Re: Traffic server antivirus plugin?

2014-08-20 Thread Nick Kew
On Thu, 2014-08-21 at 02:34 -0300, Juan Pablo Daniel wrote: > Hello, > first thanks you for replying :) > > Using ironbee will make me add "something else" to my server, and it looks > like it's on a very early stage (with "not secure and ready for production" > banners and everything) , have you

Re: Traffic server antivirus plugin?

2014-08-20 Thread Juan Pablo Daniel
Hello, first thanks you for replying :) Using ironbee will make me add "something else" to my server, and it looks like it's on a very early stage (with "not secure and ready for production" banners and everything) , have you tried this with ATS? is it working well? Is there any reason why not to

Re: Traffic server antivirus plugin?

2014-08-20 Thread Nick Kew
On 20 Aug 2014, at 22:35, James Peach wrote: >> Is there a "run command on every transferred file" plugin so when a user >> start a download it runs a command (the antivirus client) on the file and >> then on the result decides if it pass or fails ? > > Maybe https://www.ironbee.com can do this?

Re: [VOTE] Release Apache Traffic Server 4.2.2 (RC0)

2014-08-20 Thread Phil Sorber
On Sun, Aug 10, 2014 at 2:41 PM, Phil Sorber wrote: > Hello All, > > I've prepared a release for v4.2.2 (RC0) which is the latest stable > release in the 4.2.x series. This is the third release in our Long Term > Support (LTS) version as detailed in our Release Management document: > > https://cw

Re: Traffic server antivirus plugin?

2014-08-20 Thread James Peach
On Aug 20, 2014, at 12:35 PM, Juan Pablo Daniel wrote: > Hi! > I have ATS as a forward proxy working great and now I want to extend his > tentacles to protect the users. > Is there a "run command on every transferred file" plugin so when a user > start a download it runs a command (the antivirus

header-rewrite change

2014-08-20 Thread Manjesh Nilange
Hi all, We have a feature to implement and are wondering if header-rewrite is the right home for this feature. In a nutshell, when using ATS as a reverse proxy, we want to redirect all http requests with a certain cookie to their https counterparts but not using remap.config. The remap.config cons

Traffic server antivirus plugin?

2014-08-20 Thread Juan Pablo Daniel
Hi! I have ATS as a forward proxy working great and now I want to extend his tentacles to protect the users. Is there a "run command on every transferred file" plugin so when a user start a download it runs a command (the antivirus client) on the file and then on the result decides if it pass or fa

Re: 5.1.0 has branched

2014-08-20 Thread Adam W. Dace
Thanks. :-) On Wed, Aug 20, 2014 at 10:12 AM, Alan M. Carroll < a...@network-geographics.com> wrote: > Adam, > > > git checkout 5.1.x > > Branch 5.1.x set up to track remote branch 5.1.x from origin. > > Switched to a new branch '5.1.x' > > > > > Does that sound right? > > Yes. > > --

Re: SSL support extensions - design review request

2014-08-20 Thread James Peach
On Aug 19, 2014, at 12:46 PM, Susan Hinrichs wrote: > James, > > Thanks for the feedback. I think Alan already addressed most of the issues. > Here are my comments on the remaining items. > > >> >> Why do TSSslCertFindByName() and TSSslCertFindByAddress() take a TSSslVConn >> argument? >

Re: SSL support extensions - design review request

2014-08-20 Thread James Peach
On Aug 19, 2014, at 10:13 AM, Alan M. Carroll wrote: > James, > > I can answer a few of these. > >> Thanks for the docs, this looks very promising. When you are ready to submit >> patches, this will need API review >> . > >

Re: 5.1.0 has branched

2014-08-20 Thread Alan M. Carroll
All; I forgot to note that as part of the last triage a number of bugs were moved from 5.1.0 to 5.2.0 because of the lack of an available patch. If one of these was yours, you will need to work on it on master for 5.2.0 and explicitly request a back port to 5.1.0.

Re: SSL support extensions - design review request

2014-08-20 Thread James Peach
On Aug 20, 2014, at 5:33 AM, Igor Galić wrote: > > > - Original Message - >> James, >> >> Thanks for the feedback. I think Alan already addressed most of the >> issues. Here are my comments on the remaining items. >> >> >>> >>> Why do TSSslCertFindByName() and TSSslCertFindByAddre

Re: 5.1.0 has branched

2014-08-20 Thread Alan M. Carroll
Adam, > git checkout 5.1.x > Branch 5.1.x set up to track remote branch 5.1.x from origin. > Switched to a new branch '5.1.x' > > Does that sound right? Yes.

Re: 5.1.0 has branched

2014-08-20 Thread Adam W. Dace
Searched around the web a bit...and am trying this: git clone https://git-wip-us.apache.org/repos/asf/trafficserver.git ... cd trafficserver git checkout 5.1.x Branch 5.1.x set up to track remote branch 5.1.x from origin. Switched to a new branch '5.1.x' Does that sound right? Not looking to

Re: 5.1.0 has branched

2014-08-20 Thread Adam W. Dace
I'm no git guru by any stretch of the imagination...how does one pull from this branch? Regards, Adam On Wed, Aug 20, 2014 at 7:50 AM, Alan M. Carroll < a...@network-geographics.com> wrote: > All; > > I have created the 5.1.x branch. This is in preparation for the 5.1.0 > release of Traffic Se

5.1.0 has branched

2014-08-20 Thread Alan M. Carroll
All; I have created the 5.1.x branch. This is in preparation for the 5.1.0 release of Traffic Server. All commits to this branch must be explicitly approved by the Release Manager (amc). If you have something you really need to get in to 5.1.0, fix it on master first and then ask to have that c

Re: SSL support extensions - design review request

2014-08-20 Thread Alan M. Carroll
Igor, >> I'm using the TSSslVConn to cache a pointer to the global cert table >> (loaded from ssl_multicert.config). Since in theory the >> ssl_multicert.config could be reloaded at any point, we acquire() a copy > does this mean we would now support reloading of the ssl config w/o restart? No.

Re: SSL support extensions - design review request

2014-08-20 Thread Igor Galić
- Original Message - > James, > > Thanks for the feedback. I think Alan already addressed most of the > issues. Here are my comments on the remaining items. > > > > > > Why do TSSslCertFindByName() and TSSslCertFindByAddress() take a TSSslVConn > > argument? > > I'm using the TSSslV