From e241a7c7233b23bd20106cbb2fbefc5411113f11 Mon Sep 17 00:00:00 2001
From: Alex Firmani <jafirmani@gmail.com>
Date: Fri, 16 Oct 2026 15:01:28 -0700
Subject: [PATCH] Raise the bootstrappers' inbound connection limit to 64000

All four bootstrap instances had used their 16000 inbound connection slots
(System.ConnsInbound), so kubo's resource manager refused new connections
while the ports still accepted TCP. Fresh handshakes from outside succeeded
about 1 time in 5, which the ProbeLab probes saw as flapping.

Kubo computes System.ConnsInbound as 2 x ConnMgr.HighWater, so raise
HighWater to 32000 and LowWater to 16000, giving 64000. Raise
MaxFileDescriptors to 131072 for the roughly 60000 descriptors that many
connections need.

Swarm.ResourceMgr.Limits is not an option: kubo removed it in 0.19 and
refuses to start with it set.

Rolled out one box at a time on 2026-10-16. All four instances show a
64000 limit and complete 5 of 5 handshakes from outside.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 roles/bootstrap/files/kubo-config.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/roles/bootstrap/files/kubo-config.json b/roles/bootstrap/files/kubo-config.json
index d69c9e7..3158b5a 100644
--- a/roles/bootstrap/files/kubo-config.json
+++ b/roles/bootstrap/files/kubo-config.json
@@ -194,8 +194,8 @@
     ],
     "ConnMgr": {
       "GracePeriod": "1m",
-      "HighWater": 8000,
-      "LowWater": 4000,
+      "HighWater": 32000,
+      "LowWater": 16000,
       "Type": "basic"
     },
     "DisableBandwidthMetrics": false,
@@ -206,7 +206,7 @@
     },
     "ResourceMgr": {
       "Enabled": true,
-      "MaxFileDescriptors": 65536,
+      "MaxFileDescriptors": 131072,
       "MaxMemory": "8GiB"
     },
     "Transports": {