SuperLumin Nemesis. Getting Started Guide. February 2011

Transcription

1 SuperLumin Nemesis Getting Started Guide February 2011

2

3 SuperLumin Nemesis

4 Legal Notices Information contained in this document is believed to be accurate and reliable. However, SuperLumin assumes no responsibility for its use, nor for any infringements of patents or other rights of third parties, that might result from its use. SuperLumin reserves the right to change product specifications at any time without notice. Copyright SuperLumin. All rights reserved worldwide. No part of this document may be reproduced by any means nor translated to any electronic medium without the written consent of SuperLumin. Printed in U. S. A. Information subject to change without notice. SuperLumin 2 Riverplace, Suite 200 Dayton, OH SuperLumin Nemesis

5 SuperLumin Trademarks SuperLumin is a registered trademark. All other product names and services identified in this documentation are trademarks or registered trademarks of their respective companies and are used throughout this documentation in editorial fashion only for the benefit of such companies. No such use, or the use of any trade name, is intended to convey an endorsement or other affiliation with SuperLumin. Third-Party Materials Third-party trademarks are indicated by asterisks (*) and are the property of their respective owners. 5

6 6 SuperLumin Nemesis

7 Contents 1 What Do You Want To Do? 9 2 Overview About the SuperLumin Proxy Product About the Product CD What to Do Next Installing SuperLumin Proxy Prerequisites Server Hardware Requirements Installing SuperLumin Proxy Reinstalling SuperLumin Proxy Updating SuperLumin Proxy Configuring Network Adapters Installing the SuperLumin Single Sign-On Client Configuring SuperLumin Proxy Services Managing SuperLumin Proxy Using the Web-Based Management Tool Using the SuperLumin Command Line Interface (CLI) Where to Go from Here 21 Contents 7

8 8 SuperLumin Nemesis

9 1What Do You Want To Do? 1 Use the information in Table 1-1 to find what you need to get started with the SuperLumin proxy server. Table 1-1 Task Install: Install SuperLumin proxy server software on approved hardware. Upgrade: Upgrade an existing SuperLumin cache device. Manage using the GUI: Access and begin using the browser-based management tool. Manage using the CLI: Access and begin using the command line interface. Use: Begin using the SuperLumin device. Where to Go Chapter 3, Installing SuperLumin Proxy, on page 13 Updating SuperLumin Proxy on page 16 Using the Web-Based Management Tool on page 19 Using the SuperLumin Command Line Interface (CLI) on page 20 Accelerating HTML Content in the SuperLumin Nemesis Administration Guide What Do You Want To Do? 9

10 10 SuperLumin Nemesis

11 2Overview 2 NOTE: The term cache device as used in this guide refers to both appliances from STRATACACHE as well as STRATACACHE-approved hardware. This booklet contains the following information: Instructions for installing the SuperLumin proxy server software product package Instructions for obtaining the licenses and software downloads required to activate and update the SuperLumin proxy server software product References to other instructions needed for setting up the cache device and system services. For technical support, go to the SuperLumin Product Support page at ( About the SuperLumin Proxy Product SuperLumin Proxy provides an appliance that is capable of enhancing the security of your network in a single server solution. If the appliance is placed on the edge of the network, it can provide firewall and content filtering services. The appliance can function as a forward and a transparent proxy. This improves users' web browsing experience as well as enhances their online productivity. The SuperLumin proxy server can also function as a reverse proxy, which increases the efficiency of Web servers. This SuperLumin documentation covers both SuperLumin iproxy and SuperLumin Nemesis. In addition to including all the features and functionality of SuperLumin iproxy, SuperLumin Nemesis also includes support for social media and video caching. SuperLumin iproxy and SuperLumin Nemesis are the same product and consist of the same software. Your license determines which features are available. 2.2 About the Product CD The SuperLumin Proxy Product CD installs the SuperLumin proxy server product on SuperLuminapproved hardware. WARNING: The Product CD contains software that installs the SuperLumin Linux platform and the SuperLumin product. All data on the computer's hard disks is erased by the installation process. We recommend that you never insert the Product CD in a machine on which you do not intend to install the SuperLumin product. Under most circumstances you must choose for the installation process to continue. However, certain parts of the installation process have a timeout value and proceed automatically using default values if no option is chosen. The SuperLumin Proxy Product CD contains release notes and the SuperLumin proxy server documentation in Adobe PDF format with an active link to the SuperLumin Proxy documentation on the Web. Overview 11

