't clear any entries until this threshold net.ipv6.neigh.default.gc_thresh1=1024 net.ipv4.neigh.default.gc_thresh1=1024