[racattack] Re: Locally Cached ISOs
- From: Martin Nash <martin@xxxxxxxxxxxx>
- To: "racattack@xxxxxxxxxxxxx" <racattack@xxxxxxxxxxxxx>
- Date: Thu, 12 Sep 2013 07:43:41 +0100
Hi all,
This is a great solution. Nice work Seth!
There is one potential blocker that will probably be beyond our control and it
hit me during the RAC Attack II session at OUGN. I don't know the correct term
for the feature, but some wireless networks do not allow communication between
clients on the network.
The scenario was that I ran a web server on my laptop with all the files the
attendees needed for the workshop. Despite attempts from Martin B, Björn, Frits
& me we were not able to get around the restriction. I'd never encountered the
situation before, but others told me it's not uncommon on public networks.
In the end I used a combination of USB drives and network cables to distribute
the files to the group. Obviously the OOW network might be different to the one
in Oslo, but forewarned is forearmed.
If the network is restricted in the way described then a cheap GbE network
switch and a handful of cables might be the easiest workaround with the Squid
proxy running on a laptop sharing its wireless connection over a wired
connection to the switch.
Martin - from my mobile
On 12 Sep 2013, at 06:49, Yury Velikanov <velikanovs@xxxxxxxxxxx> wrote:
> WOW! This is super cool news man! Thanks Seth for your efforts! Let's make it
> happening :)
>
> I am guessing we will need to have an internet connection on the server.
> There going to be Conference WiFi in the area. We need to ensure that the
> server we are going to use is hooked to the net (I am not sure if wired net
> connection is going to be available onsite). Therefore we may want to plan to
> use one of the Laptops as a proxy server.
>
>
>
> Best Regards,
>
> Yury Velikanov
> Oracle ACE Director & Team Technical Lead
>
> NOTE If YOU or any of YOUR team's members participate in Oracle OpenWorld
> 2013 conference please please reach me. I would love to MEET UP.
>
> Pythian - Love your data
>
> velikanovs@xxxxxxxxxxx | Twitter: @yvelik | Linkedin
> Tel: +1 613 565 8696 x 1277
> www.pythian.com AboutMe
>
>
> On Thu, Sep 12, 2013 at 3:44 PM, Seth Miller <sethmiller.sm@xxxxxxxxx> wrote:
>> Ninjas,
>>
>> I have great news.
>>
>> After way too many hours, I have finally figured out how to have all of the
>> ISOs locally available without breaking any of Oracle's rules.
>>
>> A few weeks ago I mentioned on this list that I thought we could cache the
>> downloads using Squid. This proved to be more difficult than I originally
>> thought because every download link has URL parameters "params" and
>> "AuthParam" that are either hashed, encrypted or both.
>>
>> For example, here is an example of two download links for the same file in
>> the same session:
>>
>> http://epd-akam-us.oracle.com/adcarurepos/vol/patch36/EPD/V33649-01.zip?FilePath=/adcarurepos/vol/patch36/EPD/V33649-01.zip&File=V33649-01.zip¶ms=NGdZL1NLR0dSMU03Qndab2xHMU04QTphcnU9MTUyNjQ0NTUmZW1haWw9c21pbGxlcjA1QHNqbS5jb20mZmlsZV9pZD01MzAyODMxNSZwYXRjaF9maWxlPVYzMzY0OS0wMS56aXAmdXNlcmlkPWVwZC1zbWlsbGVyMDVAc2ptLmNvbSZzaXplPTYxMzY2MDQ5JmNvbnRleHQ9QUAxNStIQGFhcnV2bXRwMDgub3JhY2xlLmNvbStQQDE1Mzc1NjkxJmRvd25sb2FkX2lkPTg4MTg0MTE1&AuthParam=1378963234_9ebdd186f6cf5b9075cc7fad707654e2
>>
>> http://epd-akam-us.oracle.com/adcarurepos/vol/patch36/EPD/V33649-01.zip?FilePath=/adcarurepos/vol/patch36/EPD/V33649-01.zip&File=V33649-01.zip¶ms=SFdOcVBGRUhsdkZpTE9NRW5WMnlBdzphcnU9MTUyNjQ0NTUmZW1haWw9c21pbGxlcjA1QHNqbS5jb20mZmlsZV9pZD01MzAyODMxNSZwYXRjaF9maWxlPVYzMzY0OS0wMS56aXAmdXNlcmlkPWVwZC1zbWlsbGVyMDVAc2ptLmNvbSZzaXplPTYxMzY2MDQ5JmNvbnRleHQ9QUAxNStIQGFhcnV2bXRwMDYub3JhY2xlLmNvbStQQDE1Mzc1NjkxJmRvd25sb2FkX2lkPTg4MTk2MzYy&AuthParam=1378963241_327e153c4e9c83e8a5b6c65e2b385d2b
>>
>> If you try to go to that address without that entire URL, you will get an
>> error message. So much for standard rewrite rules. But, I was able to find a
>> feature in Squid (version 2.7 only) that allows you to separate the cache
>> signature from everything else, including logging and authorization. In
>> other words, the full URL is passed for everything but only a unique static
>> portion of the URL is used for a caching signature.
>>
>> Because of the fact that each user still needs to login and authenticate
>> against oracle.com and gets the unique URL for their download, we are
>> perfectly legal with Oracle while at the same time the user is able to
>> download locally cached ISOs. The only caveat is that the user must use the
>> server we have on site running Squid as their browser proxy for http and
>> https and must have enough of an internet connection to authenticate with
>> oracle.com.
>>
>> As I'm sure many of you know how to configure the proxy settings in your
>> various browsers, I would appreciate if someone were to volunteer to put
>> together instructions on how to do that for the wiki. I am going to clean up
>> the code needed to make this work and package it up for OOW13.
>>
>> Seth
>
>
> --
>
>
>
>
Other related posts:
