So in reality there are logs and they are available for some time, and this solution is much, much faster then logging to a file and it doesn’t require disk space, but how we can get them on file, possibly divided by virtual host as do Apache or Nginx ?

The first tool that we can use to see the logs is varnishlog, from the varnish site:

varnishlog is one of the programs you can use to look at what Varnish is logging. Varnishlog gives you the raw logs, everything that is written to the logs. There are other clients as well, we’ll show you these later.

In the terminal window you started varnish now type varnishlog and press enter.
….

11 SessionOpen  c 127.0.0.1 58912 0.0.0.0:8080
11 ReqStart     c 127.0.0.1 58912 595005213
11 RxRequest    c GET
11 RxURL        c /
11 RxProtocol   c HTTP/1.1
11 RxHeader     c Host: localhost:8080
11 RxHeader     c Connection: keep-alive

The first column is an arbitrary number, it defines the request. Lines with the same number are part of the same HTTP transaction. The second column is the tag of the log message. All log entries are tagged with a tag indicating what sort of activity is being logged. Tags starting with Rx indicate Varnish is recieving data and Tx indicates sending data.

The third column tell us whether this is is data coming or going to the client (c) or to/from the backend (b). The forth column is the data being logged.

So varnishlog is an interesting tool for a live session when you want to verify if your varnish is doing what you expect, but not so useful when you want to put the logs into a file.

So let’s move to Varnishncsa, another varnish tool that can be much more useful for our goal, Varnishncsa display Varnish logs in Apache / NCSA combined log format

The basic usage from the command line is:

varnishncsa -a -w /var/log/varnish/access.log -D -P /var/run/varnishncsa.pid

-a: To append the logs to an already existing file
-w: To write the logs to the /var/log/varnish/access.log file
-D: To run varnishncsa as a daemon
-P: To write the PID file in the /var/run/ folder

The problem wIth this command is that we’ll get just 1 access.log file that is good as long as we manage with Varnish just 1 Virtual hosts, but could be not so useful if we want to have 1 file for every Virtual host defined in our Web server.

A good solution that I’ve found in the blog blox.xcir.net is to have 1 dedicated daemon for every virtual host and use the flag -m that is used to perform a regex match to the tag’s log entry so if we have 2 virtual host: linuxaria.com and linuxaria.org we could start 2 daemons with:

varnishncsa -m "RxHeader:^Host: linuxaria.com$" -a -w /var/log/varnish/linuxaria.com.access_log -D
varnishncsa -m "RxHeader:^Host: linuxaria.org$" -a -w /var/log/varnish/linuxaria.org.access_log -D

And these 2 daemons will generate 2 access_log files with the entry only for these Virtual hosts, now you can use logrotate to rotate the logs every day, just remember to restart the daemon in this case, or statistics software like awstats.

Related posts:

1. How to put Varnish in front of your Webserver without doing any change.
2. Supercharge WordPress, Part 3

If you have not heard of it, then you have missed a lot.

Zorin OS team, Linuxaria and Linux notes from DarkDuck are giving prizes for the best Linux- or ZorinOS-related stories.

The contest was announced on the 6th of May and was planned to run for 2 weeks.

I am happy to announce that the contest has been extended to 1 months for the many submissions we are receiving.

You can submit your stories until the 6th of June, and organizers will decided who gets the prizes on the 8th of June.

No related posts.

These are some solutions that you can use:

1) If you have a smartphone, save the file onit. And open it from any PC or laptop simply by connecting the device and running the software from your PC!

2) IMO the best solution is to keep the archive on the clouds, with a good password of course, and choose a service that encrypt the files such as Spideroak.

The practicality of this software is one of the key features that make it a leader in this field. But also many other interesting features. First it’s Open source, very intuitive, thanks to the interface translated into many languages ​​and a very simple, very complete, lightweight and, above all, safe structure. Even in the security of its components is king! To access your password you have two choices. A simple “keyphrase” or you can combine this with a file. In short, you must either set a password or give to the software the path of a file that will allow the opening of the archive.

Other features of KeePassX include:

Extensive management- title for each entry for its better identification

• possibility to determine different expiration dates
• insertion of attachments
• user-defined symbols for groups and entries
• fast entry dublication
• sorting entries in groups

Search function

• search either in specific groups or in complete database

Database security

• access to the KeePassX database is granted either with a password, a key-file (e.g. a CD or a memory-stick) or even both.

