Minimize ssh connections number

[Alexey Wasilyev]

Hello, everybody!

I use ansible for everyday production servers maintenance. 

During run, ansible makes a lot of ssh connections to every server, every connection is logged and according to internal policy I have to write a note to the security journal about every ssh connection.

So, is there any way to minimize number of ssh connections? Say, lets ansible connect to ssh, do all recipes and disconnect instead of doing separate connections for every recipe?

I try to use accelerate=True mode, but it is buggy. Regularly i got "Failed to connect to xx.xx.xx.xx:5099" during ansible run, and i need to manully kill ansible-accelerate daemon to recover node.

Any ideas?

[Mark Phillips]

What version of Ansible are you using Alexey? Look at 'pipelining', that's probably what you're after. I think it needs a fairly recent ssh version too though.

[Michael DeHaan]

ControlPersist is the way to reduce the number of connections.

Also don't delegate_to a bunch to the same host.

See 

Ansible Performance Tuning (for Fun and Profit)

On Sun, Oct 19, 2014 at 2:09 PM, Mark Phillips <ma...@probably.co.uk> wrote:

What version of Ansible are you using Alexey? Look at 'pipelining', that's probably what you're after. I think it needs a fairly recent ssh version too though.

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To post to this group, send email to ansible...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/7b5fc8c8-0a2c-45bb-8c28-d0b091db616d%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Alexey Wasilyev]

1.7.2, from os x and ubuntu as control node, centos 6.5 as target. pipelining enabled.

and there are a lot of login records in the target machine /var/log/secure during every ansible run.

[Michael DeHaan]

pipelining alone won't do anything without Control Persist, but I'd check to make sure you weren't using paramiko as the default SSH args do use CP.

--

You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To post to this group, send email to ansible...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/79960934-735f-41c9-9997-939afec0145a%40googlegroups.com.

[Alexey Wasilyev]

I know. Just doublecheck it, ansible run ssh with CP option.