Merge "Better diag for Gerrit server connection limit"

inventory/service/group_vars/review.yaml

@@ -1,6 +1,7 @@
 exim_extra_aliases:
   gerrit2: root
 iptables_rules:
+  - -p tcp --syn --dport 29418 -m connlimit --connlimit-above 100 -j LOG
   - -p tcp --syn --dport 29418 -m connlimit --connlimit-above 100 -j REJECT
 iptables_extra_public_tcp_ports:
   - 80

playbooks/roles/gerrit/tasks/main.yaml

@@ -333,3 +333,9 @@
 
 - name: Setup db backups
   include_tasks: backup.yaml
+
+# This is handy to have for inspecting the firewall's connection tracking.
+- name: Install conntrack
+  package:
+    name: conntrack
+    state: present