Automatic generation of secure passwords

• extremly customizable password generator for fast and easy creation of secure passwords

Precaution features

• quality indicator for chosen passwords
• hiding all passwords behind asterisks

Encryption- either the Advanced Encryption Standard (AES) or the Twofish algorithm are used

• encryption of the database in 256 bit sized increments

Import and export of entries

• import from PwManager (*.pwm) and KWallet (*.xml) files- export as textfile (*.txt)

Operating system independent

• KeePassX is cross platform, so are the databases, as well

Conclusions

Well, you’ve got a software that will allow and will guarantee the absolute safety for the management of the passwords. Now you just need to head to the official page, or store or access your repository and start the download!
And please … when you open the file make sure not to be under prying eyes! All in all … yes … is tested against hacking or bruteforce … but not from the nosy!

No related posts.

I found the conference very interesting, with speakers from around the world that have described several open source products and best practices on monitoring but also on configuration and management tools. A big surprise for me has been the strong push for alternatives softwares to Nagios for monitoring in particular Shinken and Icinga have received many praise.

But before I give some more details about the presentations a few words about the company that has hosted about 400 people in their, free of charge, event, Wuerth-Phoenix manufactures and markets an appliance called NetEye, within there are many Open source products including:

Nagios Core, with many preinstalled plugins, Cacti, ocsinventory, GLPI, NfSen, Nedi, and DocuWiki the highest level version has also OTRS, all these software are integrated with some web management interface developed by Wuerth-Phoenix itself.


After the greetings from the organizers the speakers have started with their talks, the slides are already online (compliments!) So if some description of the talks seem interesting, you can take an in-depth on the subjects with the original slides.

These are the talks that have impressed me more:

First talk:
Olivier Jan, Founder of the French Monitoring Community (F)

One of the most interesting talks in my opinion, Olivier has presented the tools that he thought might be the future of monitoring, the first consideration is that the cloud is increasing exponentially the number of hosts and services to monitor which thus requires a scalable monitoring solution, he sees two possible solutions for this problem:

Icinga installed with Mod_gearman an event broker (this also works with Nagios) that allow to scale horizontally the number of servers running the check, while maintaining a single central server management.

Or an alternative software created to make this task: Shinken, this software is born a few years ago with the idea to make a monitoring solution compatible with the cloud, with distinct elements that can be replicated and multiply, and so is possible to raise the number of checks really easily and without any loss in performance.

After that Olivier has talked about monitoring the end user experience, so not just the state of single ICT servers but browsing a complete website and check some outputs, the suggested tools for this tasks are:

Cucumber
Watir Webdriver
Sikuli

I never heard of these software, so I must definitely study them, thanks Olivier.

Another interesting aspect of his talk has been regarding the managment of the logs, for this task Olivier suggest 2 tools:

1Logstash

This is a tool for managing events and logs. You can use it to collect logs, parse them, and store them for later use (like, for searching). Speaking of searching, logstash comes with a web interface for searching and drilling into all of your logs.

Some of the features are:

• Various inputs (AMQP, Syslog, TCP, XMPP, file, Twitter…)
• Filters and rewrites (date, grep, gelfify, grok…)
• Various outputs (AMQP, websockets, Nagios, XMPP, MongoDB…)
• Can act as a collection daemon, transport agent as well as a pre or post log filter

2 graylog2

Graylog2 is an open source log management solution that stores your logs in ElasticSearch. It consists of a server written in Java that accepts your syslog messages via TCP, UDP or AMQP and stores it in the database. The second part is a web interface that allows you to manage the log messages from your web browser.

Features:

• Syslog daemon with extended possibilities (AMQP, GELF…)
• Web interface to interact in real-time with logs
• Elastic Search backend
• MongoDB for prefs
• Streams
• Blacklists
• Alerts (mail, Nagios)

These are some of the things i liked more but Olivier has talked also of other interesting software, check his slides for more info.

Second talk
Jeffrey Hammond, Principal Analyst Forrester Research (US)

Before the start I was thinking that a talk from an analyst would be really boring…i could not be more wrong !
Jeffrey has illustrated some interesting information on the adoption of Open source on big company, tracing in the 2009 the year when OS has “crossed the chasm”, becoming the most important part of the software in most of the biggest company.
A number that i remember is that 80% of the company use OS software in some of their phases (development, testing, desktop, server, etc.)

