CDN infrastructure¶

Overview
We use Fastly as a CDN provider for our web content.¶

Who has access?

• Greg
• Ewoud
• Evgeni

Which vhosts are served via CDN?

• downloads.theforeman.org
• stagingdeb.theforeman.org

Setup¶

Varnish

• Service: *.theforeman.org
• Domains: theforeman.org and *.theforeman.org
• Backend: web02.theforeman.org, with TLS enabled and a health check for HEAD /introduction.html

TLS
Fastly provides a shared certificate which has theforeman.org and *.theforeman.org added. (There is a _globalsign-domain-verification TXT record in the theforeman.org DNS zone for that.)¶

DNS
Each vhost needs a CNAME pointing at p2.shared.global.fastly.net¶

TODO

• Split the Varnish service in multiple, to allow stats to be collected per domain
• Investigate IPv6
• Move more vhosts as soon as the current ones are deemed stable