Exinda EXNV-10063, Руководство администратора, Страница: 555 / 623

Exinda Network Orchestrator 5 Troubleshooting | 555
show the requests to Edge Cache and the hits. These two charts will show you if data is going through Edge Cache and
if so how many hits and how much data is served from the cache.
Check the logs for any errors related to Edge Cache, including DNS not being configured.
You should ensure that DNS is configured properly by visiting
Configuration > System > Network > DNS
. For help
configuring DNS, see the main user guide.
If the Real Time monitor and the Edge Cache monitor indicate that data is not passing through Edge Cache, you
should ensure that the Edge Cache process is running. Go to
Configuration > System > Optimization > Services
and
ensure that Edge Cache is running. You may want to restart Edge Cache.
I do not know if Edge Cache is caching encrypted traffic
All the steps for troubleshooting caching above apply.
Try browsing to an encrypted site then look at the real time conversations. The encrypted traffic will be reflected in
the application name, such as HTTPS. If processed through Edge Cache, the conversation will have a blue background.
Ensure HTTPS caching is enabled and a certificate is configured.
If the traffic that you are concerned about is specified in a caching whitelist or blacklist using source or destination
domains, then try restarting Edge Cache at Monitor > Optimization > Services . If the reverse mapped domains have
changed, then the domains that are specified in the whitelists and blacklists may need to be re-resolved and re-reverse
mapped. This is done upon Edge Cache startup, when there is a change to the whitelist or blacklist, or when there is a
change to the DNS information.
I want to increase the effectiveness of Edge Cache
You can restrict the size of the objects that can be cached to more closely match the type of data that you want
cached by visiting Configuration > System > Optimization > Edge Cache .
You can increase the amount of storage available for Edge Cache to use by visiting
Configuration > System > Setup
> Storage .
What factors should I consider before starting Edge Cache on HTTPS for surf traffic?
Develop a list of sites that need to be white listed because of security concerns (for example financial sites)
Deploy your self-signed certificate throughout the entire network if you do not want users to accept the “false” cer-
tificate
Independent appliances (for example printer from various manufacturers) use HTTPS to connect to maintenance
sites to order cartridges and no human interaction is needed; therefore these sites need to be white listed.
Payment terminals use HTTPS to accept payments and there is no option to install a self-signed certificate
Some browsers (typically Google Chrome) check more than only the “trusted” self-signed certificate before allowing
access to a specific web page
Why are some web pages rendering incorrectly?
If Edge Cache is not rendering layouts as expected, the problem is likely due to the certificate format. Using the
Certificate generator of the Exinda appliance lets you export PEM and DER Certificate formats, but some formats require a
PKCS12 certificate and these cannot be exported from the Exinda appliance. To correct the problem, use openssl to
generate Certificates and import them into the appliance:
1.
Use openssl to create your private key and CSR file. The list of common command lines for openssl to create
your Certificates includes:
Generate a new private key and Certificate Signing Request:
openssl req -out CSR.csr -new
-newkey rsa:2048 -nodes -keyout privateKey.key