12 2.3 What to Do Next The following table summarizes tasks you might want to perform while installing and configuring the SuperLumin proxy server product: To Install SuperLumin proxy software on new hardware. Reinstall SuperLumin proxy software on existing hardware. Use these Instructions Installing SuperLumin Proxy on page 14 Reinstalling SuperLumin Proxy on page 15 Update SuperLumin proxy software. Updating SuperLumin Proxy on page 16 Install a SuperLumin License. Reinstalling SuperLumin Proxy on page 15 Install the SuperLumin Single Sign-on Client Installing the SuperLumin Single Sign-On Client on page SuperLumin Nemesis

13 3Installing SuperLumin Proxy 3 You can install the SuperLumin proxy server product on SuperLumin approved hardware. You can also reinstall SuperLumin Proxy on an existing appliance (cache device). This section contains instructions for installing, reinstalling, and updating SuperLumin Proxy. It also contains instructions for installing licenses for installing SuperLumin licenses. 3.1 Prerequisites Prior to installing SuperLumin Proxy on your network, you need the following information: One or more IP addresses If you only configure one forward proxy service, then only one IP address is needed. If you configure multiple forward proxy services, or other reverse or transparent proxy services, then multiple IP addresses are required. The subnet masks associated with the IP addresses The IP address of the gateway on the subnet You also need the following DNS information: The IP addresses of a DNS servers on the network The DNS hostname that your device will use The DNS domain name of your network 3.2 Server Hardware Requirements The following server hardware is required for installing SuperLumin Proxy: Server hardware that is 64-bit (x86_64) compliant and is certified for SUSE Linux Enterprise Server 11 x86_64. For more information, see the SLES 11 certified hardware list ( yessearch/search.jsp). A minimum of 2 processors A single multiple core processor can also be used. If you plan to implement content filtering, four or more processors are recommended. A quad core processor or two dual core processors can also be used. 1 GB RAM minimum (4 GB RAM recommended) If you plan to implement content filtering, a minimum of 4 GB RAM is required and 8 GB is recommended. 1 network card. Installing SuperLumin Proxy 13

14 If you intend to configure a transparent or a reverse proxy service, or if you expect an excessive amount of network traffic, you should consider using a separate network card for managing your proxy server. 1 Hard Disk (Three or more hard disks are recommended) On multiple disk systems, the first hard disk must be at least 70 GB and subsequent disks must be at least 60 GB. Single disk systems must have a disk capacity of at least 120 GB. IMPORTANT: The SuperLumin proxy does not support software RAID (also known as BIOS RAID or Fake RAID). If you want to use RAID, you must use true hardware RAID. If your server already has software RAID, you must disable it before installing SuperLumin Proxy. NOTE: While true hardware RAID is supported, it is not recommended. This is because RAID combines all the disks into one grouping or volume. SuperLumin proxy performs better when disks are presented individually (as Just of Bunch of Disks or JBOD) because all of the disk spindles can then be controlled independently. If you require RAID, the recommended configuration is to have the first two disks configured as RAID 1 (mirroring) for the operating system and the remaining disks configured as JBOD. Using this configuration, the operating system is using RAID, but the disks used for the cache are not. 3.3 Installing SuperLumin Proxy 1 Insert the SuperLumin Proxy product CD and restart the server. 2 From the menu that displays after the server restarts, select Install. NOTE: It is not necessary to select any boot options. The installation will proceed automatically without the need for user input. The server will automatically restart after the installation completes. 3 After the server restarts, let it boot from Hard Disk (the default option). You must leave the CD in until the installation finishes. 4 Log in to the server using Username=root Password=password 5 When prompted, change the password from password to the desired password. 6 Type quickstart to run the quickstart configuration script. The script takes you through the following steps to configure the settings for your proxy server: NOTE: Information in the script that is contained within parenthesis ( ) are examples. Information contained within square brackets [ ] are default values. 1. Enter the host name for your proxy server. 2. Enter the domain this proxy resides in. 3. Enter the IP address for your proxy server. 14 SuperLumin Nemesis

