You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@trafficserver.apache.org by bu...@apache.org on 2012/10/24 05:45:47 UTC
svn commit: r835958 - in /websites/staging/trafficserver/trunk: cgi-bin/
content/ content/docs/trunk/admin/configuration-files/ip_allow.config.en.html
Author: buildbot
Date: Wed Oct 24 03:45:46 2012
New Revision: 835958
Log:
Staging update by buildbot for tserver
Modified:
websites/staging/trafficserver/trunk/cgi-bin/ (props changed)
websites/staging/trafficserver/trunk/content/ (props changed)
websites/staging/trafficserver/trunk/content/docs/trunk/admin/configuration-files/ip_allow.config.en.html
Propchange: websites/staging/trafficserver/trunk/cgi-bin/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Wed Oct 24 03:45:46 2012
@@ -1 +1 @@
-1400934
+1401532
Propchange: websites/staging/trafficserver/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Wed Oct 24 03:45:46 2012
@@ -1 +1 @@
-1400934
+1401532
Modified: websites/staging/trafficserver/trunk/content/docs/trunk/admin/configuration-files/ip_allow.config.en.html
==============================================================================
--- websites/staging/trafficserver/trunk/content/docs/trunk/admin/configuration-files/ip_allow.config.en.html (original)
+++ websites/staging/trafficserver/trunk/content/docs/trunk/admin/configuration-files/ip_allow.config.en.html Wed Oct 24 03:45:46 2012
@@ -69,19 +69,26 @@ you apply the changes to a node in a clu
applies the changes to all other nodes in the cluster.</p>
<h1 id="Format">Format</h1>
<p>Each line in the <code>ip_allow.config</code> file must have the following format:</p>
-<div class="codehilite"><pre>src_ip=ipaddress action=ip_allow | ip_deny
+<div class="codehilite"><pre>src_ip=<range of IP addresses> action=<action> [method=<list of methods separated by '|'>]
</pre></div>
-<p>where ipaddress is the IP address or range of IP addresses of the clients
-allowed to access the Traffic Server proxy cache, the action <code>ip_allow</code>
-enables the specified clients to access the Traffic Server proxy cache,
-and <code>ip_deny</code> denies the specified clients to access the Traffic Server
-proxy cache.</p>
-<p>By default, the <code>ip_allow.config</code> file contains the following line, which
-allows all clients to access the Traffic Server proxy cache. To restrict
-access, comment out or delete this line before adding rules:</p>
-<div class="codehilite"><pre>src_ip=0.0.0.0-255.255.255.255 action=ip_allow
+<p>where src_ip is the IP address or range of IP addresses of the client(s).
+The action <code>ip_allow</code> enables the specified client(s) to access the Traffic
+Server proxy cache, and <code>ip_deny</code> denies the specified client(s) to access
+the Traffic Server proxy cache.
+Multiple method keywords can be specified (method=GET method=HEAD), or
+multiple methods can be separated by an '|' (method=GET|HEAD). The method
+keyword is optional and it is defaulted to ALL. Available methods: ALL, GET,
+CONNECT, DELETE, HEAD, ICP_QUERY, OPTIONS, POST, PURGE, PUT, TRACE, PUSH</p>
+<p>By default, the <code>ip_allow.config</code> file contains the following lines, which
+allows all methods to localhost to access the Traffic Server proxy cache
+and denies PUSH, PURGE and DELETE to all IPs (note this allows all other
+methods to all IPs):</p>
+<div class="codehilite"><pre>src_ip=127.0.0.1 action=ip_allow method=ALL
+src_ip=::1 action=ip_allow method=ALL
+src_ip=0.0.0.0-255.255.255.255 action=ip_deny method=PUSH|PURGE|DELETE
+src_ip=::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff action=ip_deny method=PUSH|PURGE|DELETE
</pre></div>