Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

To setup basic security in your Traffic InstallServer install, you'll have to configure a different file,
by default /usr/local/etc/trafficserver/ip_allow.config. If you've ever done firewall
work the theory is very similar...simply list to Traffic Server what is allowed,
followed by what is NOT allowed.

Code Block
# Allow anything on localhost (this is the default configuration based on the
# depricated CONFIG proxy.config.http.quick_filter.mask INT 0x482)
src_ip=127.0.0.1                                  action=ip_allow method=ALL
src_ip=::1                                        action=ip_allow method=ALL
# Deny everything else.
src_ip=0.0.0.0-255.255.255.255                    action=ip_deny  method=ALL
src_ip=::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff action=ip_deny  method=ALL

Web Cache Size

The Apache Traffic Server default install configures this to be 256MB, a rather small size
as is noted in the configuration file. I went with 2GB. The following is found in the
config file /usr/local/etc/trafficserver/storage.config.

Code Block

var/trafficserver 2048M

Also, to be sure that Traffic Server doesn't get confused, one should remove the existing
web cache database file if one exists.

Code Block

sudo rm /usr/local/var/trafficserver/cache.db

Start It Up!

Once the above has been completed, it's time to give it all a try.

...