Skip to content

V
varnish-cache
Commit 3e67d2a3 authored by Nils Goroll's avatar Nils Goroll
Browse files
Options

a little less indentation, a little more action please

parent 284bebbf
Hide whitespace changes
Inline Side-by-side
Showing with 165 additions and 142 deletions
doc/sphinx/reference/varnishd.rst
View file @ 3e67d2a3
...@@ -29,147 +29,176 @@ OPTIONS ...@@ -29,147 +29,176 @@ OPTIONS
-a <address[:port][,address[:port][...]> -a <address[:port][,address[:port][...]>
Listen for client requests on the specified address and Listen for client requests on the specified address and port. The
port. The address can be a host name (“localhost”), an address can be a host name (“localhost”), an IPv4 dotted-quad
IPv4 dotted-quad (“127.0.0.1”), or an IPv6 address (“127.0.0.1”), or an IPv6 address enclosed in square brackets
enclosed in square brackets (“[::1]”). If address is not (“[::1]”). If address is not specified, varnishd will listen on all
specified, varnishd will listen on all available IPv4 and available IPv4 and IPv6 interfaces. If port is not specified, the
IPv6 interfaces. If port is not specified, the default default HTTP port as listed in /etc/services is used. Multiple
HTTP port as listed in /etc/services is used. Multiple listening addresses and ports can be specified as a whitespace or
listening addresses and ports can be specified as a comma -separated list.
whitespace or comma -separated list.
-b <host[:port]> -b <host[:port]>
Use the specified host as backend server. If port is not
specified, the default is 8080.
-C Print VCL code compiled to C language and exit. Specify the VCL file Use the specified host as backend server. If port is not specified,
to compile with the -f option. the default is 8080.
-d Enables debugging mode: The parent process runs in the foreground -C
with a CLI connection on stdin/stdout, and the child
process must be started explicitly with a CLI command.
Terminating the parent process will also terminate the
child.
-f config Use the specified VCL configuration file instead of the Print VCL code compiled to C language and exit. Specify the VCL file
builtin default. See vcl(7) for details on VCL to compile with the -f option.
syntax. When no configuration is supplied varnishd will
not start the cache process.
-F Run in the foreground. -d
-g group Specifies the name of an unprivileged group to which the Enables debugging mode: The parent process runs in the foreground
child process should switch before it starts accepting with a CLI connection on stdin/stdout, and the child process must be
connections. This is a shortcut for specifying the group started explicitly with a CLI command. Terminating the parent
run-time parameter. process will also terminate the child.
-f config
Use the specified VCL configuration file instead of the builtin
default. See vcl(7) for details on VCL syntax. When no
configuration is supplied varnishd will not start the cache process.
-F
Run in the foreground.
-g group
Specifies the name of an unprivileged group to which the child
process should switch before it starts accepting connections. This
is a shortcut for specifying the group run-time parameter.
-h <type[,options]> -h <type[,options]>
Specifies the hash algorithm. See Hash Algorithms for a list of supported algorithms.
Specifies the hash algorithm. See Hash Algorithms for a list of
supported algorithms.
-i identity -i identity
Specify the identity of the Varnish server. This can be accessed using server.identity
from VCL Specify the identity of the Varnish server. This can be accessed
using server.identity from VCL
-j <jail[,jailoptions]> -j <jail[,jailoptions]>
Specify the jailing technology to use.
Jails generalize over various options to reduce the Specify the jailing technology to use.
privileges of varnish sub-processes. They may have
specific options and may be platform specific. Available Jails generalize over various options to reduce the privileges of
jails are: varnish sub-processes. They may have specific options and may be
platform specific. Available jails are:
-j solaris -j solaris
Reduce privileges(5) for varnishd and sub-process to
the minimally required set. Only available on
platforms which have the setppriv(2) call.
-j <unix[,user=`user`][,ccgroup=`group`]> Reduce privileges(5) for varnishd and sub-process to the minimally
Default on all other platforms if `varnishd` is either required set. Only available on platforms which have the
started with an fe setppriv(2) call.
as user ``varnish``.