After this first information he has applied his analyst experience on evaluating some open source monitoring tools, taking in counts things like: number of developers, number of commit per month, how the code is commented, user rating and other aspects.
He has presented these information for the most famous monitoring software tools, and to make it short:

OS monitoring software on the raise: Cacti, Shinkend and Icinga
OS monitoring software going down : Zenoss, Hyperic HQ and Groundwork

As usual check his slides for more information.

Third talk:
Bernd Erk, Managing Director NETWAYS GmbH (GER)

This has been another great talk with the presentation of many interesting Open source software, the only bad thing for Bernd is that some of the software were also present in the first talk of the day.

Erk has presented the software starting from the ITIL Lifecycle, so presenting different Open Source software for any phase:

This is the list of software suggested for every phase:

Capacity Management – Tools

Independent Tools

• Cacti
• Munin
• Graphite

• Nagios/Icinga Addons

• PNP4Nagios
• inGraph

Of these i want to take a look at ingraph a software developed by netways.org

Availability Management – Tools

Business Process addon for icinga/Nagios

Deployment Management Tool

Puppet

Incident Management Tool

Request Tracker by BestPractical

Problem management Tools

• Jasper
• Pentaho
• Birt

Personally I must say that these 3 were the presentations that impressed me the most, perhaps because i knew very well some of the things in other talks, or I’ve already seen them in other events.

I advise you to look also at the slides of the talks:

Luca Deri, Founder ntop (I)
Getting more Information on your Network Performance

Talk where he presented the new tools for the Deep Packet Inspection (DPI) developed by him and his team and integrated into an appliance that can be used to monitor application-level flows used by users of a network.

Jimmy Conner, Cacti Plugin Architecture (US)
10 Year of Cacti – The latest Evolution of the new Plugins

In this talk Jimmy has presented the status for the Cacti project and some of the most commonly used plugins.

Michael Schwartzkopff, Consultant for high availability systems and network management (SWI)
Network Discovery with NeDi

A speech dedicated to the product NEDI, an open source software that can do the scan of the whole network, gather information about our equipment and report changes in the state of the network.

Conclusions

It’s been a great event, my compliments to all the speakers and to Wuerth-Phoenix for the organization, there were around 400 people following the talks, and I’ve enjoyed talking with them at the lunch, i hope to see you next year.

No related posts.

We all know and love Linux and its distributions. Operating Systems that are lightweight, fast, highly customizable, free, advanced … These are just some of the thousands of qualities that our OS Linux have! But as we are also humble users and Linux users … not cocky, we recognize the limits of our sweet penguin, there is a cons we have to remember that this operating system gives to us! Perhaps this is the only … A penalty that surely does not affect all, me for first ! On our beloved Linux Box, in fact, is really difficult to find games with appealing graphics. Maybe you can find some games, but not one of the highest successful video games like GTA, NFS and so on …

At least so far…



All of you who use Linux and love video games are about to discover something amazing …
That’s right! As you may have guessed from the title, some titles of respect are going to get in our machines! Just for some time, in fact, some famous video games producer are starting to notice the huge success of Linux distributions and, as a smart-for-profit corporations they are beginning to direct their thinking towards the scenario of the penguin games! Maybe a few days ago all this would seem a mere myth. But not today …

And in fact recently has been announced by two important games producer to release in a future not so far, a few titles of their works for our Linux Box!
Not everything is as abstract as some think … Indeed it would seem that the two houses, Steam and EA, have even announced the names of some video games. In the WEB In fact, it seems even possible to retrieve a screenshot of “Left4Dead” running on Ubuntu. If Steam has made ​​his move, EA has made a “Raise”! Jono Bacon, in fact, reported in his blog that Command & Conquer Tiberium Alliances and Lord of Ultima are about to come in the increasingly used world of Ubuntu.
Another thing near certainty is that these software, unlike the video games for Windows and Mac versions will not be available as box version but only on online store. In this case in the Ubuntu Software Center. Perhaps some will not be happy of this distribution, but if you think at this a bit further you can explore the possibility of having lower prices than the versions for other OS! After all, if you think about it, the videogame producer would save cash on paper and on DVD!