15 4. Enter the network mask in CIDR form for the IP address. 5. Enter the IP gateway for your proxy server. 6. Enter the IP address of the DNS server on your network. 7. (Optional) Enter the IP address of a secondary DNS server on your network. The default is none. 8. (Optional) Enter the IP address of a tertiary (third) DNS server on your network. The default is none. 9. Select the region the proxy server resides in. You can select a number that corresponds to a geographic region. For example, 16 is the United States. 10. Select the time zone the proxy server resides in. You can select a number that corresponds to a time zone. For example, 10 is Mountain Time. 11. Enter the GUI Management user's name. You are then prompted twice for the password. 7 After installing SuperLumin Proxy, update the proxy by following the instructions in Updating SuperLumin Proxy on page 16. Default User Accounts The installation process automatically creates the following user accounts: root -- The root user created during the Linux installation admin -- The user created to log in and use the GUI management tool (not a Linux system user). This is the username you specified when you installed the software product (ran the quickstart script) It may be a different name than admin. You are prompted for passwords for both user accounts unless you have purchased an appliance from Stratacache with SuperLumin Proxy preinstalled. 3.4 Reinstalling SuperLumin Proxy WARNING: This process reformats the proxy server s hard drives. All data on the proxy server device will be overwritten, including cached objects. 1 Ensure you have backed up the proxy server s configuration and license files. See Backing Up and Restoring the Proxy Server Configuration in the SuperLumin Nemesis Administration Guide. IMPORTANT: The configuration and license files will be lost once the automatic installation process begins, therefore, it is critical that you backup the configuration settings on the device. 2 Perform Step 1 through Step 6 on page 14 above. 3 Restore the proxy server s configuration file to the following path: /etc/opt/sln/slash/xml/.current Installing SuperLumin Proxy 15

16 4 (Optional) To install a SuperLumin license from another installation, or a license received via , copy the license.bin.number file to your desktop. 5 Start the browser-based management tool, click the Getting Started link, then click Licensing. See Starting the Management Tool in the SuperLumin Nemesis Administration Guide for details on starting and using the browser-based management tool. 6 Enter the license filename or browse to and select it. 7 Click Install License. The license file will automatically be renamed to remove the number and will be copied to the appropriate directory on the proxy server. The proxy server is now licensed. 8 Click Restart Server after the license is installed. After installing the license, the proxy server must be restarted for the license to be activated. 9 (Optional) To obtain a SuperLumin license for a new installation, the device s MAC address to support@stratacache.com. A license will be ed to you with an activation method. 10 After reinstalling SuperLumin Proxy, update the proxy by following the instructions in Updating SuperLumin Proxy on page Updating SuperLumin Proxy SuperLumin periodically provides updates and patches to the SuperLumin Proxy product. To obtain the latest patches and updates, log in to the proxy server as root, go to the console prompt and start the Nemesis CLI by entering slash, then run the following commands in the order listed exec online-update refresh (refreshes the internal software database) check-for-updates (does a check to see if software updates are available) show-version (displays the currently running software version) update (updates the software on the proxy server) restart The restart command reboots the proxy server. A reboot is required after the update completes. You can also reboot the proxy server using the browser-based management tool by clicking the Health link at the top of the page and then clicking Restart Proxy. NOTE: To ensure you have the latest updates and patches, you should update the proxy software before configuring proxy services. Also, you should always do a refresh before checking for updates or performing the update. 16 SuperLumin Nemesis

17 3.6 Configuring Network Adapters Some services (forward and reverse proxy) may require you to add additional IP addresses to network adapters. You may also want to add an additional IP address to a network adapter to be used for accessing the Web-based management tool. To add an additional IP address to a network adapter 1 Open the Web-based management tool and click the Getting Started link at the top of the page. See Section 4.1, Using the Web-Based Management Tool, on page Click Quick Adapter Setup 3 Select an available adapter and click Insert, or click Modify on an adapter that has already been configured. 4 Add a new IP address or modify an existing IP address, then click OK. 5 Click Apply All Changes. If the Apply All Changes option does not appear, click the Configuration link at the top of the page, then click Apply All Changes. See Adapters in the SuperLumin Nemesis Administration Guide for more details on configuring network adapters for proxy services. 3.7 Installing the SuperLumin Single Sign-On Client SuperLumin provides a Single Sign-On solution that can be used with the configured authentication profiles. For example, if you have end users that use LDAP authentication and your LDAP server is a Novell edirectory server, you can configure the Windows clients to support edirectory Single Sign-On. To install the SuperLumin Single Sign-On client 1 Open the Web-based management tool and click the Getting Started link at the top of the page. See Section 4.1, Using the Web-Based Management Tool, on page Click Single Sign-On Client, then click SuperLumin Single Sign-On Windows Client. 3 Copy the slnlogin.exe file to a directory on your Windows client machine and double click on it to run it. On Windows XP, this installs the SuperLumin edirectory Single Sign-On file in c:\program Files\SuperLumin\slnLogin. On other versions of Windows, the SuperLumin edirectory Single Sign-On file is installed in c:\programdata\superlumin\slnlogin. 4 Copy the proxy server s Certificate of Authority (CA) certificate subject hash file from the proxy server to your Windows client machine by right clicking Proxy CA Public Key (for SSO), selecting Save As, and then specifying a directory. On Windows XP, copy the file to c:\program Files\SuperLumin\slnLoginSvc\config\ On other Windows clients, the file is copied to c:\programdata\superlumin\slnloginsvc\config\ It is the file with a ".0" extension. 5 (Optional) To uninstall the SuperLumin Single Sign-On Windows client on Windows XP, run Installing SuperLumin Proxy 17

