我们最近在我们的Magento商店添加了Varnish，现在我们正在运行以下设置，一个带有清漆，nginx，redis和SSL的magento商店。
但不知何故，varnish或Nginx以一种奇怪的方式改变了MD5哈希。我们有一个支付提供商返回一个哈希值，并将其与$ _GET参数中的值进行比较。只要我添加nginx / varnish更改以使其运行，就会更改此值。
这是正常的问题吗？可能是因为它现在通过了几个端口，值会改变吗？
Varnish在Port 8081上运行
我的Nginx：
while client.is_connected():
....
我的Varnish.vcl：
server {
listen 8;
server_name www.example.com;
location / {
rewrite ^/(.*) https://www.example.com/$1 permanent;
}
}
server {
listen 0.0.0.0:443 ssl;
server_name www.example.com;
ssl on;
ssl_certificate /etc/ssl/www_domain_com.crt;
ssl_certificate_key /etc/ssl/www_domain_com.key;
include /etc/nginx/ssl_common.conf;
include /etc/nginx/location_common.conf;
}
server {
listen 8080;
server_name www.example.com
add_header Access-Control-Allow-Origin "https://www.example.com";
add_header Access-Control-Allow-Origin "https://example.com";
include /etc/nginx/common.d/top_common.conf;
root /var/www/www.example.com/deployed/current;
location ~* ^.+\.(css|js|jpg|jpeg|gif|png|ico|gz|svg|svgz|ttf|otf|woff|eot|mp4|ogg|ogv|webm|tar)$ {
add_header Cache-Control "public";
}
location / {
fastcgi_read_timeout 2600s;
proxy_read_timeout 150;
try_files $uri $uri/ /index.php?$args;
access_log off;
expires max;
}
location ~ \.php$ {
include /etc/nginx/common.d/fcgi_common.conf;
include fastcgi_params;
fastcgi_param MAGE_RUN_CODE base;
fastcgi_param MAGE_RUN_TYPE website;
fastcgi_param HTTPS on;
}
}
我的varnish.params：
vcl 4.0;
# Default backend definition. Set this to point to your content server.
backend default {
.host = "127.0.0.1";
.port = "8080";
}
# admin backend with longer timeout values. Set this to the same IP & port as your default server.
backend admin {
.host = "127.0.0.1";
.port = "8080";
.first_byte_timeout = 18000s;
.between_bytes_timeout = 18000s;
}
# add your Magento server IP to allow purges from the backend
acl purge {
"127.0.0.1";
}
import std;
sub vcl_recv {
if (req.restarts == 0) {
if (req.http.x-forwarded-for) {
set req.http.X-Forwarded-For = req.http.X-Forwarded-For + ", " + client.ip;
} else {
set req.http.X-Forwarded-For = client.ip;
}
}
if (req.method != "GET" &&
req.method != "HEAD" &&
req.method != "PUT" &&
req.method != "POST" &&
req.method != "TRACE" &&
req.method != "OPTIONS" &&
req.method != "DELETE" &&
req.method != "PURGE") {
/* Non-RFC2616 or CONNECT which is weird. */
return (pipe);
}
# Normalize the query arguments
set req.url = std.querysort(req.url);
# purge request
if (req.method == "PURGE") {
if (!client.ip ~ purge) {
return (synth(405, "Not allowed."));
}
ban("obj.http.X-Purge-Host ~ " + req.http.X-Purge-Host + " && obj.http.X-Purge-URL ~ " + req.http.X-Purge-Regex + " && obj.http.Content-Type ~ " + req.http.X-Purge-Content-Type);
return (synth(200, "Purged."));
}
# switch to admin backend configuration
if (req.http.cookie ~ "adminhtml=") {
set req.backend_hint = admin;
}
# tell backend that esi is supported
set req.http.X-ESI-Capability = "on";
# we only deal with GET and HEAD by default
if (req.method != "GET" && req.method != "HEAD") {
return (pass);
}
# normalize url in case of leading HTTP scheme and domain
set req.url = regsub(req.url, "^http[s]?://[^/]+", "");
