[rancid] Throttling per-host (odd situation)

Howard Jones howie at thingy.com
Tue Jun 20 22:06:56 UTC 2017


I have a homegrown script for grabbing individual configs from a 
multi-tenant firewall. It works in conjunction with a small hack to 
bin/rancid and bin/control_rancid, so that I can have a "host" called 
firewall1[TENANT1], and it knows to take the part in [] off, and use the 
remains as a hostname, and also not smash the case of the filename.

The upshot of this though, is that I have many connections to the same 
device as part of a rancid run. The device has a limit on the number of 
incoming ssh sessions, and even if it didn't I don't really want to DOS 
it with rancid. I know I can change PAR_COUNT so that it's less than the 
number of allowed connections, but then a complete run takes over an 
hour (there are plenty of other devices here) instead of the 
already-quite-long 30ish minutes with a PAR_COUNT of 10.

So - is there any convenient way to have rancid throttle connections for 
particular devices, groups, or hostnames matching a pattern? Or is it 
just a case of turn the timeouts up, and the retries up and let it grind 
through? (each attempt will get connection refused until a slot is open 
- so I suppose I'd need num_tenants/max_sessions retries, at least, 
which itself would be dynamic.

I realise this is not at all a standard situation, but maybe someone 
else has similar? Or, e.g. something with access via a serial console 
server that has similar limitations?

Without re-engineering the guts of rancid too much, I'm thinking about 
something like a pool of lockfiles that clogin (or rancid before it 
starts clogin) waits on...

Thanks in advance for any pointers...

Howard



More information about the Rancid-discuss mailing list