18 c:\program Files\SuperLumin\slnLogin\uninst.exe On other versions of Windows, run c:\programdata\superlumin\slnlogin\uninst.exe. NOTE: You can t uninstall the SuperLumin Single Sign-On Windows client using the Add or Remove Programs option in the Windows Control Panel. 3.8 Configuring SuperLumin Proxy Services After installing SuperLumin Proxy, you must configure at least one proxy service in order to use the SuperLumin Proxy product. For information on configuring proxies, see Quickly Creating Proxy Services in the SuperLumin Nemesis Administration Guide. 18 SuperLumin Nemesis

19 4Managing SuperLumin Proxy 4 We recommend you use the SuperLumin Web Management tool to manage your proxy server. SuperLumin also provides a Command Line Interface (CLI) you can use to manage your proxy server. 4.1 Using the Web-Based Management Tool The Web-based management tools lets you Configure SuperLumin Proxy so you can begin using needed services Maintain and manage SuperLumin Proxy product configurations as your network needs change. To access the Web-based management tool 1 On a workstation, open a web browser. This should be Internet Explorer 7.0 or later, Netscape 7 or later, Mozilla Firefox 3.0 or later, or Apple Safari 3.x. 2 Point the browser to the IP address or DNS name of the proxy server you want to manage followed by /manage. The URL must contain a DNS name or an IP addressress you have already configured on the proxy server, for example: or NOTE: The SuperLumin management tool requires a secure connection, so using http in the URL will automatically redirect to https: 3 Enter the password you assigned to the GUI Management user you created when you installed SuperLumin Proxy. You may have assigned a different name when you created the user that administers your proxy server. Regenerating a Certificate for Accessing the Management Tool If you get certificate error while trying to access the browser-based management tool, you may need to regenerate a security certificate. You can do this using the SuperLumin CLI by entering slash at the command line and then running the following commands in the order listed. exec key-management number-of-bits 2048 number-of-days 7300 Managing SuperLumin Proxy 19

20 common-name host.domainname Replace host.domainname with the name of your host/domain. gen-ca common-name host Replace host with your host name. gen-certificate sln-iproxy-gui exit quit You may need to delete your browser certificate before regenerating a certificate. Instructions for using the Web-based management tool are included in the SuperLumin Nemesis Administration Guide. 4.2 Using the SuperLumin Command Line Interface (CLI) The following is a brief summary of the SuperLumin Proxy CLI. 1. You can type slash at the device command line, which automatically starts the SuperLumin Proxy CLI. 2. Typing conf places you in Config mode from which you can modify the device's current configuration. Config mode and its associated sub-shells or sub-modes are shown at the prompt. For example, the sl-conf> prompt indicates you are working in Config mode. The http-sv> prompt displays if you are in the mode for creating a proxy service. 3. Typing a question mark (?) or pressing the Tab key displays the commands available in the current mode or context. 4. Typing show displays the settings in the current context. 5. Typing.. takes you back to the previous mode or level. Three dots (...) takes you back to the main conf prompt. Typing quit will exit the CLI (slash) without saving any changes. For more information about the SuperLumin command line interface, see the SuperLumin Nemesis Administration Guide. 20 SuperLumin Nemesis

21 5Where to Go from Here 5 After completing the initial setup procedures outlined in this guide, use Table 5-1 as a springboard into using the SuperLumin Proxy product. Table 5-1 Task Begin using your SuperLumin Proxy cache device. Set up basic caching services on your cache device. Access and begin using the Web-based management tool. Use the command line interface to manage your cache device. Where to Go Integrating SuperLumin Nemesis into Your Nerwork in the SuperLumin Nemesis Administration Guide Accelerating HTML Content in the SuperLumin Nemesis Administration Guide Using the Browser-Based Management Tool in the SuperLumin Nemesis Administration Guide Starting the SuperLumin CLI in the SuperLumin Nemesis Administration Guide Where to Go from Here 21

22 22 SuperLumin Nemesis