Table of Contents
Overview
Since we are blocked by several akamai content delivery systems, we need a proxy to resolve the issue.
For the ordinary shops we use a tiny proxy that is located at:
v22019026221283999.supersrv.de
at port
27105
Some shops still blocking us, like ASOS and there we need shifter to solve the issue.
The full proxy URLs and credentials are located in the git:
https://git.picalike.corpex-kunden.de/picalike/image_cloud/-/blob/master/docker-compose/ice_tea.env
The monitoring script is adjusted to include the host via check_proxy
Configuration
Please note that the configuration is optimized for throughput and thus, timeout values should be 5-15 secs. The default is 600 secs which would block a lot of resources. Plus, always use basic-auth with a strong password.
Details
The tinyproxy is 'secured' via basic authentication user+password and it uses a random port 21705.
A full configuration file can be found here: https://git.picalike.corpex-kunden.de/incubator/swiss-army-knife/-/tree/master/tinyproxy
To reload the service without kill and exec, use HUP:
kill -HUP main_tinyproxy_pid
List of blocked domains
Whenever a 403 is returned for the download -image cloud- the domain is routed to tinyproxy. To get a list of all domains use:
grep ": CONNECT" /home/picalike/proxy/tinyproxy.log |cut -d':' -f5|sort -u
Service
The restart is described in
~/proxy/README.md
TODO
We need to keep an eye on the load of the host, since it is an ordinary frontend (v3).
Keywords: tinyproxy image cloud shifter v3 proxy