From 888b79238aa0555e6aa4cd8ef083308b05ff5b7c Mon Sep 17 00:00:00 2001 From: Takwa Date: Wed, 28 Oct 2026 15:15:59 +0100 Subject: [PATCH] Reserve the trace collector's ports ipni/infra's alloy-traces collector (ipni/infra#163) listens on the host network of sing-1, lith-1 and chic-1, bound to 127.0.0.1: 4317 and 4318 for OTLP from the services, 9812 for its own HTTP server. With the ephemeral range starting at 1024, an outbound socket could take one of them and the collector would fail to re-bind after a restart. Co-Authored-By: Claude Opus 5.5 --- group_vars/ipfs_nodes/main.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/group_vars/ipfs_nodes/main.yml b/group_vars/ipfs_nodes/main.yml index d5b6808..a7a9dba 100644 --- a/group_vars/ipfs_nodes/main.yml +++ b/group_vars/ipfs_nodes/main.yml @@ -141,6 +141,9 @@ sysctl_tuning: # ipni/infra kubernetes/platform/node-exporter) # 9810 metrics proxy (Traefik), 9811 its ping (every box, host network: # ipni/infra kubernetes/platform/metrics-proxy/values.yaml) + # 4317-4318 trace collector OTLP gRPC and HTTP, 9812 its HTTP server + # (loopback, every box, host network: ipni/infra + # kubernetes/platform/alloy-traces/values.yaml) # 8472/udp flannel VXLAN # 8888 content ipfs-cluster Prometheus metrics (loopback; reserved ahead of # enabling them in k8s/content, scraped through the metrics proxy) @@ -152,7 +155,7 @@ sysctl_tuning: # 9901 route-origin Envoy admin 9902 bootstrap-wss Envoy admin # 9903 bootstrap-b's bootstrap-wss Envoy admin # 10010 containerd 10248-10259 kubelet/kube-proxy/k3s - net.ipv4.ip_local_reserved_ports: "443,4001-4002,4004-4007,4011-4012,4101,4443,4453,5011-5012,5021,6443-6444,8000,8190-8193,8443,8472,8888,9094-9097,9100,9443,9800-9801,9810-9811,9901-9904,10010,10248-10259" + net.ipv4.ip_local_reserved_ports: "443,4001-4002,4004-4007,4011-4012,4101,4317-4318,4443,4453,5011-5012,5021,6443-6444,8000,8190-8193,8443,8472,8888,9094-9097,9100,9443,9800-9801,9810-9812,9901-9904,10010,10248-10259" net.ipv4.tcp_fin_timeout: 15 # Must equal what k3s's kube-proxy sets on every start: max(32768 * CPUs, # 131072), i.e. 1048576 on these 32-core boxes. A fixed lower value both