Reverse proxy Impelemtation for BJP.ORG on rackspace data center

Squid as Reverse proxy

Situation - BJP.org had IP based DDOS attack

Temp Solution : Build a reverse proxy in rackspace data center use the local eth1 both server .

http://wiki.squid-cache.org/ConfigExamples/Reverse/BasicAccelerator

Squid Server - 50.56.177.99 (Global) , 10.180.38.116 (local) Apache Server - 198.61.199.121 ( global / made down), 10.178.107.106 (local)

yum install squid

mv /etc/squid/squid.conf /etc/squid/squid.conf.org

create a new /etc/squid/squid.conf

##Squid as Reverse Proxy
http_port 80 accel defaultsite=www.bjp.org
cache_peer 10.178.107.106  parent 80 0 no-query originserver name=myAccel forceddomain=www.bjp.org
acl our_sites dstdomain www.bjp.org
http_access allow our_sites
http_access deny all
cache_peer_access myAccel allow our_sites
cache_peer_access myAccel deny all
never_direct allow all

10.178.107.106 - Local IP of old server (198.61.199.121)

Apache server's file

<VirtualHost 10.178.107.106:80>
   ServerAdmin webmaster@dummy-host.bjp.org
   DocumentRoot /var/www/html/cms12

1. DocumentRoot /var/www/html/maintenance

   ServerName bjp.org
<Directory /var/www/html/cms12>
   Options Indexes FollowSymLinks MultiViews +ExecCGI
   AllowOverride AuthConfig FileInfo
   Order deny,allow
   Deny from all
   allow from 127.0.0.1
   allow from 10.180.38.116
</Directory>
Alias /tetra-cp /var/www/html/cms12/tetra-cp
   ErrorLog logs/bjp-org-err.log
   CustomLog logs/bjp-org-access.log common