Workernode config
xrootd-proxy (Xcache)
###########################################################################
# This is a very simple sample configuration file sufficient to start an #
# xrootd data server using the default port 1094. This server runs by #
# itself (stand-alone) and does not assume it is part of a cluster. You #
# can then connect to this server to access files in '/tmp'. #
# Consult the the reference manuals on how to create more complicated #
# configurations. #
# #
# On successful start-up you will see 'initialization completed' in the #
# last message. You can now connect to the xrootd server. #
# #
# Note: You should always create a *single* configuration file for all #
# daemons related to xrootd. #
###########################################################################
# The export directive indicates which paths are to be exported
#
all.export *?
all.export /
# The adminpath and pidpath variables indicate where the pid and various
# IPC files should be placed
#
all.adminpath /var/spool/xrootd
all.pidpath /var/run/xrootd
xrootd.async segsize 8m timeout 300
xrd.buffers maxbsz 8m
# Configure proxy disk caching
#
ofs.osslib libXrdPss.so
pss.cachelib libXrdPfc.so
pss.origin xrootd-gateway:1095
# Try to close files every 60s for a total of 900s before timing out
# See RT 225210 and https://github.com/xrootd/xrootd/issues/975
pss.ciosync 60 900
# Enable checksums
#
xrootd.redirect webdav.echo.stfc.ac.uk:1094 chksum
#xrootd.chksum max 50 adler32
#ofs.ckslib * /usr/lib64/libXrdCksPlugin.so /etc/xrootd/xrd_cephsum.sh
# Disk cache location
#
oss.localroot /xcache
# set socket timeout to prevent buildup of hanging connections
xrd.timeout idle 60m read 10
# Proxy settings
#
pfc.ram 58g
pfc.diskusage 0.89 0.90 purgecoldfiles 2d 5
pfc.blocksize 8m
pfc.prefetch 0
# disable XCache consistency checking due to large observed performance penalty
pfc.cschk off
# Configure gsi security
#
xrootd.seclib /usr/lib64/libXrdSec.so
sec.protparm gsi -vomsfun:libXrdVoms.so -vomsfunparms:certfmt=pem|grpopt=useall|dbg
sec.protocol gsi -dlgpxy:request -exppxy:=creds -crl:require -certdir:/etc/grid-security/certificates -cert:/etc/gateway/hostcert.pem -key:/etc/gateway/hostkey.pem -gridmap:/etc/grid-security/voms-mapfile -gmapopt:trymap -d:1
sec.protbind * only gsi
# Configure authorisation
#
ofs.authorize
acc.authdb /etc/gateway/voms-authdb-ro
acc.audit deny grant
# Name-to-name mapping
#
pss.namelib /usr/lib64/libXrdCmsTfc.so file:/etc/xrootd/storage.xml?protocol=xrootd
# Configure internal fstream event reporting
# details: https://wiki.e-science.cclrc.ac.uk/web1/bin/view/EScienceInternal/XrootdMonitoring
#
xrootd.monitor all auth fstat 10s ops lfn xfr 1 ident 1m dest fstat info user redir 172.16.105.115:9931 dest fstat info user redir 130.246.181.44:9993
# Configure internal report monitoring
# details: https://stfc.atlassian.net/wiki/spaces/X/pages/24543251/Xrd+Report+Monitoring
#
xrd.report 172.16.105.48:9931 every 5m all
# Specify CMS site name
#
all.sitename T1_UK_RAL
xrootd-ceph
###########################################################################
# This is a very simple sample configuration file sufficient to start an #
# xrootd data server using the default port 1094. This server runs by #
# itself (stand-alone) and does not assume it is part of a cluster. You #
# can then connect to this server to access files in '/tmp'. #
# Consult the the reference manuals on how to create more complicated #
# configurations. #
# #
# On successful start-up you will see 'initialization completed' in the #
# last message. You can now connect to the xrootd server. #
# #
# Note: You should always create a *single* configuration file for all #
# daemons related to xrootd. #
###########################################################################
# The export directive indicates which paths are to be exported. While the
# default is '/tmp', we indicate it anyway to show you this directive.
#
all.export *? readonly
all.export / readonly
# The adminpath and pidpath variables indicate where the pid and various
# IPC files should be placed
#
all.adminpath /var/spool/xrootd
all.pidpath /var/run/xrootd
xrootd.async off
xrd.buffers maxbsz 8m
# Configure sss security
#
xrootd.seclib /usr/lib64/libXrdSec.so
sec.protocol sss -s /etc/gateway/sss.keytab.grp -c /etc/gateway/sss.keytab.grp
sec.protbind * only sss
# Configure rados connection
#
ofs.osslib +cksio /usr/lib64/libXrdCeph.so xrootd@,1,8388608,67108864
ofs.xattrlib /usr/lib64/libXrdCephXattr.so
xrootd.chksum max 50 adler32
# set socket timeout to prevent buildup of hanging connections
xrd.timeout idle 60m read 10
# Configure the port
#
xrd.port 1095
#xrdceph configs
#buffers
ceph.usebuffer 1
ceph.bufferiomode io
ceph.buffersize 8m
ceph.usereadvalg 0
ceph.readvalgname passthrough
# Configure internal report monitoring
# details: https://stfc.atlassian.net/wiki/spaces/X/pages/24543251/Xrd+Report+Monitoring
#
xrd.report 172.16.105.48:9931 every 5m all