Viewing file:  mod_tls_memcache.html (3.91 KB) -rw-r--r--
Select action/file-type:
 (+) | (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
ProFTPD module mod_tls_memcache
ProFTPD module mod_tls_memcache
The mod_tls_memcache submodule is contained in the
mod_tls_memcache.c file, and is not compiled by default.
Installation instructions are discussed here.
This submodule a memcached-based implementation of an external SSL session
cache for use by the mod_tls module's
TLSSessionCache
directive. The module also implements a memcached-based implementation of an
external OCSP response cache for the
TLSStaplingCache
directive.
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
Author
Please contact TJ Saunders <tj at castaglia.org> with any
questions, concerns, or suggestions regarding this module.
The mod_tls_memcache module supports the "memcache"
string for the type parameter of the
TLSSessionCache
configuration directive. The info parameter for
mod_tls_memcache can be empty/blank, indicating a native binary
encoding of the cached data), or it can be "/json", indicating that
the cached data will be encoded using JSON. This means the
TLSSessionCache setting will look like:
# Use binary encoding for cached data
TLSSessionCache memcache:
or:
# Use JSON encoding for cached data
TLSSessionCache memcache:/json
If memcache support has not been enabled in your proftpd, this configuration
cannot be used.
The mod_tls_memcache module also supports the "memcache"
string for the type parameter of the
TLStaplingCache
configuration directive, e.g.:
TLSStaplingCache memcache:
Examples
<IfModule mod_memcache.c>
MemcacheEngine on
MemcacheServers memcache-servers
</IfModule>
<IfModule mod_tls.c>
...
<IfModule mod_tls_memcache.c>
# Store the data formatted as JSON
TLSSessionCache memcache:/json
TLSStaplingCache memcache:
</IfModule>
</IfModule>
Logging
The mod_tls_memcache module supports trace logging, via the module-specific log channels:
Thus for trace logging, to aid in debugging, you would use the following in
your proftpd.conf:
TraceLog /path/to/ftpd/trace.log
Trace tls.memcache:20
This trace logging can generate large files; it is intended for debugging use
only, and should be removed from any production configuration.
The mod_tls_memcache module is distributed with the ProFTPD
source code. Simply follow the normal steps for using third-party modules
in ProFTPD, being sure to include the mod_tls module (on which
mod_tls_memcache depends), and enabling memcache
support:
$ ./configure --enable-memcache --with-modules=mod_tls:mod_tls_memcache
$ make
$ make install
Alternatively, if your proftpd was compiled with DSO support, you
can use the prxs tool to build mod_tls_memcache as
a shared module:
$ prxs -c -i -d mod_tls_memcache.c
© Copyright 2011-2015 TJ Saunders
All Rights Reserved
|