With the ``unix`` jail technology activated, varnish -j <unix[,user=`user`][,ccgroup=`group`]>
will switch to an alternative user for subprocesses
and change the effective uid of the master process
whenever possible.
The optional `user` argument specifies which Default on all other platforms if `varnishd` is either started
alternative user to use. It defauls to ``varnish`` with an fe as user ``varnish``.
The optional `ccgroup` argument specifies a group to With the ``unix`` jail technology activated, varnish will switch
add to varnish subprocesses requiring access to a to an alternative user for subprocesses and change the effective
c-compiler. There is no default. uid of the master process whenever possible.
-j none The optional `user` argument specifies which alternative user to
last resort jail choice: With jail technology use. It defauls to ``varnish``
``none``, varnish will run all processes with the
privileges it was started with. The optional `ccgroup` argument specifies a group to add to
varnish subprocesses requiring access to a c-compiler. There is no
default.
-j none
last resort jail choice: With jail technology ``none``, varnish
will run all processes with the privileges it was started with.
-l <shl[,free[,fill]]> -l <shl[,free[,fill]]>
Specifies size of shmlog file. shl is the store for the
shared memory log records [80M], free is the store for other Specifies size of shmlog file. shl is the store for the shared
allocations [1M] and fill determines how the log is [+]. memory log records [80M], free is the store for other allocations
Scaling suffixes like 'k', 'M' can be used up to [1M] and fill determines how the log is [+]. Scaling suffixes like
(E)xabytes. Default is 80 Megabytes. 'k', 'M' can be used up to (E)xabytes. Default is 80 Megabytes.
-M <address:port> -M <address:port>
Connect to this port and offer the command line interface.
Think of it as a reverse shell. When running with -M and there is
no backend defined the child process (the cache) will not start
initially.
-n name Specify the name for this instance. Amonst other things, this Connect to this port and offer the command line interface. Think of
name is used to construct the name of the directory in it as a reverse shell. When running with -M and there is no backend
which varnishd keeps temporary files and persistent state. defined the child process (the cache) will not start initially.
If the specified name begins with a forward slash, it is
interpreted as the absolute path to the directory which
should be used for this purpose.
-P file Write the process's PID to the specified file. -n name
Specify the name for this instance. Amonst other things, this name
is used to construct the name of the directory in which varnishd
keeps temporary files and persistent state. If the specified name
begins with a forward slash, it is interpreted as the absolute path
to the directory which should be used for this purpose.
-P file
Write the process's PID to the specified file.
-p <param=value> -p <param=value>
Set the parameter specified by param to the specified value. See
Run-Time Parameters for a list of parameters. This option can be Set the parameter specified by param to the specified value. See
used multiple times to specify multiple parameters. Run-Time Parameters for a list of parameters. This option can be
used multiple times to specify multiple parameters.
-r <param[,param...]> -r <param[,param...]>
Make the listed parameters read only. This gives the
system administrator a way to limit what the Varnish CLI can do. Make the listed parameters read only. This gives the system
Consider making parameters such as *user*, *group*, *cc_command*, administrator a way to limit what the Varnish CLI can do. Consider
*vcc_allow_inline_c* read only as these can potentially be used making parameters such as *user*, *group*, *cc_command*,
to escalate privileges from the CLI. *vcc_allow_inline_c* read only as these can potentially be used to
Protecting *listen_address* may also be a good idea. escalate privileges from the CLI. Protecting *listen_address* may
also be a good idea.
-s <[name=]type[,options]> -s <[name=]type[,options]>
Use the specified storage backend. The storage backends can be one of the following:
* malloc[,size]
* file,path[,size[,granularity]]
* persistent,path,size
See Storage Types in the Users Guide for more information Use the specified storage backend. The storage backends can be one
on the various storage backends. This option can be used of the following:
multiple times to specify multiple storage files. Names
are referenced in logs, vcl, statistics, etc. -s <malloc[,size]>
-s <file,path[,size[,granularity]]>
-s <persistent,path,size>
-S file Path to a file containing a secret used for authorizing access to the management port. See Storage Types in the Users Guide for more information on the
various storage backends. This option can be used multiple times to
specify multiple storage files. Names are referenced in logs, vcl,
statistics, etc.
