From c459a95cd4013e489ef4f9d47c05d1c98798522c Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Thu, 12 May 2016 11:39:19 +0200
Subject: bacula: Set heartbeat options.

and also TCP keepalive options in the stunnel config.
---
 roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2 | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

(limited to 'roles/bacula-dir/templates/etc/stunnel')

diff --git a/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2 b/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2
index e6ab105..6219aff 100644
--- a/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2
+++ b/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2
@@ -23,9 +23,17 @@ key  = /etc/stunnel/certs/{{ inventory_hostname_short }}-dir.key
 client = yes
 socket = a:SO_BINDTODEVICE=lo
 
-; Some performance tunings
 socket = l:TCP_NODELAY=1
+socket = l:SO_KEEPALIVE=1
+socket = l:TCP_KEEPIDLE=60
+socket = l:TCP_KEEPINTVL=15
+socket = l:TCP_KEEPCNT=116
+
 socket = r:TCP_NODELAY=1
+socket = r:SO_KEEPALIVE=1
+socket = r:TCP_KEEPIDLE=60
+socket = r:TCP_KEEPINTVL=15
+socket = r:TCP_KEEPCNT=116
 
 ; Prevent MITM attacks
 verify = 4
-- 
cgit v1.2.3