*** esteele is now known as esteele|away | 00:04 | |
*** menesis has joined #zope | 00:08 | |
*** nueces has joined #zope | 00:11 | |
*** nueces has quit IRC | 00:23 | |
*** J1m has quit IRC | 00:53 | |
*** kktaus has joined #zope | 00:55 | |
*** kktaus has left #zope | 00:57 | |
*** kktaus has joined #zope | 01:08 | |
*** motto has quit IRC | 01:09 | |
*** Arfrever has quit IRC | 01:15 | |
kktaus | we use Zope 2.10.7 and have apache config to use as a load balancer. unfortunately we have been flagged as having an open proxy. <Proxy balancer://zope> xxxxxxx allow from all </Proxy> with nothing blocked. Any suggestions on what to block? | 01:16 |
---|---|---|
kktaus | found this <LocationMatch "^[^/]"> | 01:16 |
kktaus | Deny from all | 01:16 |
kktaus | </LocationMatch> | 01:17 |
Spanktar | you probably have ProxyRequests On | 01:22 |
kktaus | we are running varnish also and it uses acl | 01:22 |
Spanktar | you do not need to have ProxyRequests On to use a proxy in front of Zope | 01:23 |
Spanktar | I assume you're using Apache | 01:23 |
kktaus | yes apache | 01:23 |
Spanktar | so, you need to turn the proxy off. I suggest using the RewriteRule with a [P] flag instead | 01:23 |
Spanktar | much easier | 01:24 |
Spanktar | let me find an example | 01:24 |
Spanktar | enable mod_rewrite | 01:24 |
kktaus | is dont see Proxy Requests On that is commented out | 01:24 |
kktaus | in apache config | 01:24 |
Spanktar | well, that's good :) | 01:24 |
kktaus | have mod_rewrite | 01:24 |
Spanktar | ok, good | 01:25 |
Spanktar | you want a rule like so: | 01:25 |
Spanktar | RewriteRule ^($|/.*) http://127.0.0.1:8080/VirtualHostBase/https/%{SERVER_NAME}:443/Plone/VirtualHostRoot$1 [L,P] | 01:25 |
Spanktar | well, change HTTPS and 443 to HTTP and 80 | 01:25 |
Spanktar | like: | 01:25 |
Spanktar | RewriteRule ^($|/.*) http://127.0.0.1:8080/VirtualHostBase/http/%{SERVER_NAME}:80/Plone/VirtualHostRoot$1 [L,P] | 01:26 |
Spanktar | then shut off all the rest of the proxy stuff | 01:26 |
Spanktar | proxies are really easy to misconfigure | 01:26 |
kktaus | not sure where this goes though | 01:27 |
kktaus | in mod_proxy? | 01:27 |
kktaus | or just in general | 01:27 |
Spanktar | no, it'd go in your <virtualHost> block | 01:27 |
Spanktar | (assuming you have one) | 01:27 |
kktaus | ok we have more than 100 so I guess in all | 01:28 |
Spanktar | also, you can take this up in #plone, too, there are lots of friendly helpful faces in there | 01:28 |
Spanktar | hmm, no | 01:28 |
Spanktar | well, yes, you have to put it in each one | 01:28 |
Spanktar | if you try to do it broadly, you'll end up putting all of your zones tot he same place | 01:28 |
Spanktar | zopes | 01:28 |
*** esteele|away is now known as esteele | 01:28 | |
Spanktar | i guess it depends on your setup | 01:28 |
kktaus | okay, that is good to know, much thanks, Spanktar: | 01:28 |
Spanktar | maybe you have 100 domains going to one Zope? | 01:29 |
Spanktar | or maybe you have 100 zopes | 01:29 |
kktaus | IT's setup for load balancing. Four instances | 01:29 |
Spanktar | but yeah, the best bet is to shut off all the proxy nonsense, and use a rewrite rule | 01:29 |
Spanktar | ok, yeah, that's what we do, a few LB'd zopes | 01:30 |
