trafficserver-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jan-Frode Myklebust <janfr...@tanso.net>
Subject Re: trafficserver-3.2.4 unstable?
Date Thu, 07 Feb 2013 12:55:13 GMT
On Thu, Feb 07, 2013 at 11:54:24AM +0100, Reindl Harald wrote:
> 
> /etc/trafficserver/remap.config has some hundret hosts like below
> on the machine is running dnsmasq on 127.0.0.1 to feed the target
> IP's and dnsmasq-config is also as "remap.config" automatically
> created with any hostname in teh infrastructure
> 
> map http://www.rhsoft.net http://www.rhsoft.net
> reverse_map http://www.rhsoft.net http://www.rhsoft.net

Does that reverse_map make any sense ? 

> [Service]
> Type=simple
> ExecStart=/usr/bin/traffic_cop
> ExecReload=/usr/bin/traffic_line -x
> Restart=always
> RestartSec=1
> LimitNOFILE=100000
> LimitMEMLOCK=infinity
> OOMScoreAdjust=-1000
> PrivateTmp=yes
> CapabilityBoundingSet=~CAP_SYS_PTRACE
> InaccessibleDirectories=/boot
> InaccessibleDirectories=/home
> InaccessibleDirectories=/usr/local/scripts
> InaccessibleDirectories=/var/lib/rpm
> InaccessibleDirectories=/var/spool

Cool that you're using systemd to restrict ATS like that, but could it
cause problems? Does maybe the default proxy.config.stack_dump_enabled=1
conflict with disabling CAP_SYS_PTRACE ? 

Sorry, HTH, but I'm just guessing here..


  -jf

Mime
View raw message