Exinda EXNV-10063, Руководство администратора

Страница: 509 / 623

Exinda Network Orchestrator 4 Settings | 509
Screenshot 195: To add a new peer appliance for Edge Cache
Screenshot 196: Peer appliances for Edge Cache
1. Click the Add New Peer button. An Add New Peer screen appears.
2.
Type the
Host Name
of the peer.
3. Select the Relationship with the peer.
4.
Type the
HTTP Port
of the new peer.
5.
Type the
ICP Port
of the new peer.
6. Click the Add New Peer button. The peer appears in the list of configured peers.
7.
Peers can be edited or deleted by clicking the
Edit
or
Delete
button for the specified peer.
Preparing & Trusting a Certificate for Encrypted Traffic
When caching encrypted content, you need to specify a certificate that Edge Cache can use to create and sign a
dynamically created certificate on behalf of the server. You need to ensure that this certificate is trusted by all the
computers on your network that have traffic passing through Edge Cache. It is recommended that you create a self-
signed CA certificate (as opposed to a self-signed certificate without the CA designation) to simplify the loading and
trusting of the certificate by the computers in your network.
How to create a self-signed CA certificate for Edge Cache to use
When using Edge Cache for encrypted traffic, you must create and import a signing certificate in the
Certificates and
Keys
store. This certificate and its corresponding key are used by Edge Cache to generate and sign dynamic SSL
certificates for proxied sites. For all practical purposes, this certificate becomes a root certificate and you become a Root
CA.
To create a CA certificate and private key using OpenSSL
Use the following OpenSSL commands:
openssl genrsa -out myCompanyCA.key 2048