Section F: News cache configuration scenario
About this scenario
In this news cache configuration scenario, an ISP provides both Web service and news service to its customers. The ISP has a data center with multiple NetCache appliances, each of which is dedicated to either Web caching or news caching. The news server is at the data center.
The ISP has a number of POPs (points of presence), each of which has a NetCache appliance. For simplicity, this scenario shows only two POPs. One POP has a dedicated news cache, and the other POP has a NetCache appliance that is both a news cache and a Web cache. The scenario demonstrates the configuration differences in both deployments.
What is included in the configuration examples
The configuration examples focus on the NNTP configuration options that would be set on each NetCache appliance. However, the example of the NetCache appliance that is both a news cache and a Web cache also includes options necessary to send Web request cache misses to the data center, and a few other options that you would use with Web caching but not with news caching.
Note
The configuration examples assume that you have completed the tasks required to identify the NetCache appliance to the network, such as specifying an IP address, a host name, and DNS.
Deployment illustrated
The following illustration shows the deployment of NetCache appliances at the POPs and data center.
Method chosen for client access to the news caches
The NetCache appliances at the POPs are configured for transparent proxying so that users do not have to configure their browsers to use the NetCache appliance service. At each POP, an L4 switch is deployed in front of the NetCache appliance to pass NNTP traffic (at POP 1) or HTTP and NNTP traffic (at POP 2) transparently to the appliance deployed at that POP.
The ISP advertises just one IP address for the news service. All users of this ISP are given the same host name to use for the news service. DNS is set up so that requests are routed to the closest POP. The reason for such a DNS configuration is that if users move, they can use the same host name for news even though they are dialing into a different POP.
Failover strategy
The failover strategy for this scenario is as follows:
Configuration of the news cache at
POP 1
The NetCache appliance at POP 1 is set up as a news cache, with caching behavior, logging, authentication, and transparency options configured. The following table shows the options that were configured for this NetCache appliance.
Option
|
Configuration data for the POP 1 NetCache appliance
|
Option location in the Appliance Manager
|
Basic setup of the news cache
|
NNTP License
|
<nnnnnnnnnnnn>
|
Setup tab > System > Licenses
|
NNTP Enable
|
Enabled
|
Setup tab > NNTP > General
|
Article Posting Enable
|
Enabled
|
Setup tab > NNTP > General
|
NNTP Port
|
119 (default)
|
Setup tab > NNTP > General
|
NNTP Server (IP Address or Host Name)
|
<IP address for C1.ISP.com>
|
Setup tab > NNTP > General
|
NNTP Server (Port)
|
119 (default)
|
Setup tab > NNTP > General
|
NNTP Welcome Banner
|
Welcome to the Friendly ISP
|
Setup tab > NNTP > General
|
Caching behavior settings for the news cache
|
Canceled Article Time-To-Live
|
3600 (Seconds)
|
Setup tab > NNTP > Caching Behavior
|
NNTP Refresh Rate
|
600 (Seconds)
|
Setup tab > NNTP > Caching Behavior
|
Log file settings for the news cache
|
NNTP Access Log Enable
|
Enabled
|
Setup tab > NNTP > Logging
|
NNTP Log Format
|
NNTP Access Log Default Format
|
Setup tab > NNTP > Logging
|
Authentication settings for the news cache
|
Authenticate NNTP Requests
|
Enabled
|
Setup tab > NNTP > General
|
Authenticate Client Requests Using These Protocols > Authenticate NNTP Requests
|
Enabled
|
Setup tab > Authentication > General
|
Authentication Checking Order
|
Change the default order to RADIUS and to None for all other lists
|
Setup tab > Authentication > General
|
RADIUS Enable
|
Enabled
|
Setup tab > Authentication > RADIUS
|
RADIUS Servers
|
Server information in IP address:Port: password format
|
Setup tab > Authentication > RADIUS
|
Transparency settings for the news cache
|
Transparency > NNTP
|
Enabled
|
Setup tab > Transparency and IP Spoofing Enable
|
Configuration of the news cache and Web cache at POP 2
The NetCache appliance at POP 2 is set up as a Web cache and a news cache. For the Web cache, the transparency, clustering, access control, and Web filtering options are configured. For the news cache, the transparency, logging, and authentication options are configured. The options that were configured for the news cache setup are the same as those discussed in Configuration of the news cache at POP 1. The following table shows the options that were configured for the Web cache setup on this NetCache appliance.