# collect all cookies
std.collect(req.http.Cookie);
# static files are always cacheable. remove SSL flag and cookie
if (req.url ~ "^/(media|js|skin)/.*\.(png|jpg|jpeg|gif|css|js|swf|ico)$") {
unset req.http.Https;
unset req.http.Cookie;
}
# formkey lookup
if (req.url ~ "/varnishcache/getformkey/") {
# check for formkey in cookie
if (req.http.Cookie ~ "PAGECACHE_FORMKEY") {
set req.http.X-Pagecache-Formkey = regsub(req.http.cookie, ".*PAGECACHE_FORMKEY=([^;]*)(;*.*)?", "\1");
} else {
# create formkey once
set req.http.X-Pagecache-Formkey-Raw = req.http.Cookie + client.ip + req.xid;
C{
const char *formKeyRaw;
const struct gethdr_s hdr = { HDR_REQ, "\030X-Pagecache-Formkey-Raw:" };
formKeyRaw = VRT_GetHdr(ctx, &hdr);
char *result = generate_formkey((char *)formKeyRaw);
static const struct gethdr_s formkey = { HDR_REQ, "\024X-Pagecache-Formkey:"};
VRT_SetHdr(ctx, &formkey, result, vrt_magic_string_end );
}C
}
unset req.http.X-Pagecache-Formkey-Raw;
return (synth(760, req.http.X-Pagecache-Formkey));
}
# do not cache any page from index files
if (req.url ~ "^/(index)") {
return (pass);
}
# as soon as we have a NO_CACHE cookie pass request
if (req.http.cookie ~ "NO_CACHE=") {
return (pass);
}
# normalize Accept-Encoding header
# http://varnish.projects.linpro.no/wiki/FAQ/Compression
if (req.http.Accept-Encoding) {
if (req.url ~ "\.(jpg|png|gif|gz|tgz|bz2|tbz|mp3|ogg|swf|flv)$") {
# No point in compressing these
unset req.http.Accept-Encoding;
} elsif (req.http.Accept-Encoding ~ "gzip") {
set req.http.Accept-Encoding = "gzip";
} elsif (req.http.Accept-Encoding ~ "deflate" && req.http.user-agent !~ "MSIE") {
set req.http.Accept-Encoding = "deflate";
} else {
# unknown algorithm
unset req.http.Accept-Encoding;
}
}
# remove Google gclid parameters
set req.url = regsuball(req.url, "\?gclid=[^&]+$", ""); # strips when QS = "?gclid=AAA"
set req.url = regsuball(req.url, "\?gclid=[^&]+&", "?"); # strips when QS = "?gclid=AAA&foo=bar"
set req.url = regsuball(req.url, "&gclid=[^&]+", ""); # strips when QS = "?foo=bar&gclid=AAA" or QS = "?foo=bar&gclid=AAA&bar=baz"
return (hash);
}
# sub vcl_pipe {
# return (pipe)
# }
# sub vcl_pass {
# return (fetch);
# }
sub vcl_hash {
hash_data(req.url);
if (req.http.host) {
hash_data(req.http.host);
} else {
hash_data(server.ip);
}
if (req.http.cookie ~ "PAGECACHE_ENV=") {
set req.http.pageCacheEnv = regsub(
req.http.cookie,
"(.*)PAGECACHE_ENV=([^;]*)(.*)",
"\2"
);
hash_data(req.http.pageCacheEnv);
unset req.http.pageCacheEnv;
}
if (!(req.url ~ "^/(media|js|skin)/.*\.(png|jpg|jpeg|gif|css|js|swf|ico)$")) {
call design_exception;
}
return (lookup);
}
# sub vcl_hit {
# return (deliver);
# }
sub vcl_miss {
return (fetch);
}
sub vcl_backend_response {
if (beresp.http.X-Cache-Debug) {
set beresp.http.X-Ttl = beresp.ttl;
}
if (beresp.status >= 500) {
# let SOAP errors pass - better debugging
if ((beresp.http.Content-Type ~ "text/xml") || (bereq.url ~ "^/errors/")) {
return (deliver);
}
return (retry);
#return (deliver);
}
set beresp.grace = 5m;
