A computer with the cache role assigned can cache the following items for different time periods
based on their type:
- Signature files: until they are no longer valid.
- Installation packages: until they are no longer valid.
- Update patches for Panda Patch Management: 30 days.
The capacity of a cache node is determined by the number of simultaneous connections it can accommodate in high load conditions and by the type of traffic managed (signature file downloads, installer downloads, etc.). Approximately, a computer with the cache role assigned can serve around 1,000 computers simultaneously.
Configuring a computer as a cache
- Click the Settings menu at the top of the console. Then, click Network services from the menu on the left and select the Cache tab.
- Click Add cache computer.
- Use the search tool at the top of the screen to quickly find those computers you want to designate as
- Select one
ofmore computers from the list and click OK.
From then on, the selected computer will have the cache role and will start downloading all necessary files, keeping its repository automatically synchronized. All other computers on the same subnet will contact the cache computer for updates.
- Click the Settings menu at the top of the console. Then, click Network settings from the side menu and click the Cache tab.
- Click the trash icon of the computer that you want to stop acting as a cache.
Configuring downloads via cache computersThere are two ways to use computers with the cache role:
- Automatic mode: In this mode, a computer that starts a download uses cache computers
found on the network that meet the requirements specified in section Requirements for using
a cache computer. If multiple cache computers are found, the solution automatically
balances the downloads so that a single cache computer is not overloaded.
- Manual mode: In this mode, you select the cache computers that download data from the
Panda Security cloud. You order these computers in a list in the Network Settings. Manually
selected cache nodes differ from automatically selected ones in the following aspects:
- When a computer has multiple cache nodes assigned, it does not automatically share downloads among them.
- If the first cache computer in the list is not available, the computer tries the next computer until it finds one that works. If it cannot find any available computers, the solution will try to access the Internet directly.
- The computer with the cache role assigned and the computer that downloads items from it must be on the same subnet. If a cache computer has multiple network cards, it is able to act as a repository on each network segment to which it is connected.
NOTE: We recommend that you designate a computer with the cache role on each network segment on the corporate network.
- All other computers automatically discover the presence of the cache and redirect their update requests to it.
- In addition to being on the same subnet, the cache computer must have a protection license assigned.
- The firewall must be configured to allow incoming and outgoing Universal Plug and Play (UPnP) and Simple Service Discovery Protocol (SSDP) traffic on:
- UDP port 21226
- TCP port 18226
- The computer with the cache role assigned and the computer that downloads items from do not need to be on the same subnet.
- The cache computer must have a protection license assigned.
- The firewall must be configured to allow incoming and outgoing traffic on:
- UDP and TCP port 21226
- TCP port 18226.
As soon as you designate a computer as cache, it will broadcast its status to the network segments to which its interfaces connect. From then on, all workstations and servers set to automatically detect cache nodes will receive that notification and will connect to the cache computer. Should there be more than one designated cache node on a network segment, all computers on the subnet will connect to the most appropriate node based on the amount of free resources it has. Additionally, from time to time, all computers on the network set to automatically detect cache nodes will check to see if there are new nodes with the cache role.
Configuring assignment of cache nodes
- Click the Settings menu at the top of the console. Then, click Network settings from the side menu and select one of the existing settings profiles.
- Go to the Cache section and select one of the following two options:
- Automatically use the cache computers seen on the network: the computers that receive these settings will automatically look for cache nodes on their network segment.
- Use the following cache computers (in order of preference): click the icon to add computers with the cache role assigned and set up a list of cache nodes. The computers that receive these settings will connect to the cache nodes specified in the list in order to download files.