varnish/varnish.service

[Unit]
Description=Varnish HTTP accelerator/reverse proxy
After=network.target

[Service]
# added automatically, for details please see
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true
# end of automatic additions 
EnvironmentFile=/etc/sysconfig/varnish
PIDFile=/var/run/varnishd.pid
ExecStart=/usr/sbin/varnishd -P /var/run/varnishd.pid -F $VARNISHD_PARAMS
ExecReload=/usr/sbin/varnish_reload_vcl
KillMode=mixed
TasksMax=16384

[Install]
WantedBy=multi-user.target
- Update to release 7.6.0 * The Varnish Delivery Processor (VDP) filter API has been generalized to also accommodate future use for backend request bodies * VDPs with no vdp_bytes_f function are now supported if the vdp_init_f returns a value greater than zero to signify that the filter is not to be added to the chain. This is useful to support VDPs which only need to work on headers. * The epoll and kqueue waiters have been improved to correctly report WAITER_REMCLOSE, which increases the WAITER..remclose counter. varnishtest now supports the shutdown command corresponding to the shutdown(2) standard C library call * VSC counters for waiters have been added: + conns to count waits on idle connections + remclose to count idle connections closed by the peer + timeout to count idle connections which timed out in the waiter + action to count idle connections which resulted in a read * The port of a listen_endpoint given with the -a argument to varnishd can now also be a numerical port range like 80-89 * To implement the aforementioned feature, VSS_resolver_range() as been added to libvarnish * The Warning: mlock() of VSM failed message is now emitted when locking of shared memory segments (via mlock(2)) fails. * A bug has been fixed where string comparisons in VCL could fail with the nonsensical error message Comparison of different types: STRING '==' STRING. * An issue has been addressed in the builtin.vcl where backend responses would fail if they contained a Content-Range header when no range was requested. * Additional SessError VSL events are now generated for various HTTP/2 protocol errors. OBS-URL: https://build.opensuse.org/package/show/server:http/varnish?expand=0&rev=133 2024-10-05 19:18:05 +00:00			`[Unit]`
			`Description=Varnish HTTP accelerator/reverse proxy`
			`After=network.target`

			`[Service]`
			`# added automatically, for details please see`
			`# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort`
			`ProtectSystem=full`
			`ProtectHome=true`
			`PrivateDevices=true`
			`ProtectHostname=true`
			`ProtectClock=true`
			`ProtectKernelTunables=true`
			`ProtectKernelModules=true`
			`ProtectKernelLogs=true`
			`ProtectControlGroups=true`
			`RestrictRealtime=true`
			`# end of automatic additions`
			`EnvironmentFile=/etc/sysconfig/varnish`
			`PIDFile=/var/run/varnishd.pid`
			`ExecStart=/usr/sbin/varnishd -P /var/run/varnishd.pid -F $VARNISHD_PARAMS`
			`ExecReload=/usr/sbin/varnish_reload_vcl`
			`KillMode=mixed`
			`TasksMax=16384`

			`[Install]`
			`WantedBy=multi-user.target`