Hack The Sec-Leading Resource Of Linux Tutorial: Varnish

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" itemprop="headline" style="background-color: #fdfdfd; box-sizing: border-box; font-family: proxima-nova, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 39px; font-weight: 500; line-height: 1.1; margin: 21px 0px 0px;">
<span style="color: red;"><u><i>Install and Configure Varnish with Apache on Ubuntu</i></u></span></h1>
<div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;">Varnish is an HTTP accelerator designed for content-heavy dynamic web sites. In contrast to other web accelerators, such as Squid, which began life as a client-side cache, or Apache and nginx, which are primarily origin servers, Varnish was designed as an HTTP accelerator. Varnish is focused exclusively on HTTP, unlike other proxy servers that often support FTP, SMTP and other network protocols.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVaoofLAr1qcEBj2B3kvNrKK-mCvBW6KYxqdP1w8CzXxVHDwbKMkX1zEIYqXAE7JJCmJ5FQQIZlwwi06m8QAHyIswi2sblbEoV25-ChZQxpGwDavVYR2XA234EDZHbv4qKQlY-9bqrbug5/s1600/Varnish-Cache-www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVaoofLAr1qcEBj2B3kvNrKK-mCvBW6KYxqdP1w8CzXxVHDwbKMkX1zEIYqXAE7JJCmJ5FQQIZlwwi06m8QAHyIswi2sblbEoV25-ChZQxpGwDavVYR2XA234EDZHbv4qKQlY-9bqrbug5/s1600/Varnish-Cache-www.hackthesec.co.in.png" /></a></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;"><br /></span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;">Before we install Varnish, we should have <a href="http://www.hackthesec.co.in/search/label/Apache" target="_blank">apache </a>already installed. To install Apache, we should simple execute:</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># sudo apt-get install apache2
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;">Varnish should be available for install in the standard <a href="http://www.hackthesec.co.in/search/label/Ubuntu" target="_blank">Ubuntu </a>repositories. However, before we uninstall it we need to make sure that we are going to import the correct and latest varnish repository. We will start with importing their key:</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># sudo curl http://repo.varnish-cache.org/debian/GPG-key.txt | sudo apt-key add -
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;">Then, we should open <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;"><span style="color: red;">/etc/apt/sources.list</span></code> file for editing and add the following line:</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">deb http://repo.varnish-cache.org/ubuntu/ lucid varnish-3.0
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;">We need make sure that our repositories are up-to-date. After then, we are ready to install Varnish.</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># sudo apt-get update
# sudo apt-get install varnish
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;">Once we have Varnish installed, we should setup some basic configuration parameters. By default, Varnish will listen on port 80, so we need to edit Apache configuration and set apache to listen on different port. In order to change that port that Apache listens on another port, we should open the<code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;"><span style="color: red;">/etc/apache2/ports.conf</span></code> file and edit as follows:</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">NameVirtualHost 127.0.0.1:8080
Listen 127.0.0.1:8080
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;">Then, we should also make changes in the default virtual host file (and in every other virtual host file that exists):</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"><VirtualHost 127.0.0.1:8080>
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;">In order to set varnish parameters, we should open the default Varnish configuration file,<code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;"><span style="color: red;">/etc/default/varnish</span></code>, using our favorite editor, and uncomment the following directive:</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">DAEMON_OPTS="-a :80
             -T localhost:6082
             -f /etc/varnish/default.vcl
             -S /etc/varnish/secret
             -s malloc,256m"
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;"><span style="color: #333333;">That is all that we need to change in that file. Next, we open </span><code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;"><span style="color: red;">/etc/varnish/default.vcl</span></code><span style="color: #333333;"> file and edit as follows:</span></span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">backend default {
    .host = "127.0.0.1";
    .port = "8080";
}
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;">Please note that in 8080 is the port on which Apache listens. If we choose another port for Apache to listen on, that we should use that port number instead. We are done with the basic configuration. Next, we need to restart the services and all traffic will go through Varnish:</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># sudo service apache2 restart
# sudo service varnish restart
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;">If we want to check the current Varnish status and the cached sessions and content that is served through Varnish, we should execute:</span></div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># varnishstat
Hitrate ratio:        3        3        3
Hitrate avg:     0.3745   0.3745   0.3745

869844         4.97         2.89 Client connections accepted
     31200592       164.04       103.52 Client requests received
     11705560        58.66        38.84 Cache hits
</code></pre>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;">Your pages are not being cached using Varnish and you can start by further referring to Varnish documentation to optimize your configuration.</span></div>
<div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;">
<span style="font-family: "georgia" , "times new roman" , serif;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></div>
</div>
</div>