server: introduced worker_rlimit_nofile (#2)

Signed-off-by: Xiaobo Liu <cppcoffee@gmail.com>

server/Cargo.toml

@@ -37,6 +37,7 @@ tracing-subscriber = { version = "0.3", features = ["std", "fmt", "env-filter"]
 humantime = "2.1"
 
 signal-hook = { version = "0.3", features = ["iterator", "extended-siginfo"] }
+rlimit = "0.10"
 
 # mallocator
 tikv-jemallocator = "0.5"

server/config/netguard.toml

@@ -5,6 +5,7 @@ queue_start = 0
 queue_count = 2
 
 worker_priority = -20
+worker_rlimit_nofile = 200000
 
 # TODO: performance tuning
 # cpu_affinity = 0xffffffff
@@ -25,7 +26,7 @@ key = ".netguard/rsa.pub"
 allow_skew = 60
 
 [log]
-path = "/tmp/error.log"
+path = "logs/error.log"
 level = "error"
 
 [filter]

server/src/bin/server.rs

@@ -42,6 +42,7 @@ fn main() -> Result<()> {
     setup_logger();
 
     util::set_process_priority(config.setting.worker_priority);
+    util::set_rlimit_nofile(config.setting.worker_rlimit_nofile)?;
 
     let conntrack_map = Arc::new(ConntrackMap::new());
 

server/src/config.rs

@@ -17,6 +17,7 @@ pub struct Setting {
     pub queue_start: u16,
     pub queue_count: u16,
     pub worker_priority: i32,
+    pub worker_rlimit_nofile: u64,
 }
 
 #[derive(Debug, Deserialize)]
@@ -73,6 +74,10 @@ impl Config {
             bail!("queue_count must be greater than 0");
         }
 
+        if self.setting.worker_rlimit_nofile == 0 {
+            bail!("worker_rlimit_nofile must be greater than 0");
+        }
+
         if !self.auth.key.exists() {
             bail!("auth key file not found: {}", self.auth.key.display());
         }
@@ -104,6 +109,7 @@ mod tests {
                 queue_start: 0,
                 queue_count: 0,
                 worker_priority: 0,
+                worker_rlimit_nofile: 100000,
             },
             auth: Auth {
                 port: 0,

server/src/util.rs

@@ -82,12 +82,19 @@ pub fn set_thread_priority() -> Result<()> {
     Ok(())
 }
 
+#[inline]
 pub fn set_process_priority(n: i32) {
     unsafe {
         libc::nice(n);
     }
 }
 
+#[inline]
+pub fn set_rlimit_nofile(n: u64) -> Result<u64> {
+    let value = rlimit::increase_nofile_limit(n)?;
+    Ok(value)
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;