You are browsing a read-only backup copy of Wikitech. The live site can be found at wikitech.wikimedia.org

Difference between revisions of "Secure.wikimedia.org"

From Wikitech-static
Jump to navigation Jump to search
imported>Krinkle
imported>Neil P. Quinn-WMF
(Neil P. Quinn-WMF moved page Secure.wikimedia.org to Obsolete:Secure.wikimedia.org: Service has been obsolete for a long time)
 
Line 1: Line 1:
'''secure.wikimedia.org''' used to be an HTTPS proxy, providing users a secure alternative to access the wiki projects of the Wikimedia Foundation.
#REDIRECT [[Obsolete:Secure.wikimedia.org]]
 
After the main cluster was converted to support HTTPS for all traffic, secure.wikimedia.org was replaced with a simple redirect service for the old URL structure. For example, https://secure.wikimedia.org/wikipedia/de/wiki/Crowdsourcing redirects to https://de.wikipedia.org/wiki/Crowdsourcing.
 
== Original service ==
{{Archive|date=2009}}
secure.wikimedia.org provided HTTPS/SSL secured access to the Wikimedia Foundation wikis, like Wikipedia, Wiktionary, etc.
 
The service ran on the [[singer]] host in the [[Pmtpa cluster]], on Apache 2.2 with an SSL certificate and VirtualHost for <code>secure.wikimedia.org</code>. Hits to this interface were then proxied to the internal load balancer and from there to [[Application servers|regular Apaches]] via [[apache.pmtpa.wmnet]], which serve the backend requests just like unencrypted hits.
=== Configuration ===
 
==== Frontend ====
 
Apache configuration is in <tt>/etc/apache2/</tt>
Running a custom-compiled Apache 2.2 in /usr/local/apache22
 
* Wikis are proxied.
* A special service IP is used.
 
Relevant config files...
* /etc/apache2/sites-available/secure.wikimedia.org on [[singer]]
 
* wikimedia-ssl-backend.conf on all apaches
 
Modules <tt>proxy</tt> and <tt>proxy_http</tt> should be enabled with command ''a2enmod''.
 
Proxy defs:
<pre>
<Proxy *>
    Allow from all
</Proxy>
ProxyRequests Off
ProxyPreserveHost On
ProxyPass /otrs !
ProxyPass /otrs-2.1.3 !
ProxyPass /otrs-web !
ProxyPass / http://apaches.pmtpa.wmnet/
ProxyVia On
</pre>
 
==== Backend ====
 
For wikis, the frontend proxies to the general Apache servers in PMTPA. These hit a VHOST configured by wikimedia-ssl-backend.conf which does a rewrite match on the funny directories and sets an environment variable used by CommonSettings.php to decode the correct host.
 
=== Root page ===
The index page at https://secure.wikimedia.org/ was be editable on [http://meta.wikimedia.org/wiki/Secure.wikimedia.org_template Meta-Wiki], served using mod_rewrite and extract2.php.
 
[[Category:Services]]

Latest revision as of 22:17, 3 August 2021