Systemd

It’s recommended to use a process manager like systemd when using Kuma on VMs. Here are examples of systemd configurations

kuma-cp

  1. [Unit]
  2. Description = Kuma Control Plane
  3. After = network.target
  4. Documentation = https://kuma.io
  6. [Service]
  7. User = < user to use to run the process >
  8. Environment = KUMA_MODE=standalone
  9. WorkingDirectory = <directory of the Kuma install >
  10. ExecStart = ./bin/kuma-cp run --config-file=./cp-config.yaml
  11. # if you need your Control Plane to be able to handle a non-trivial number of concurrent connections
  12. # (a total of both incoming and outgoing connections), you need to set proper resource limits on
  13. # the `kuma-cp` process, especially maximum number of open files.
  14. #
  15. # it happens that `systemd` units are not affected by the traditional `ulimit` configuration,
  16. # and you must set resource limits as part of `systemd` unit itself.
  17. #
  18. # to check effective resource limits set on a running `kuma-cp` instance, execute
  19. #
  20. #   $ cat /proc/$(pgrep kuma-cp)/limits
  21. #
  22. #   Limit                     Soft Limit           Hard Limit           Units
  23. #   ...
  24. #   Max open files            1024                 4096                 files
  25. #   ...
  26. #
  27. # for Kuma demo setup, we chose the same limit as `docker` and `containerd` set by default.
  28. # See https://github.com/containerd/containerd/issues/3201
  29. LimitNOFILE = 1048576
  30. Restart = always
  31. RestartSec = 1s
  32. # disable rate limiting on start attempts
  33. StartLimitIntervalSec = 0
  34. StartLimitBurst = 0
  36. [Install]
  37. WantedBy = multi-user.target

kuma-dp

  1. [Unit]
  2. Description = Kuma Data Plane Proxy
  3. After = network.target
  4. Documentation = https://kuma.io
  6. [Service]
  7. User = < user to use to run the process >
  8. WorkingDirectory = <directory of the Kuma install >
  9. ExecStart = ./bin/kuma-dp run \
  10.   --cp-address=https://<kuma-cp-address>:5678 \
  11.   --dataplane-token-file=./echo-service-universal.token \
  12.   --dataplane-file=./dataplane-notransparent.yaml \
  13.   --ca-cert-file=./ca.pem
  14. Restart = always
  15. RestartSec = 1s
  16. # disable rate limiting on start attempts
  17. StartLimitIntervalSec = 0
  18. StartLimitBurst = 0
  20. [Install]
  21. WantedBy = multi-user.target