# enable ESI feature
set beresp.do_esi = true;
# add ban-lurker tags to object
set beresp.http.X-Purge-URL = bereq.url;
set beresp.http.X-Purge-Host = bereq.http.host;
if (beresp.status == 200 || beresp.status == 301 || beresp.status == 404) {
if (beresp.http.Content-Type ~ "text/html" || beresp.http.Content-Type ~ "text/xml" || beresp.http.Content-type ~ "json") {
if ((beresp.http.Set-Cookie ~ "NO_CACHE=") || (beresp.ttl < 1s)) {
set beresp.ttl = 0s;
# set beresp.ttl = 120s;
set beresp.uncacheable = true;
return (deliver);
}
# marker for vcl_deliver to reset Age:
set beresp.http.magicmarker = "1";
# Don't cache cookies
unset beresp.http.set-cookie;
} else {
# set default TTL value for static content
set beresp.ttl = 4h;
}
return (deliver);
}
# set beresp.ttl = 120s;
set beresp.uncacheable = true;
return (deliver);
}
sub vcl_deliver {
# debug info
if (resp.http.X-Cache-Debug) {
if (obj.hits > 0) {
set resp.http.X-Cache = "HITT";
set resp.http.X-Cache-Hits = obj.hits;
} else {
set resp.http.X-Cache = "MISSI";
}
set resp.http.X-Cache-Expires = resp.http.Expires;
} else {
# remove Varnish/proxy header
unset resp.http.X-Varnish;
unset resp.http.Via;
unset resp.http.Age;
unset resp.http.X-Purge-URL;
unset resp.http.X-Purge-Host;
}
if (resp.http.magicmarker) {
# Remove the magic marker
unset resp.http.magicmarker;
set resp.http.Cache-Control = "no-store, no-cache, private, must-revalidate, post-check=0, pre-check=0";
set resp.http.Pragma = "no-cache";
set resp.http.Expires = "Mon, 31 Mar 2008 10:00:00 GMT";
set resp.http.Age = "0";
}
}
sub vcl_backend_error {
set beresp.http.Content-Type = "text/html; charset=utf-8";
set beresp.http.Retry-After = "5";
synthetic({"
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<p.status + " " + resp.reason +tml>
<head>
<title>"} + beresp.status + " " + beresp.reason + {"</title>
</head>
<body>
<h1>Error "} + beresp.status + " " + beresp.reason + {"</h1>
<p>"} + beresp.reason + {"</p>
<h3>Guru Meditation:</h3>
<p>XID: "} + bereq.xid + {"</p>
<hr>
<p>Varnish cache server</p>
</body>
</html>
"});
return (deliver);
}
sub vcl_synth {
set resp.http.Content-Type = "text/html; charset=utf-8";
set resp.http.Retry-After = "5";
# formkey request
if (resp.status == 760) {
set resp.http.tmpReason = resp.reason;
set resp.status = 200;
synthetic(resp.http.tmpReason);
unset resp.http.tmpReason;
unset resp.http.Accept-Encoding;
return(deliver);
}
return (deliver);
}
#sub vcl_fini {
# return (ok);
#}
sub design_exception {
}
C{
#include <string.h>
#include <stdio.h>
#include <stdlib.h>
#include <openssl/md5.h>
/**
* create md5 hash of string and return it
*/
char *generate_formkey(char *string) {
// generate md5
unsigned char result[MD5_DIGEST_LENGTH];
MD5((const unsigned char *)string, strlen(string), result);
// convert to chars
static char md5string[MD5_DIGEST_LENGTH + 1];
const char *hex = "0123456789ABCDEF";
unsigned char *pin = result;
char *pout = md5string;
for(; pin < result + sizeof(result); pout+=2, pin++) {
pout[0] = hex[(*pin>>4) & 0xF];
pout[1] = hex[ *pin & 0xF];
}
pout[-1] = 0;
// return md5
return md5string;
}
}C