[DEFAULT] # bind_ip = 0.0.0.0 # bind_port = 80 # swift_dir = /etc/swift # workers = 1 # user = swift # cert_file = /etc/swift/proxy.crt # key_file = /etc/swift/proxy.key [pipeline:main] pipeline = healthcheck cache auth proxy-server [app:proxy-server] use = egg:swift#proxy # log_name = proxy-server # log_facility = LOG_LOCAL0 # log_level = INFO # log_headers = False # recheck_account_existence = 60 # recheck_container_existence = 60 # object_chunk_size = 8192 # client_chunk_size = 8192 # node_timeout = 10 # client_timeout = 60 # conn_timeout = 0.5 # How long without an error before a node's error count is reset. This will # also be how long before a node is reenabled after suppression is triggered. # error_suppression_interval = 60 # How many errors can accumulate before a node is temporarily ignored. # error_suppression_limit = 10 # How many ops per second to one container (as a float) # rate_limit = 20000.0 # How many ops per second for account-level operations # account_rate_limit = 200.0 # rate_limit_account_whitelist = acct1,acct2,etc # rate_limit_account_blacklist = acct3,acct4,etc [filter:auth] use = egg:swift#auth # The reseller prefix will verify a token begins with this prefix before even # attempting to validate it with the external authentication server. Also, with # authorization, only Swift storage accounts with this prefix will be # authorized by this middleware. Useful if multiple auth systems are in use for # one Swift cluster. # reseller_prefix = AUTH # ip = 127.0.0.1 # port = 11000 # ssl = false # node_timeout = 10 [filter:healthcheck] use = egg:swift#healthcheck [filter:cache] use = egg:swift#memcache # Default for memcache_servers is below, but you can specify multiple servers # with the format: 10.1.2.3:11211,10.1.2.4:11211 # memcache_servers = 127.0.0.1:11211 [filter:ratelimit] use = egg:swift#ratelimit # clock_accuracy should represent how accurate the proxy servers' system clocks # are with each other. 1000 means that all the proxies' clock are accurate to # each other within 1 millisecond. No ratelimit should be higher than the # clock accuracy. clock_accuracy = 1000 max_sleep_time_seconds = 60 account_ratelimit = 200 # these are comma separated lists of account names account_whitelist = a,b # account_blacklist = # with container_limit_x = r # for containers of size x limit requests per second to r. The container # rate will be linearly interpolated from the values given. With the values # below, a container of size 5 will get a rate of 75. container_limit_0 = 100 container_limit_10 = 50 container_limit_50 = 20