Spanktar | but you put the rewrite rule in the VirtualHost for each host, not at the apache.conf or httpd.conf level | 01:31 |
Spanktar | that's too broad | 01:31 |
kktaus | will do | 01:31 |
kktaus | gotcha | 01:31 |
Spanktar | if you run into trouble, ask in #plone | 01:31 |
kktaus | ok | 01:31 |
kktaus | bye | 01:31 |
*** kktaus has left #zope | 01:32 | |
*** Arfrever has joined #zope | 01:48 | |
*** J1m has joined #zope | 02:03 | |
*** menesis has quit IRC | 02:18 | |
*** daMaestro has quit IRC | 02:35 | |
*** J1m has quit IRC | 02:35 | |
*** stevegt__ has quit IRC | 02:38 | |
*** supton has quit IRC | 02:38 | |
*** J1m has joined #zope | 02:39 | |
*** J1m has quit IRC | 02:40 | |
*** nueces has joined #zope | 02:43 | |
*** mr_jolly has quit IRC | 03:00 | |
*** esteele is now known as esteele|away | 03:06 | |
*** esteele|away is now known as esteele | 03:10 | |
*** tiwula has quit IRC | 03:36 | |
*** Spanktar has quit IRC | 03:44 | |
*** lepri has joined #zope | 03:53 | |
lepri | hi, somebody know how can I use websockets in zope? | 03:54 |
*** kosh has quit IRC | 03:57 | |
lepri | or where I can find a good documentation | 03:57 |
*** kosh has joined #zope | 04:02 | |
*** evilbungle has quit IRC | 04:08 | |
*** kosh has quit IRC | 05:13 | |
*** esteele is now known as esteele|away | 05:18 | |
*** J1m has joined #zope | 05:33 | |
*** J1m has quit IRC | 05:43 | |
*** stevegt__ has joined #zope | 06:06 | |
*** nueces has quit IRC | 07:02 | |
*** alecm has quit IRC | 07:10 | |
*** alecm has joined #zope | 07:12 | |
*** lepri has quit IRC | 07:31 | |
*** nueces has joined #zope | 07:32 | |
*** Arfrever has quit IRC | 08:19 | |
*** avoinea has joined #zope | 08:37 | |
*** agroszer has joined #zope | 09:15 | |
*** __mac__ has joined #zope | 09:16 | |
*** KageSenshi has quit IRC | 09:21 | |
*** KageSenshi has joined #zope | 09:22 | |
*** __mac__ has quit IRC | 09:40 | |
*** eperez has joined #zope | 09:42 | |
*** eperez has quit IRC | 09:45 | |
*** __mac__ has joined #zope | 09:46 | |
*** __mac__ has left #zope | 09:57 | |
*** alecm has quit IRC | 10:18 | |
*** giacomos has joined #zope | 10:20 | |
*** giacomos has quit IRC | 10:33 | |
*** Arfrever has joined #zope | 10:35 | |
betabug | "good documentation" and "zope" in the same sentence... | 10:36 |
*** mr_jolly has joined #zope | 10:39 | |
*** eperez has joined #zope | 10:53 | |
*** giacomos has joined #zope | 10:53 | |
*** nueces has quit IRC | 11:14 | |
*** giacomos has quit IRC | 11:18 | |
*** giacomos has joined #zope | 11:29 | |
*** emidal has joined #zope | 11:36 | |
*** maurits has joined #zope | 11:40 | |
*** evilbungle has joined #zope | 11:46 | |
*** evilbungle has quit IRC | 11:53 | |
*** menesis has joined #zope | 11:54 | |
*** KageSenshi has quit IRC | 12:06 | |
*** KageSenshi has joined #zope | 12:08 | |
*** evilbungle has joined #zope | 12:18 | |
*** giacomos has quit IRC | 12:26 | |
*** benji_ has joined #zope | 12:35 | |
*** benji has quit IRC | 12:38 | |
*** giacomos has joined #zope | 12:46 | |
*** mr_jolly has quit IRC | 12:58 | |
*** mr_jolly has joined #zope | 13:02 | |
*** mwilkes|away is now known as MatthewWilkes | 13:13 | |
*** agroszer has quit IRC | 13:33 | |
*** MatthewWilkes is now known as mwilkes|away | 14:01 | |
*** agroszer has joined #zope | 14:06 | |
*** menesis has quit IRC | 14:13 | |
*** Pumukel has joined #zope | 14:18 | |
*** mwilkes|away is now known as MatthewWilkes | 14:24 | |
*** KageSenshi has quit IRC | 14:37 | |
*** kosh has joined #zope | 14:49 | |
*** menesis has joined #zope | 15:10 | |
*** esteele|away is now known as esteele | 15:11 | |
*** __mac__ has joined #zope | 15:29 | |
*** MatthewWilkes is now known as mwilkes|away | 15:31 | |
*** agroszer has quit IRC | 15:38 | |
*** KageSenshi has joined #zope | 15:46 | |
*** fdrake has joined #zope | 15:52 | |
*** mwilkes|away is now known as MatthewWilkes | 15:54 | |
*** eperez has quit IRC | 15:59 | |
*** J1m has joined #zope | 16:12 | |
*** kosh has quit IRC | 16:20 | |
*** J1m has left #zope | 16:44 | |
*** J1m has quit IRC | 16:44 | |
*** __mac__ has quit IRC | 16:48 | |
*** Pumukel has quit IRC | 17:04 | |
*** alecm has joined #zope | 17:10 | |
*** alecm has joined #zope | 17:10 | |
*** Pumukel has joined #zope | 17:22 | |
*** agroszer has joined #zope | 17:22 | |
J1m_ | agroszer, I just updated the buildout 1 bootstrap file according to your specifications. | 17:53 |
J1m_ | Wanna try it out? | 17:53 |
agroszer | hey J1m_ | 17:53 |
J1m_ | hey | 17:54 |
agroszer | I already patched our local bootsraps | 17:54 |
agroszer | it passes the buildbot | 17:54 |
J1m_ | Can you please still test the change I made? | 17:54 |
agroszer | sure | 17:55 |
*** daMaestro has joined #zope | 17:58 | |
*** Pumukel has quit IRC | 18:06 | |
*** Pumukel has joined #zope | 18:07 | |
*** MatthewWilkes is now known as mwilkes|away | 18:08 | |
*** evilbungle_ has joined #zope | 18:11 | |
*** evilbungle has quit IRC | 18:11 | |
*** evilbungle_ is now known as evilbungle | 18:11 | |
*** stevegt__ has quit IRC | 18:19 | |
*** Pumukel has quit IRC | 18:29 | |
*** Pumukel has joined #zope | 18:30 | |
*** Pumukel has quit IRC | 18:41 | |
*** tiwula has joined #zope | 19:01 | |
*** Egnuph has joined #zope | 19:04 | |
Egnuph | Hi. What happened to zope since 2011? Did something replace grok and dlmen? | 19:05 |
*** supton has joined #zope | 19:18 | |
*** Spanktar has joined #zope | 19:18 | |
*** KageSenshi has quit IRC | 19:19 | |
*** Spanktar has quit IRC | 19:20 | |
*** Spanktar has joined #zope | 19:20 | |
Egnuph | its ok, I found some up to date stuff | 19:23 |
*** Egnuph has quit IRC | 19:23 | |
*** Morphex has joined #zope | 19:35 | |
*** giacomos has quit IRC | 19:38 | |
*** supton has quit IRC | 19:46 | |
*** supton has joined #zope | 19:48 | |
*** menesis has quit IRC | 19:56 | |
*** Pumukel has joined #zope | 19:56 | |
*** emidal has quit IRC | 20:05 | |
*** maurits has quit IRC | 20:19 | |
*** tiwula has quit IRC | 20:32 | |
*** mitchell` is now known as mitchell`off | 20:40 | |
*** agroszer has quit IRC | 20:41 | |
*** evilbungle has quit IRC | 20:43 | |
*** emidal has joined #zope | 20:47 | |
*** emidal has left #zope | 20:47 | |
*** tiwula has joined #zope | 20:53 | |
*** esteele is now known as esteele|away | 21:12 | |
*** Pumukel has quit IRC | 21:25 | |
*** KageSenshi has joined #zope | 21:51 | |
*** avoinea has quit IRC | 22:04 | |
*** evilbungle has joined #zope | 23:49 | |
*** evilbungle has quit IRC | 23:51 |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!