modificato il file di configurazione terremoto-web:/etc/memcached.conf
da
-l 127.0.0.1
a
-l 192.168.0.11
e riavviato il servizio
Per proteggere il servizio di memcache e' stato necessario attivare anche alcune regole sul firewall locale, cosi' da autorizzare terremoto-web
e terremoto-map
a leggere/scrivere in memcache.
Le regole sono state inserite in uno script BASH /etc/network/if-pre-up.d/iptables.sh
#!/bin/sh
iptables -I INPUT -s 127.0.0.1,192.168.0.11,192.168.0.18 -p TCP --dport 11211 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p TCP --dport 11211 -j DROP
NOTA¶
riporto le statistiche di memcached prima del suo riavvio
stats
STAT pid 15800
STAT uptime 52076070
STAT time 1548746164
STAT version 1.4.13
STAT libevent 2.0.19-stable
STAT pointer_size 32
STAT rusage_user 373.867365
STAT rusage_system 480.490028
STAT curr_connections 7
STAT total_connections 1453304
STAT connection_structures 149
STAT reserved_fds 20
STAT cmd_get 1893518
STAT cmd_set 8486
STAT cmd_flush 0
STAT cmd_touch 0
STAT get_hits 1884965
STAT get_misses 8553
STAT delete_misses 0
STAT delete_hits 0
STAT incr_misses 0
STAT incr_hits 0
STAT decr_misses 0
STAT decr_hits 0
STAT cas_misses 0
STAT cas_hits 0
STAT cas_badval 0
STAT touch_hits 0
STAT touch_misses 0
STAT auth_cmds 0
STAT auth_errors 0
STAT bytes_read 51404752
STAT bytes_written 3276114232
STAT limit_maxbytes 536870912
STAT accepting_conns 1
STAT listen_disabled_num 0
STAT threads 4
STAT conn_yields 0
STAT hash_power_level 16
STAT hash_bytes 262144
STAT hash_is_expanding 0
STAT expired_unfetched 0
STAT evicted_unfetched 0
STAT bytes 7074729
STAT curr_items 8486
STAT total_items 8486
STAT evictions 0
STAT reclaimed 0
END