Odoo DevOps
& Infrastructure.
35+ expert questions for System Admins and Architects. Master production deployment, scaling, and high-availability.
SysAdmin Roadmap
Infrastructure & Hosting
When should a large enterprise choose Odoo.sh over a dedicated AWS/GCP setup?
ANS:Odoo.sh is ideal for rapid development and built-in CI/CD. For 500+ users, heavy processing, or strict data residency, dedicated AWS/GCP with Kubernetes is preferred for better scaling control.
Explain the role of Nginx in an Odoo deployment.
ANS:Nginx acts as a Reverse Proxy handling SSL termination, static file caching, request buffering, and load balancing between workers.
What is the purpose of the WebSocket port (8072)?
ANS:It handles real-time communications (Chat, Notifications) via /websocket. Nginx must route these requests specifically to the gevent-based 8072 port.
Database Administration & Tuning
How do you handle 'Database Bloat' in PostgreSQL?
ANS:Monitor dead tuples and tune autovacuum aggressively. For extreme cases, use pg_repack to reclaim space without locking tables.
What is Pgbouncer and why is it mandatory for high-concurrency?
ANS:It's a connection pooler that allows hundreds of Odoo workers to share a smaller pool of Postgres connections, reducing DB overhead.
How do you optimize 'Slow Queries'?
ANS:Analyze EXPLAIN ANALYZE output. Usually solved by adding missing B-tree or GIN indexes, or refactoring ORM calls to avoid search() loops.
Security Hardening & Compliance
Best practices for Odoo Server Security?
ANS:Use SSH keys, disable /web/database/manager, implement Fail2Ban, run Odoo as a dedicated system user, and keep Postgres on a private subnet.
How do you manage 'Secrets' (API Keys, DB Passwords)?
ANS:Use Environment Variables or Secret Managers (AWS Secrets, Vault) rather than hardcoding. Avoid storing secrets in the database where possible.
Explain Odoo's 'Master Password' security.
ANS:Used for DB management via UI. In production, it should be a strong hash in odoo.conf (admin_passwd) and the /web/database selector should be disabled.
Monitoring & Error Tracking
21. How do you monitor Odoo performance in real-time?
ANS:Use tools like Prometheus with a PostgreSQL exporter, or Odoo-specific monitors like 'Odoo Performance Monitor'. For errors, integrate Sentry to capture Python tracebacks and JS errors.
22. Explain the importance of 'Log Rotation'.
ANS:Odoo can generate GBs of logs daily. Use 'logrotate' to compress and delete old logs, preventing the disk from filling up and crashing the server.
23. How do you track 'Memory Leaks' in Odoo workers?
ANS:Monitor the RSS (Resident Set Size) of worker processes. If they grow indefinitely, it's a sign of a leak. Odoo's 'limit_memory_soft' helps by recycling workers after they reach a certain threshold.
24. What is 'Long-polling' and why does it need a separate port?
ANS:It's a way for the server to push data to the browser. It uses a gevent-based server on port 8072 because long-held connections would block standard workers.
25. How do you debug 'Database Connection' issues?
ANS:Check pg_hba.conf for permissions, verify the db_host and db_port in odoo.conf, and check for 'Too many connections' in Postgres logs.
Advanced Architecture & Scaling
26. How do you implement 'Read-Only' replicas for Odoo?
ANS:While Odoo doesn't natively support read/write splitting, you can use a middleware like 'Pgpool-II' to route read queries to replicas and write queries to the primary.
27. Explain 'Shared Filestore' for multi-server setups.
ANS:Use Amazon S3 (with a custom module) or a mounted NFS/EFS volume. All app servers must access the same /var/lib/odoo/filestore to see attachments/images.
28. What is 'Gevent' and why is it used in Odoo?
ANS:A coroutine-based Python networking library. Odoo uses it for the 'Long-polling' server to handle thousands of concurrent connections efficiently.
29. How do you scale Odoo to 1,000+ concurrent users?
ANS:Horizontal scaling: Multiple Nginx load balancers -> 10+ Odoo App Servers -> Large RDS/Postgres Cluster -> Pgbouncer -> Redis for session storage.
30. What is 'Stateless Odoo'?
ANS:An architecture where app servers don't store local data. Sessions are in Redis, files are in S3, and the database is remote. This allows servers to be destroyed/re-created easily.
Odoo.sh & Managed Hosting
31. How does Odoo.sh handle 'Branching'?
ANS:Every GitHub branch is a separate Odoo instance. 'Production' is for live, 'Staging' for testing with real data, and 'Development' for unit tests.
32. What is the 'Shell' in Odoo.sh?
ANS:A web-based terminal that allows you to run odoo-bin commands, inspect logs, or interact with the database directly in the cloud environment.
33. How do you restore a backup on Odoo.sh?
ANS:Go to the 'Backups' tab and click 'Import' or 'Restore' on a specific branch. It's automated and handles both DB and filestore.
Odoo 19.0 DevOps Specifics
34. What is the 'REST API' hardening in v19?
ANS:Odoo 19 introduces stricter scopes for API keys, allowing you to limit a key to specific models or methods (e.g., only 'read' on 'sale.order').
35. How does Odoo 19 improve 'Asset Compilation' performance?
ANS:By using a faster internal bundler and better caching for OWL components, reducing the time it takes for the first page load in production.
Production Config Templates
Nginx Reverse Proxy
upstream odoo {
server 127.0.0.1:8069;
}
upstream odoo-chat {
server 127.0.0.1:8072;
}
server {
listen 443 ssl http2;
location /websocket {
proxy_pass http://odoo-chat;
proxy_set_header Upgrade $http_upgrade;
}
location / {
proxy_pass http://odoo;
}
}PostgreSQL Optimization
shared_buffers = 4GB # 25% RAM
work_mem = 64MB
effective_cache_size = 12GB
autovacuum_vacuum_scale_factor = 0.05
random_page_cost = 1.1 # For SSDDevOps Mastery Checklist
- ✓ SSL/TLS 1.3 via Nginx
- ✓ Aggressive DB Autovacuum
- ✓ Automated Backup Verification
- ✓ Memory-Hard Limits Configured
- ✓ Fail2Ban & Security Hardening
- ✓ WebSocket Routing (8072)
Deploy Odoo on High-Performance
Infrastructure & Cloud
Tired of slow database queries and workers freezing? We design multi-tier PostgreSQL architectures, Nginx load balancing, and secure Docker deployments optimized for speed.