-S file
Path to a file containing a secret used for authorizing access to
the management port.
-T <address[:port]> -T <address[:port]>
Offer a management interface on the specified address and port. See Management
Interface for a list of management commands.
-t ttl Specifies a hard minimum time to live for cached documents. This Offer a management interface on the specified address and port. See
is a shortcut for specifying the default_ttl run-time parameter. Management Interface for a list of management commands.
-t ttl
Specifies a hard minimum time to live for cached documents. This is
a shortcut for specifying the default_ttl run-time parameter.
-u user Specifies the name of an unprivileged user to which the child -u user
process should switch before it starts accepting
connections. This is a shortcut for specifying the user
runtime parameter.
If specifying both a user and a group, the user should be Specifies the name of an unprivileged user to which the child
specified first. process should switch before it starts accepting connections. This
is a shortcut for specifying the user runtime parameter.
-V Display the version number and exit. If specifying both a user and a group, the user should be specified
first.
-V
Display the version number and exit.
Hash Algorithms Hash Algorithms
...@@ -177,64 +206,58 @@ Hash Algorithms ...@@ -177,64 +206,58 @@ Hash Algorithms
The following hash algorithms are available: The following hash algorithms are available:
critbit -h critbit
A self-scaling tree structure. The default hash algorithm in
Varnish Cache 2.1 and onwards. In comparison to a more traditional
B tree the critbit tree is almost completely lockless. Do not
change this unless you are certain what you're doing.
simple_list self-scaling tree structure. The default hash algorithm in Varnish
A simple doubly-linked list. Not recommended for production use. Cache 2.1 and onwards. In comparison to a more traditional B tree
the critbit tree is almost completely lockless. Do not change this
unless you are certain what you're doing.
classic[,buckets] -h simple_list
A standard hash table. The hash key is the CRC32 of the object's
URL modulo the size of the hash table. Each table entry points to
a list of elements which share the same hash key. The buckets
parameter specifies the number of entries in the hash table. The
default is 16383.
A simple doubly-linked list. Not recommended for production use.
Storage Types -h <classic[,buckets]>
-------------
The following storage types are available: A standard hash table. The hash key is the CRC32 of the object's URL
modulo the size of the hash table. Each table entry points to a
list of elements which share the same hash key. The buckets
parameter specifies the number of entries in the hash table. The
default is 16383.
malloc
~~~~~~
syntax: malloc[,size] Storage Types
-------------
malloc is a memory based backend. The following storage types are available:
file -s <malloc[,size]>
~~~~
syntax: file,path[,size[,granularity]] malloc is a memory based backend.
The file backend stores data in a file on disk. The file will be -s <file,path[,size[,granularity]]>
accessed using mmap.
The path is mandatory. If path points to a directory, a temporary file The file backend stores data in a file on disk. The file will be
will be created in that directory and immediately unlinked. If path accessed using mmap.
points to a non-existing file, the file will be created.
If size is omitted, and path points to an existing file with a size The path is mandatory. If path points to a directory, a temporary
greater than zero, the size of that file will be used. If not, an file will be created in that directory and immediately unlinked. If
error is reported. path points to a non-existing file, the file will be created.
Granularity sets the allocation block size. Defaults to the system If size is omitted, and path points to an existing file with a size
page size or the filesystem block size, whichever is larger. greater than zero, the size of that file will be used. If not, an
error is reported.
persistent (experimental) Granularity sets the allocation block size. Defaults to the system
~~~~~~~~~~~~~~~~~~~~~~~~~ page size or the filesystem block size, whichever is larger.
syntax: persistent,path,size -s <persistent,path,size>
Persistent storage. Varnish will store objects in a file in a manner Persistent storage. Varnish will store objects in a file in a manner
that will secure the survival of *most* of the objects in the event of that will secure the survival of *most* of the objects in the event
a planned or unplanned shutdown of Varnish. The persistent storage of a planned or unplanned shutdown of Varnish. The persistent
backend has multiple issues with it and will likely be removed from a storage backend has multiple issues with it and will likely be
future version of Varnish. removed from a future version of Varnish.
Management Interface Management Interface
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment