patch purpose//Re:[patch]fork: subprocess quit when parent died

2016-10-12 Thread 李林哲
Hi, ZhiDao.  If master dies often as you said, I believe community shell treat it as a bug and fix it ASAP.  Personally I won't meet it frequently. Only at when system OOM or user misoperation. Thanks.  ___ nginx-devel mailing list nginx-devel@nginx.org

Re: [PATCH] Mail: Support SASL EXTERNAL (RFC 4422)

2016-10-12 Thread Maxim Dounin
Hello! On Sat, Oct 08, 2016 at 06:31:02PM +1100, Rob N ★ wrote: > # HG changeset patch > # User Rob N ★ > # Date 1475910300 -39600 > # Sat Oct 08 18:05:00 2016 +1100 > # Node ID 205f2148260460379f9b0889cdb8015994028c73 > # Parent 1606a817c1d48ed351f1dd7d9cb9c996e2c77b9a

patch purpose//Re:[patch]fork: subprocess quit when parent died

2016-10-12 Thread 李林哲
Hi, Maxim. When master OOM, system daemon program like supervisord will trying to pull it up. but it can’t be done because of worker binds the port. And i believe the master process shell handler all the resources. Slaves shell not exist on its own.  

Re: newbie question

2016-10-12 Thread Alex Samad
Hi Thanks I ended up with this but still with issues map $cookie_SSOID $ssoid_cookie { default ""; ~SSOID=(?P.+) $ssoid; } location /imaadmin/ { proxy_cache off; proxy_pass http://IMAAdmin; auth_request /sso/validate; # must use %20 for url encoding set $sso_group

Re: path purpose//Re:[patch]fork: subprocess quit when parent died

2016-10-12 Thread 洪志道
Hello! It's a common case that all the worker processes are still live while the master process isn't exist. So I think nginx should continue to work as Maxim said. Btw, we noticed that nginx.pid is deleted when we do the upgrade command. kill -USR2 nginx.pid; sleep(2); kill -HUP nginx.oldpid;

Re: path purpose//Re:[patch]fork: subprocess quit when parent died

2016-10-12 Thread Maxim Dounin
Hello! On Thu, Oct 13, 2016 at 08:38:56AM +0800, 李林哲 wrote: > This patch is solving the problem that the sub process (worker > process) will not quit when master process quits on SIGKILL. > which will be done by OS (especially Linux) when system meet > OOM. Why do you think that worker

[patch]worker process: make sure to quit when master quits

2016-10-12 Thread 李林哲
# HG changeset patch # User lilinzhe # Date 1476321680 -28800 # Node ID d13daa14b1df9e04d7bf339c1669740edf19de0e # Parent 7cdf69d012f02a80c94d930b29c71847e203e4d6 worker process: make sure to quit when master quits when theres prctl(PR_SET_PDEATHSIG). make worker to use it. on

path purpose//Re:[patch]fork: subprocess quit when parent died

2016-10-12 Thread 李林哲
Thanks for reply. This patch is solving the problem that the sub process (worker process) will not quit when master process quits on SIGKILL. which will be done by OS (especially Linux) when system meet OOM. I've found a bug, and will send a new patch for comment.

Re: When to use --with-compat configure option?

2016-10-12 Thread Thomas Deutschmann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2016-10-12 16:33, Maxim Dounin wrote: > [...] > > From package maintaining point of view it should be a good idea to > add the option to nginx builds. This will allow others to easily > compile dynamic modules to be loaded into nginx shipped

Re: Clientbodyinfileonly - POST request is discarded

2016-10-12 Thread Francis Daly
On Wed, Oct 12, 2016 at 03:34:45PM -0400, yurai wrote: Hi there, > >Are you reporting that the content of the client-file upload.txt is not > >saved on the nginx server that is localhost, in a numbered file below > >your client_body_temp_path? > > Yes. Exactly this. My /tmp/nginx-client-body

Re: URL is not pointing to https on iframe

2016-10-12 Thread itpp2012
geopcgeo Wrote: --- > fine on https. But please let me know whats the issue? Is it on Iframe > or > on Nginx. Can anyone please help us? This needs to be fixed in the iframe (or whatever you use to generate this iframe). Posted at Nginx Forum:

Re: Clientbodyinfileonly - POST request is discarded

2016-10-12 Thread yurai
Hi, >Are you reporting that the content of the client-file upload.txt is not >saved on the nginx server that is localhost, in a numbered file below >your client_body_temp_path? Yes. Exactly this. My /tmp/nginx-client-body directory is empty. >There is more than one server involved. Please be

Re: Use ngx_stream_ssl_preread_module but also log client ip in access.log for https requests

2016-10-12 Thread Thomas Glanzmann
Hello Roman, * Roman Arutyunyan [2016-10-12 20:07]: > On Wed, Oct 12, 2016 at 07:50:06PM +0200, Thomas Glanzmann wrote: > > I would like to use ngx_stream_ssl_preread_module to multiplex a web > > server, openvpn, and squid to one ip address and port. However I would > > also

Re: Use ngx_stream_ssl_preread_module but also log client ip in access.log for https requests

2016-10-12 Thread Roman Arutyunyan
Hi Thomas, On Wed, Oct 12, 2016 at 07:50:06PM +0200, Thomas Glanzmann wrote: > Hello, > I would like to use ngx_stream_ssl_preread_module to multiplex a web > server, openvpn, and squid to one ip address and port. However I would > also like to keep the real client ip address in my http logs, is

Use ngx_stream_ssl_preread_module but also log client ip in access.log for https requests

2016-10-12 Thread Thomas Glanzmann
Hello, I would like to use ngx_stream_ssl_preread_module to multiplex a web server, openvpn, and squid to one ip address and port. However I would also like to keep the real client ip address in my http logs, is that possible, if so how? Cheers, Thomas

[njs] A fix in Array.slice() function.

2016-10-12 Thread Igor Sysoev
details: http://hg.nginx.org/njs/rev/8046b999aaaf branches: changeset: 198:8046b999aaaf user: Igor Sysoev date: Wed Oct 12 19:08:57 2016 +0300 description: A fix in Array.slice() function. diffstat: njs/njs_array.c | 34 +-

Re: Clientbodyinfileonly - POST request is discarded

2016-10-12 Thread Francis Daly
On Wed, Oct 12, 2016 at 06:28:47AM -0400, yurai wrote: Hi there, > >"The file should be transferred to the nginx server." > > This is the whole point. > With current configuration when I type curl --data-binary '@upload.txt' > http://localhost/upload file is NOT transffered from client to

question about how to use the ngx_radix_tree

2016-10-12 Thread Francois BERENGER
Dear list, I am interested in using this data structure. Would it be possible to have a few usage examples of it? I looked in the nginx code via github but found only few usages and not very informative about how to use it properly. I am interested in those functions: ngx_radix_tree_t

Log response location headers when Nginx is used as reverse proxy

2016-10-12 Thread AKSHAYAA MOHAN
Hi, I have a usecase where I want to log the response location headers returned by the upstream servers. Is there a way I can do this without installing any third party tools? Regards ___ nginx mailing list nginx@nginx.org

Re: When to use --with-compat configure option?

2016-10-12 Thread Maxim Dounin
Hello! On Wed, Oct 12, 2016 at 03:58:25PM +0200, Thomas Deutschmann wrote: > nginx-1.11.5 introduced a new configure option "--with-compat" however > I don't find any documentation regarding this option. > > Could you please give us some insight when you expect that this option > should be used

Re: [patch]fork: subprocess quit when parent died

2016-10-12 Thread Maxim Dounin
Hello! On Wed, Oct 12, 2016 at 08:44:25PM +0800, 李林哲 wrote: > # HG changeset patch > # User lilinzhe > # Date 1476275566 -28800 > # Node ID 07d294d39cc6ec07769c1a72d5ee9b7da27b9ce1 > # Parent 7cdf69d012f02a80c94d930b29c71847e203e4d6 > fork: subprocess quit when parent died > >

Re: newbie question

2016-10-12 Thread Maxim Dounin
Hello! On Wed, Oct 12, 2016 at 12:43:12PM +1100, Alex Samad wrote: > Hi > > I am trying to create a dynamic auth address > > > # grab ssoid > map $cookie_SSOID $ssoid_cookie { > default ""; > ~SSOID=(?P.+) $ssoid; > } > > >location /imaadmin/ { > proxy_cache off; >

When to use --with-compat configure option?

2016-10-12 Thread Thomas Deutschmann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, nginx-1.11.5 introduced a new configure option "--with-compat" however I don't find any documentation regarding this option. Could you please give us some insight when you expect that this option should be used (especially from distribution

Re: [nginx-announce] nginx-1.11.5

2016-10-12 Thread Maxim Dounin
Hello! On Wed, Oct 12, 2016 at 03:03:29PM +0530, Anoop Alias wrote: > *) Feature: the --with-compat configure option. > > What does this do actually? This option enables dynamic modules compatibility, that is, it ensures that appropriate fields in structures are present (or

Re: slice module and upstream sent more data than specified in "Content-Length"

2016-10-12 Thread Bjørnar Ness
2016-10-12 14:09 GMT+02:00 Roman Arutyunyan : > Do you have this issue without slice? No, if I send a the same request that slice module would send to upstream through nginx without slice activated, I do not see the same errors > Anyway, it would be nice to see debug log Working

Re: freeing buffers after sending them

2016-10-12 Thread Valentin V. Bartenev
On Wednesday 12 October 2016 15:05:48 George . wrote: > Hi Valentin, > > Than you for your fast and correct reply. > > Yes, you are right, it was oversight that r->out->buf if taken from > pipe->pool, which is actually r->pool. > What if we pfree this bufs from r->pool? Who holds the reference

[patch]fork: subprocess quit when parent died

2016-10-12 Thread 李林哲
# HG changeset patch # User lilinzhe # Date 1476275566 -28800 # Node ID 07d294d39cc6ec07769c1a72d5ee9b7da27b9ce1 # Parent 7cdf69d012f02a80c94d930b29c71847e203e4d6 fork: subprocess quit when parent died diff -r 7cdf69d012f0 -r 07d294d39cc6 auto/os/linux --- a/auto/os/linux Tue Oct

Re: slice module and upstream sent more data than specified in "Content-Length"

2016-10-12 Thread Roman Arutyunyan
Hi, On Tue, Oct 11, 2016 at 08:26:29PM +0200, Bjørnar Ness wrote: > Hello nginx-devel > > I am seeing lots of 'upstream sent more data than specified in > "Content-Length"' errors > when using nginx with proxy_cache and slice module. The relevant > nginx.conf settings are: > > > > slice 1m; >

Re: freeing buffers after sending them

2016-10-12 Thread George .
Hi Valentin, Than you for your fast and correct reply. Yes, you are right, it was oversight that r->out->buf if taken from pipe->pool, which is actually r->pool. What if we pfree this bufs from r->pool? Who holds the reference after sending these buffers (except may be in NGX_THREADS version)?

RE: slice module and upstream sent more data than specified in "Content-Length"

2016-10-12 Thread MAGNIEN, Thierry
Hi, Is your origin server something like Apache + mod_fastcgi + mod_deflate ? I did not see this specifically with Nginx but you may hit the same issue described here: https://ma.ttias.be/apaches-mod_fastcgi-mod_deflate-troubles/ Best regards, Thierry -Message d'origine- De :

Re: freeing buffers after sending them

2016-10-12 Thread Valentin V. Bartenev
On Wednesday 12 October 2016 13:22:08 George . wrote: > Hi all, > > What do you think about freeing buffers after being sent by send_chain? > Because we have a special case were we use 4 megabyte buffer instead of > nginx default 8 * 8 K and we found that these buffers are actually freed > after

Re: URL is not pointing to https on iframe

2016-10-12 Thread netcana
wish you all the best for your project but sorry i have no clue about your question. Thanks. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,270042,270198#msg-270198 ___ nginx mailing list nginx@nginx.org

Re: Clientbodyinfileonly - POST request is discarded

2016-10-12 Thread yurai
Hello, >"The file should be transferred to the nginx server." This is the whole point. With current configuration when I type curl --data-binary '@upload.txt' http://localhost/upload file is NOT transffered from client to server at all - "proxy_pass" is performed and I only get HTTP response

freeing buffers after sending them

2016-10-12 Thread George .
Hi all, What do you think about freeing buffers after being sent by send_chain? Because we have a special case were we use 4 megabyte buffer instead of nginx default 8 * 8 K and we found that these buffers are actually freed after request had been finished, so if there hundreds of slow downstream

Fwd: CAP_NET_ADMIN

2016-10-12 Thread Mathew Heard
I have also tried: InheritableCapabilities=CAP_NET_BIND_SERVICE CAP_NET_ADMIN CAP_SETGID CAP_SETUID CAP_SYS_RESOURCE and various other options without avail. -- Forwarded message -- From: Mathew Heard Date: Wed, Oct 12, 2016 at 9:01 PM Subject:

CAP_NET_ADMIN

2016-10-12 Thread Mathew Heard
Hi All, I am stuck trying to get my nginx service which is launched via SystemD to give CAP_NET_ADMIN to its workers (required for IP_TRANSPARENT). I have tried /etc/security/capability.conf & setcap. SystemD has the permission whitelisted: CapabilityBoundingSet=CAP_NET_BIND_SERVICE

Re: [nginx-announce] nginx-1.11.5

2016-10-12 Thread Anoop Alias
*) Feature: the --with-compat configure option. What does this do actually? On Tue, Oct 11, 2016 at 10:53 PM, Kevin Worthington wrote: > Hello Nginx users, > > Now available: Nginx 1.11.5 for Windows https://kevinworthington.com/ > nginxwin1115 (32-bit and 64-bit