Also we can say goodbye to optical drives ruined by time and not only!
Unfortunately, talking about prices in the same article where I mention Ubuntu disturbs me and surely many of you I bet. But all in all we must also think about, Linux lover, that are willing to pay to buy the games. Of course, these users leave much to be desired in the philosophy of strictly “Open Source”, but we must also understand that it is difficult to repress a passion!

However, criticism or not, I, as a not gamer, I’m really curious to follow this story. A story that will surely be very exciting. Of course, we are just starting … but who knows how this will evolve!

Related posts:

1. Game Editor to create your game, on Linux
2. 4 Proprietary game from Ubuntu software center

To test this you can use an expendable virtual machine .

Why would you ever want to install Suicide Linux on your box ? Well, it’s certainly not practical, but it makes more sense as a test than as an actual operating system, I’ve thought at it could be a final test for an interview for System Administrators:

- Hello Mr. Thomas Anderson, please do a dump of the Mysql running on this machine, zip it on a file and than move it with netcat on this remote machine…. ah on this machine there is Sucide Linux so you cannot do mistakes.

I think that could be interesting to see where our candidates would arrives before they wipe out the whole disk…

Have Fun !!

No related posts.

This contest is organised together by Zorin OS team, Linuxaria, Linux notes from DarkDuck and Buy Linux CDs.

Who can participate?

Everyone with a passion for Linux, and with some writing skills. If you’re good enough to compose a short e-mail to your friend, then you’re ready for the contest.

What you need to do?

Please write a short story about Zorin OS, or maybe just Linux in general.

Why do you use Linux? How did you come to the Linux world? What do you like here? What are you doing to promote Linux? Any of these, or maybe your own themes are good.

It would be better, if your post is about Zorin OS, but this is just “nice to have”.

The text you’re going to write should not be one-liner. Please be little bit more productive. At least 50 words, if you don’t mind.

Where to send your works?

Please e-mail them to zorinos.contest@darkduck.com.

When to send?

Any time until the 6 of june 2012.

What will you get?

Organizers of the contest will select winners, and they will receive:

1. Disk with Zorin OS 6 Premium with all the attached support. Prize is given by Zorin OS team.
2. 15 USD bonus at Desura or similar resource, as per your agreement with Linuxaria, who has given this prize.
3. 10 GBP e-voucher for Amazon.co.uk site. Prize from Buy Linux CDs.
4. CD with any Linux distribution of your choice. Prize from Linux notes from DarkDuck.
5. 1 GB USB stick. Prize from Linux notes from DarkDuck.

Will my work be published?

By submitting your work, you allow organizers to use your work on their web sites, unless you specifically withdraw your permission in writing.

When will results be announced?

The results will be announced on the 8 of june 2012.
The winners will be contacted by e-mail.

Small print:

1. One prize per contestant.
2. Decisions of contest organizers are binding, and cannot be changed.
3. Non-monetary prizes cannot be exchanged for money.
4. No cash equivalents.
5. Monetary prizes will be given in currency stated: 15 USD and 10 GBP correspondingly.
6. In order to get non-monetary prizes, you must provide your postal address. This will be kept confidential and never disclosed to 3rd parties.
7. Winners must respond the requests within 14 calendar days. If there is no response, the prize will be withheld.

No related posts.

Personally I’m using it from 2010 and so far so good, no particular problems, it does perfectly his work and is frequently updated by the developers, I’m really happy of how is performing on my VPS and in this time I’ve learnt some small tricks and tips that perhaps could save you some time in the future.

1)

Enable phpmyadmin with https protocol on a non standard port on Nginx

it could be useful to have phpmyadmin installed to manage your DB, but it’s a good idea to have a dedicated Virtualhost on a dedicated (non standard port), so for example have it on https://linuxaria.com:111/phpmyadmin

If you use php5-fpm on standard port than your Nginx configuration to achieve this should be something like this one:

server {
    listen       111;
    error_page 497 = https://$host:111$request_uri;
    ssl                  on;
    ssl_certificate      /etc/myca/server.crt;
    ssl_certificate_key  /etc/myca/server.key;
    ssl_protocols        SSLv3 TLSv1;
    ssl_ciphers          HIGH:!aNULL:!MD5;
    root   /var/www/phpmyadmin;
    access_log /var/log/nginx/phpmyadmin-access.log;
    error_log /var/log/nginx/phpmyadmin-error.log;
 
 
    location / {
        index  index.html index.htm index.php;
    }
    location ~ \.php$ {
                include /opt/nginx/conf/fastcgi_params;
                fastcgi_pass  127.0.0.1:9000;
                fastcgi_index index.php;
                fastcgi_param  SCRIPT_FILENAME  /srv/wordpress/adminit/$fastcgi_script_name;
        }

The key directives are:

Listen 111 -> We tell to Nginx to listen on a particular port
ssl on; -> we turn on the secure channel (https)
error_page 497 = https://$host:111$request_uri; -> This is a good solution (IMO), if you reach this page with the http protocol, instead of getting an error page saying you are trying to use http on a https site you’ll be automatically redirected to the https site.

2)

Redirect url with www to non-www with Nginx

Some sites use www and others don’t use it, in both cases a good thing is to have something that redirect all the traffic of a type toward the other, so to forward all the non-www traffic to a www. url for linuxaria i could add these lines in my server configuration:

# Replace linuxaria.com with your domain
if ($host = linuxaria.com) {
rewrite ^/(.*)$ http://www.linuxaria.com/$1 permanent;
}

Or do the opposite if i want to remove the www.

if ($host = www.linuxaria.com) {
rewrite ^/(.*)$ http://linuxaria.com/$1 permanent;
}

3)

Hotlinking protection with Nginx

Hotlinking can be annoying, but if you want is easy to prevent it with Nginx.
Just remember that you’ll block also some search engine, like google Image, a thing that could be not so positive for your website.
In this example Nginx will returns a 403 when any hotlinking is detected.

location ~* (\.jpg|\.png|\.gif|\.jpeg)$ {
     valid_referers blocked www.linuxaria.com linuxaria.com;
     if ($invalid_referer) {
        return 403;
     }

Add this location inside your server block.

This directive use the Nginx HttpRefererModule, the directive valid_referers assigns a value of 0 or 1 to the variable $invalid_referer based on the contents of the referer header.

You can use this to help reduce deep-linking from outside sites. If Referer header is not accounted for in the list of valid_referers, then $invalid_referer will be set to 1, I’ve put as valid referer linuxaria.com and the special word blocked that means masked Referer header by firewall, for example, “Referer: XXXXXXX”.

4)

Send all pages to a maintenance page with Nginx

Perhaps you have to do some planned works on your CMS, or in general on your site, and you want that all your pages give a maintenance page with a message to the visitors, with these rules in your server you can achieve it:

error_page 503 @maintenance;

location /
{
if (-f $document_root/mymaintenance.html)
{
return 503;
}

try_files $uri /index.php?$args;
}

location @maintenance
{
rewrite ^ /mymaintenance.html break;
}

When you want to go on maintenance mode just create the file $document_root/mymaintenance.html with a message for your users.

Related posts:

1. How to put Varnish in front of your Webserver without doing any change.

SoundConverter is an audio file converter for the GNOME Desktop. It reads anything GStreamer can read (Ogg Vorbis, AAC, MP3, FLAC, WAV, AVI, MPEG, MOV, M4A, AC3, DTS, ALAC, MPC, Shorten, APE, SID, MOD, XM, S3M, etc…), and writes to WAV, FLAC, MP3, AAC, and Ogg Vorbis files.

More than enough for my standard tasks.

SoundConverter Features

• is simple to use, with an intuitive interface
• is very fast and uses multithreaded conversion
• is capable of processing many files with ease, CPU usage reduced.
• Ability to rename files automatically

Installation

Soundconverter is usually available in all the repository of the major distributions.
In my Ubuntu 12.04 i see that in the repository is available the version 1.5.4-1, so you can install it simply with a

sudo aptitude install soundconverter

Or if you prefer a newer release you can use the get deb repository, to add this external repository go to System-Administration-Software Sources, Third-Party Software tab, Add:
deb http://archive.getdeb.net/ubuntu precise-getdeb apps

Add the repository GPG key, open a terminal window and type:

wget -q -O- http://archive.getdeb.net/getdeb-archive.key | sudo apt-key add -

Run from the terminal:

sudo apt-get update

And now i can get soundconverter version 2.0.3-1~getdeb2~precise with the same command:

sudo aptitude install soundconverter

Or as alternative you can use Ubuntu Software Center.

