AIX

Hi,

what are the ideal/best/recommended ulimit settings for a root user in AIX?
I understand that it depends on our environment. But I would like to know...what are settings you guys use in your environment for best performance.

default:

Code:

        fsize = 2097151
        core = 2097151
        cpu = -1
        data = 262144
        rss = 65536
        stack = 65536
        nofiles = 2000

can i make it unlimited ? I tried changing it to unlimited. I do not see any issues so far from past few weeks.

my current settings

Code:

time(seconds)        unlimited
file(blocks)         unlimited
data(kbytes)         unlimited
stack(kbytes)        32768
memory(kbytes)       unlimited
coredump(blocks)     2097151
nofiles(descriptors) 9000
threads(per process) unlimited
processes(per user)  unlimited

can you please suggest the recommended settings based on your experience.

Thanks,

Were you having issues from it being limited?

Its always better to have unlimited for root, as its the boss.
Moreover, when you do operations as root, you need those values at higher range.

Example: To transfer huge file(s), you need files (blocks) at very high value or better unlimited, because it will stop the transfer after it reach the defined value.

So, keep the boss smiling and you will be happy too.

@ Corona688
not really.

@ibmtech
thanks for your reply. I understand that unlimited needed for fsize parameter for transferring huge files. but i have doubt regarding the other parameter values like below

Code:

time(seconds) unlimited
file(blocks) unlimited
data(kbytes) unlimited
stack(kbytes) 32768
memory(kbytes) unlimited
threads(per process) unlimited
processes(per user) unlimited

As suggested by others why would you want to set limits for root? If you limit root you risk locking yourself out of the OS. Any applications running should run as a user created for the task, you can then apply limits to that user to protect the servers performance without risking blocking the root user.
Just today we had an application spin out of control and hit the limit of processes for the user account which had started the application. This meant that application support could not login to the server, but as root I was able to login and kill the rogue process.

The limits are there to protect you. For a superuser account and indeed any other account, you have to ask yourself how much damage it could do by not having a limit.

I don't think that performance will come into it much unless your processing goes wild and an unlimited (or loosely limited) account starts grabbing all the system resources. This need not be a superuser either. We're had other software holding accounts grind a server to unusable. It's hard trying to escape even if you are already logged on as a superuser. Things like ps start failing and the like.

As a rule, I'd generally allow the least that I actually require.


Just my humble opinion though.

Robin

@dluk @rbatte1

Thanks for your response. But am little confused here. please help me understand.

Do we need to set the limits to Unlimited for a root user ?
Can you please give ideal setting for root

Thanks