lahaxearnaud

apt-get install shorewall shorewall-doc

# on va dans le HOME
cd ~
# Copie de la doc one-interface
cp -r /usr/share/doc/shorewall/examples/one-interface ~
#on va dans la doc one-interface
cd one-interface/
# on met en place les configs de base
cp interfaces policy zones rules /etc/shorewall/

lahaxearnaud

nano /etc/shorewall/rules

lahaxearnaud

#ACTION         SOURCE          DEST            PROTO   DEST    SOURCE          ORIGINAL        RATE            USER/  $
#                                                       PORT    PORT(S)         DEST            LIMIT           GROUP
#SECTION ALL
#SECTION ESTABLISHED
#SECTION RELATED
SECTION NEW

# Drop Ping from the "bad" net zone.. and prevent your log from being flooded..

Ping(DROP)    net               $FW

lahaxearnaud

shorewall start

lahaxearnaud

Compiling...
Processing /etc/shorewall/params ...
Processing /etc/shorewall/shorewall.conf...
Compiling /etc/shorewall/zones...
Compiling /etc/shorewall/interfaces...
Determining Hosts in Zones...
Locating Action Files...
Compiling /usr/share/shorewall/action.Drop for chain Drop...
Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast...
Compiling /usr/share/shorewall/action.Invalid for chain Invalid...

lahaxearnaud

npm install statsd-client webpagetest --save

lahaxearnaud

const WebPageTest = require('webpagetest');
const http = require('http');
const SDC = require('statsd-client'),
    sdc = new SDC({
        prefix: '<NOM_DU_SITE_OU_DE_LA_PAGE>.webpagetest',
        host: '<VOTRE_HOST_GRAPHITE>',
        port: 8125
    });

const wpt = new WebPageTest('www.webpagetest.org', '<VOTRE_API_KEY>');

lahaxearnaud

0 * * * * node webPageTest.js

lahaxearnaud

vcl 4.0;

import std;

backend default {
      // le hostname du nginx dans ma stack
      .host = "front";
      .port = "80";
}

lahaxearnaud

framework:
    esi:       { enabled: true }
    fragments: { path: /_fragment }