Basic usage

To convert a file, for example from wma to mp3 just start it, multimedia -> soundconverter or write soundconverter in a terminal, you’ll see a very basic windows like this one:

As first thing click on options you’ll see a windows like this one:

In this screen you’ll have multiple options:

The first option is whether to place the converted audio files. It’s pretty self-explanatory as you can put the new files in the same folder as the original files are into a folder of your choosing, you can also choose to delete the original file once that the conversion is done.

Second, is a nice feature where you can name the newly converted files based on the metadata (tags) with the audio files. There is a drop-down menu where you can choose pre-made options on how you want to name the new audio files or you can specify what you want in an input box.

Next is the option of choosing which audio format you want to have for your audio files. Depending on whether you have the libraries for all each format, you may only have some options. What’s nice is when you choose an audio format, a drop-down menu will show up with the options of quality to choose from.

As last thing, you can choose whether or not to resample the audio you are converting to your needs.

Now click on Add file or Add Folder and select the music file or folder that you want to convert, you’ll see the name of the files and their meta tag in the main windows, now click Convert and wait.

All done, simply and effective

No related posts.

It can cache certain static elements, such as images or javascript but you can also use it for other purposes such as Load balancing or some additional security, in general most of the people want to try it and test their website to see if it’s really so amazing (IMO yes, but test it yourself).

The traditional guides will tell you to move your webserver to another port, perhaps 81,8080 or just bind to localhost, configure Varnish to listen to port 80 and use the web server as backend, the server where Varnish will forward requests not found in his cache.

This is the “normal” configuration and it works fine, but sometimes you just want to make a quick Test or perhaps you are using a Control Panel, such as Cpanel, Kloxo or ISPConfig and in my experience change the standard listening ports of Apache is not a decision to be taken lightly with these tools.

So in a VPS (with Kloxo) I’ve used a different approach: iptables.



In my approach I’ve left the webserver (Apache for me) sitting on port 80, so no change at all on this side.
I’ve configured varnish to listen on port 8080 and set as backend the Apache on port 80.
I started Varnish and, as expected, going to the port 8080 I’ve seen the site correctly (provided by Apache).

And now some iptables “magic”, all request that goes to port 80 of the server are silently redirected to port 8080, and so Varnish becomes our front-end server with no change on Apache configuration.

How to do it

As you have probably guessed the only “trick” is to use one of the many iptables features, iptables is a user space application that allows to configure the tables provided by the Linux kernel firewall, and in particular I’ve used the nat table with the PREROUTING chain using the action redirect.

From the iptables man page:

nat:
This table is consulted when a packet that creates a new connection is encountered. It consists of three
built-ins: PREROUTING (for altering packets as soon as they come in), OUTPUT (for altering locally-generated
packets before routing), and POSTROUTING (for altering packets as they are about to go out).

So as soon as a packet enters the “firewall”, iptables, checks if it has a destination port of 80 if so it apply an action, in my case redirect, so the packet is redirected to port 8080 where Varnish is listening.

Iptables Rules and Alias

To put the rules that redirect all the traffic from port 80 to 8080 open a terminal as root and use the command:

#iptables -t nat  -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080

If you want to remove Varnish as Front end server you can simply remove that rule with the command:

#iptables -t nat  -D PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080

And to check if the redirect is active, just ask it to iptables with:

#iptables -L -t nat

If you see a line like the following, it means that the redirect is active, if there is nothing in the output it means that it’s inactive.

Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         
REDIRECT   tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:80 redir ports 8080

But there is an easier way to use these commands, as root just add in your ~/.bashrc file these 3 alias:

alias varnishon='iptables -t nat  -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080'
alias varnishoff='iptables -t nat  -D PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080'
alias varnishstatus='iptables -L -t nat |grep -q 8080; if [ "test$?" = "test0" ]; then echo "Varnish On"; else echo "Varnish Off"; fi'

And now you can turn on and off Varnish with just 1 command.

Final Notes

I’ve not tested with a benchmark how worst perform this configuration in comparison of a traditional solution, probably not much as iptables is a kernel service and is really light, anyway if you have a site with a lot of traffic use this configuration just to test varnish, and if you like it do a traditional installation.

No related posts.