Option
|
Configuration data for POP 1 NetCache appliance
|
Option location in the Appliance Manager
|
Transparency settings for the Web caches
|
Transparency > HTTP
|
Enabled
|
Setup tab > Transparency and IP Spoofing Enable
|
Transparency > FTP
|
Enabled
|
Setup tab > Transparency and IP Spoofing Enable
|
HTTP Proxy Ports
|
80
|
Setup tab > HTTP > General
|
Hierarchy settings for the Web caches
|
Bypass Hierarchy for Noncacheable Objects
|
Enabled
|
Setup tab > Hierarchies > General
|
Bypass Hierarchy for These Local Domains
|
Disabled
|
Setup tab > Hierarchies > General
|
Hierarchies - Parents settings
|
D.ISP.com and E.ISP.com identified as parents.
For detailed information about hierarchies, see the Administration Guide.
Note NetCache automatically creates a hierarchy forwarding rule with D.ISP.com and E.ISP.com as members of a cluster at the data center. |
Setup tab > Hierarchies > Parents > New Parent
|
Access control settings for the Web caches
|
HTTP ACL
|
Access denied to the following URL:
deny url http://www.badsite.com
|
Setup tab > Access Control > Access Control Lists
|
SmartFilter Enable
|
Enabled
|
Setup tab > Access Control > SmartFilter > General
|
Select the Categories You Want to Block
|
Categories Sex and Hate Speech are blocked.
|
Setup tab > Access Control > SmartFilter > General
|
Additional features configured on the POP 2 NetCache appliance
The POP 2 NetCache appliance is both a Web cache and a news cache; therefore, some of the options configured for the POP 2 NetCache appliance are not shown for the POP 1 NetCache appliance. Some of the additional features are as follows:
- The NetCache appliance logical settings for hierarchies and clusters are not applicable to news caches. However, it is necessary to set up a cluster parent for the POP 2 NetCache appliance so that HTTP, FTP, Gopher, and tunnel requests that are cache misses at POP 2 can be sent to the Web caches at the data center.
- SmartFilter is enabled for Web caching at POP 2 to control access to URLs by category. SmartFilter is not applicable to news caching.
Configuration of news caches at the data center
At the data center, two NetCache appliances (C1.ISP.com and C2.ISP.com) are set up as news caches. Distributed caching cannot be set up on the news caches; therefore, failover and load balancing can be achieved by configuring the L4 switch pair that is in front of these NetCache appliances.
The following table shows the options that were configured for these NetCache appliances.
Option
|
Configuration data
|
Option location
|
Basic setup of the news cache
|
NNTP License
|
<nnnnnnnnnnnn>
|
Setup tab > System > Licenses
|
NNTP Enable
|
Enabled
|
Setup tab > NNTP > General
|
Article Posting Enable
|
Enabled
|
Setup tab > NNTP > General
|
NNTP Port
|
119 (default)
|
Setup tab > NNTP > General
|
NNTP Server (IP Address or Host Name)
|
<IP address for reader1. ISP.com>
|
Setup tab > NNTP > General
|
NNTP Server (Port)
|
119 (default)
|
Setup tab > NNTP > General
|
NNTP Welcome Banner
|
Welcome to the Friendly ISP
|
Setup tab > NNTP > General
|
Caching behavior settings for the news caches
|
Canceled Article Time-To-Live
|
3600 (Seconds)
|
Setup tab > NNTP > Caching Behavior
|
NNTP Refresh Rate
|
600 (Seconds)
|
Setup tab > NNTP > Caching Behavior
|
Log file settings for the news caches
|
NNTP Access Log Enable
|
Enabled
|
Setup tab > NNTP > Logging
|
NNTP Log Format
|
NNTP Access Log Default Format
|
Setup tab > NNTP > Logging
|
Copyright © 1994-2002, Network Appliance, Inc. All rights
reserved.
Part No. 210-00369
File: news17.htm
Last updated: 11/12/02 12:13:58