X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/51ba2f73ed38769862ce44a767ffbd954bf653f9..a032922e52b7c4a5b5b461ca62d289b702d922e8:/cookbooks/tilecache/templates/default/squid.conf.erb diff --git a/cookbooks/tilecache/templates/default/squid.conf.erb b/cookbooks/tilecache/templates/default/squid.conf.erb index 205219f86..aeb7c1e7d 100644 --- a/cookbooks/tilecache/templates/default/squid.conf.erb +++ b/cookbooks/tilecache/templates/default/squid.conf.erb @@ -1,8 +1,10 @@ acl osmtile_sites dstdomain a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org tile.openstreetmap.org a.tile.osm.org b.tile.osm.org c.tile.osm.org tile.osm.org acl osmtiles_png urlpath_regex .png$ -#acl osmtileScrapers browser ^offlinemap\-lite -#http_access deny osmtile_sites osmtileScrapers +acl osmtileScrapers browser ^offlinemap\-lite +acl osmtileScrapers browser ^Wget +acl osmtileScrapers browser ^Apache\-HttpClient +http_access deny osmtile_sites osmtileScrapers acl whitelist_path urlpath_regex ^/cgi-bin/(export|debug)$ acl blacklist_path urlpath_regex ^/cgi-bin/ @@ -11,6 +13,15 @@ acl blacklist_path urlpath_regex ^/myadmin/ acl blacklist_path urlpath_regex ^/pma/ acl blacklist_path urlpath_regex ^/phpmyadmin/ acl blacklist_path urlpath_regex ^/phpMyAdmin/ +acl blacklist_path urlpath_regex ^/idssvc/ +acl blacklist_path urlpath_regex ^/iesvc/ +acl blacklist_path urlpath_regex ^/invoker/ +acl blacklist_path urlpath_regex ^/jmx-console/ +acl blacklist_path urlpath_regex ^/manager/ +acl blacklist_path urlpath_regex ^/service/ +acl blacklist_path urlpath_regex ^/web-console/ +acl blacklist_path urlpath_regex ^/wstats/ +acl blacklist_path urlpath_regex ^/zecmd/ http_access allow osmtile_sites whitelist_path http_access deny blacklist_path @@ -20,29 +31,18 @@ http_access allow osmtile_sites acl osmtile_nocache_url urlpath_regex \.png/(status|dirty)$ cache deny osmtile_sites osmtile_nocache_url -<% if node[:fqdn] == "nadder-01.openstreetmap.org" -%> -cache_peer nadder-02.openstreetmap.org sibling 3128 3130 proxy-only -<% end -%> -<% if node[:fqdn] == "nadder-02.openstreetmap.org" -%> -cache_peer nadder-01.openstreetmap.org sibling 3128 3130 proxy-only -<% end -%> -<% if node[:fqdn] == "trogdor.openstreetmap.org" -%> -cache_peer fume.openstreetmap.org sibling 3128 3130 -<% end -%> -<% if node[:fqdn] == "fume.openstreetmap.org" -%> -cache_peer trogdor.openstreetmap.org sibling 3128 3130 -<% end -%> -<% if node[:fqdn] == "jakelong.openstreetmap.org" -%> -cache_peer nadder-01.openstreetmap.org sibling 3128 3130 proxy-only -cache_peer nadder-02.openstreetmap.org sibling 3128 3130 proxy-only +<% node[:tilecache][:tile_siblings].each do |sibling| -%> +cache_peer <%= sibling %> sibling 3128 3130 proxy-only <% end -%> +#Primary Parent cache_peer <%= node[:tilecache][:tile_parent] %> parent 80 0 no-query originserver name=osmtileAccel login=PASS connect-timeout=60 no-digest weight=1000 -cache_peer render.openstreetmap.org parent 80 0 no-query originserver name=osmtileAccelBackup login=PASS connect-timeout=60 no-digest weight=10 - cache_peer_access osmtileAccel allow osmtile_sites -cache_peer_access osmtileAccelBackup allow osmtile_sites -cache_peer_access osmtileAccel deny all -cache_peer_access osmtileAccelBackup deny all + +#Backup Parents +<% @renders.each do |renders| -%> +cache_peer <%= renders[:hostname] %>.render.openstreetmap.org parent 80 0 no-query originserver name=osmtileAccelBackup<%= renders[:hostname] %> login=PASS connect-timeout=60 no-digest weight=10 +cache_peer_access osmtileAccelBackup<%= renders[:hostname] %> allow osmtile_sites +<% end -%> #---------------------------------- #Create an unlimited pool for cache IP addresses