From 107096692773af58fb62658abe5208bd76cb8682 Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Fri, 2 Feb 2018 10:39:20 +0100 Subject: [PATCH] sshd: Raise MaxStartups on ssh upload hosts --- modules/ssh/templates/sshd_config.erb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/modules/ssh/templates/sshd_config.erb b/modules/ssh/templates/sshd_config.erb index 682860687..ca68f5230 100644 --- a/modules/ssh/templates/sshd_config.erb +++ b/modules/ssh/templates/sshd_config.erb @@ -21,6 +21,12 @@ HostKey /etc/ssh/ssh_host_rsa_key <%- if has_variable?("has_etc_ssh_ssh_host_ed25519_key") && @has_etc_ssh_ssh_host_ed25519_key -%> HostKey /etc/ssh/ssh_host_ed25519_key <% end %> +<% if scope.function_has_role(['ssh.upload.d.o']) -%> +# On ssh upload hosts we have many clients doing ssh connections to us. +# sshd has - by default - a limit of 10 on the number of currently +# unauthenticated (or not yet authenticated) connections. Raise that limit. +MaxStartups 100:30:200 +<% end %> # Authentication: PermitRootLogin without-password -- 2.20.1