Infrastructure CDN » History » Version 5
Evgeni Golov, 06/15/2018 01:55 PM
| 1 | 1 | Evgeni Golov | h1. CDN infrastructure |
|---|---|---|---|
| 2 | |||
| 3 | h2. Overview |
||
| 4 | 4 | Anonymous | |
| 5 | 1 | Evgeni Golov | We use "Fastly":https://www.fastly.com as a CDN provider for our web content. |
| 6 | |||
| 7 | h2. Who has access? |
||
| 8 | 4 | Anonymous | |
| 9 | 1 | Evgeni Golov | * Greg |
| 10 | * Ewoud |
||
| 11 | * Evgeni |
||
| 12 | |||
| 13 | h2. Which vhosts are served via CDN? |
||
| 14 | 4 | Anonymous | |
| 15 | 1 | Evgeni Golov | * downloads.theforeman.org |
| 16 | * stagingdeb.theforeman.org |
||
| 17 | |||
| 18 | h2. Setup |
||
| 19 | |||
| 20 | h3. Varnish |
||
| 21 | 2 | Evgeni Golov | |
| 22 | h4. theforeman.org |
||
| 23 | 4 | Anonymous | |
| 24 | 2 | Evgeni Golov | * Service: <code>theforeman.org</code> |
| 25 | * Domains: <code>theforeman.org</code> and <code>www.theforeman.org</code> |
||
| 26 | 1 | Evgeni Golov | * Backend: <code>web02.theforeman.org</code>, with TLS enabled and a health check for <code>HEAD /introduction.html</code> |
| 27 | 2 | Evgeni Golov | * this service currently gets no traffic as it is not configured in DNS |
| 28 | |||
| 29 | h4. downloads.theforeman.org |
||
| 30 | 4 | Anonymous | |
| 31 | 2 | Evgeni Golov | * Service: <code>downloads.theforeman.org</code> |
| 32 | * Domains: <code>downloads.theforeman.org</code> |
||
| 33 | * Backend: <code>web02.theforeman.org</code>, with TLS enabled and a health check for <code>HEAD /HEADER.html</code> |
||
| 34 | |||
| 35 | h4. stagingdeb.theforeman.org |
||
| 36 | 4 | Anonymous | |
| 37 | 2 | Evgeni Golov | * Service: <code>stagingdeb.theforeman.org</code> |
| 38 | * Domains: <code>stagingdeb.theforeman.org</code> |
||
| 39 | * Backend: <code>web02.theforeman.org</code>, with TLS enabled and a health check for <code>HEAD /HEADER.html</code> |
||
| 40 | 1 | Evgeni Golov | |
| 41 | h3. TLS |
||
| 42 | 4 | Anonymous | |
| 43 | 1 | Evgeni Golov | Fastly provides a shared certificate which has <code>theforeman.org</code> and <code>*.theforeman.org</code> added. (There is a <code>_globalsign-domain-verification</code> <code>TXT</code> record in the theforeman.org DNS zone for that.) |
| 44 | |||
| 45 | h3. DNS |
||
| 46 | 4 | Anonymous | |
| 47 | 5 | Evgeni Golov | Each vhost needs a CNAME pointing at <code>p2.shared.global.fastly.net</code> or <code>dualstack.p2.shared.global.fastly.net</code> for a DualStack setup. |
| 48 | 1 | Evgeni Golov | |
| 49 | h2. TODO |
||
| 50 | 4 | Anonymous | |
| 51 | 5 | Evgeni Golov | * Investigate logging posibilities |
| 52 | 1 | Evgeni Golov | * Move more vhosts as soon as the current ones are deemed stable |