On Thu, Feb 07, 2013 at 11:54:24AM +0100, Reindl Harald wrote: > > /etc/trafficserver/remap.config has some hundret hosts like below > on the machine is running dnsmasq on 127.0.0.1 to feed the target > IP's and dnsmasq-config is also as "remap.config" automatically > created with any hostname in teh infrastructure > > map http://www.rhsoft.net http://www.rhsoft.net > reverse_map http://www.rhsoft.net http://www.rhsoft.net
Does that reverse_map make any sense ? > [Service] > Type=simple > ExecStart=/usr/bin/traffic_cop > ExecReload=/usr/bin/traffic_line -x > Restart=always > RestartSec=1 > LimitNOFILE=100000 > LimitMEMLOCK=infinity > OOMScoreAdjust=-1000 > PrivateTmp=yes > CapabilityBoundingSet=~CAP_SYS_PTRACE > InaccessibleDirectories=/boot > InaccessibleDirectories=/home > InaccessibleDirectories=/usr/local/scripts > InaccessibleDirectories=/var/lib/rpm > InaccessibleDirectories=/var/spool Cool that you're using systemd to restrict ATS like that, but could it cause problems? Does maybe the default proxy.config.stack_dump_enabled=1 conflict with disabling CAP_SYS_PTRACE ? Sorry, HTH, but I'm just guessing here.. -jf
