Tuning

    The default settings in etcd should work well for installations on a local network where the average network latency is low. However, when using etcd across multiple data centers or over networks with high latency, the heartbeat interval and election timeout settings may need tuning.

    The network isn’t the only source of latency. Each request and response may be impacted by slow disks on both the leader and follower. Each of these timeouts represents the total time from request to successful response from the other machine.

    The underlying distributed consensus protocol relies on two separate time parameters to ensure that nodes can handoff leadership if one stalls or goes offline.
    The first parameter is called the Heartbeat Interval.
    This is the frequency with which the leader will notify followers that it is still the leader.
    For best practices, the parameter should be set around round-trip time between members.
    By default, etcd uses a heartbeat interval.

    The second parameter is the Election Timeout.
    This timeout is how long a follower node will go without hearing a heartbeat before attempting to become leader itself.
    By default, etcd uses a 1000ms election timeout.

    The election timeout should be set based on the heartbeat interval and average round-trip time between members.
    Election timeouts must be at least 10 times the round-trip time so it can account for variance in the network.
    For example, if the round-trip time between members is 10ms then the election timeout should be at least 100ms.

    The election timeout should be set to at least 5 to 10 times the heartbeat interval to account for variance in leader replication.
    For a heartbeat interval of 50ms, set the election timeout to at least 250ms - 500ms.

    The upper limit of election timeout is 50000ms (50s), which should only be used when deploying a globally-distributed etcd cluster.
    A reasonable round-trip time for the continental United States is 130ms, and the time between US and Japan is around 350-400ms.
    If the network has uneven performance or regular packet delays/loss then it is possible that a couple of retries may be necessary to successfully send a packet. So 5s is a safe upper limit of global round-trip time.
    As the election timeout should be an order of magnitude bigger than broadcast time, in the case of ~5s for a globally distributed cluster, then 50 seconds becomes a reasonable maximum.

    The heartbeat interval and election timeout value should be the same for all members in one cluster. Setting different values for etcd members may disrupt cluster stability.

    The values are specified in milliseconds.

    etcd appends all key changes to a log file.
    This log grows forever and is a complete linear history of every change made to the keys.
    A complete history works well for lightly used clusters but clusters that are heavily used would carry around a large log.

    To avoid having a huge log etcd makes periodic snapshots.
    These snapshots provide a way for etcd to compact the log by saving the current state of the system and removing old logs.

    Creating snapshots can be expensive so they’re only created after a given number of changes to etcd.
    By default, snapshots will be made after every 10,000 changes.
    If etcd’s memory usage and disk usage are too high, try lowering the snapshot threshold by setting the following on the command line:

    These errors may be resolved by prioritizing etcd’s peer traffic over its client traffic. On Linux, peer traffic can be prioritized by using the traffic control mechanism: