Re: Build Issue with NGINX for Windows

2022-12-08 Thread itpp2012
https://stackoverflow.com/questions/54695248/building-openssl-for-windows-x64 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,295998,296006#msg-296006 ___ nginx mailing list -- nginx@nginx.org To unsubscribe send an email to

[News] Igor Sysoev leaving nginx

2022-01-26 Thread itpp2012
@Igor Sysoev, thanks for all your work and a wonderful product, we all hope you enjoy whatever you do next. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,293469,293469#msg-293469 ___ nginx mailing list -- nginx@nginx.org To unsubscribe

Re: upgrading binary failed - execve - too long argument list

2021-05-10 Thread itpp2012
You've been busy with this for 2 weeks... It's very easy, 1. kill all nginx processes 2. replace binary 3. start nginx 4. post some vague notice about being offline for 10 seconds and apologize 5. move on with life. Posted at Nginx Forum:

Re: Dashboard

2020-12-13 Thread itpp2012
This may work for you; https://github.com/vozlt/nginx-module-vts Posted at Nginx Forum: https://forum.nginx.org/read.php?2,290190,290203#msg-290203 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: v1.19.5 OOPS: "Main process exited, code=dumped, status=11/SEGV" ?

2020-12-05 Thread itpp2012
Known perl issue, google: "segfault at 10 error 4 in libperl.so" Posted at Nginx Forum: https://forum.nginx.org/read.php?2,290159,290160#msg-290160 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Adding nginx_vts_module to existing nginx on Windows 10 platform!

2020-10-25 Thread itpp2012
Please note that Nginx 1.11.11.1 Lion (nearly 4 years old) is not a nginx product, either compile your own (and spend time to fix bugs) or upgrade to nginx 1.19.3.1 Unicorn. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,289793,289796#msg-289796

Re: nginx last version on windows

2020-09-03 Thread itpp2012
There's no point in trying, that module's code is full of errors and too many hacks. Your better of with Lua which is embedded in our version, see https://www.gakhov.com/articles/implementing-api-based-fileserver-with-nginx-and-lua.html Posted at Nginx Forum:

Re: nginx last version on windows

2020-09-03 Thread itpp2012
I will have a look to see if this can be included in our next version. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,289290,289295#msg-289295 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: HLS stream issue

2020-06-17 Thread itpp2012
Drop "Cannot load M3U8: Crossdomain access denied" in Google, plenty of solutions. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288371,288374#msg-288374 ___ nginx mailing list nginx@nginx.org

Re: Load Balancing TCP directive mail {}

2020-06-07 Thread itpp2012
andersonsserra Wrote: --- > nginx: [emerg] "stream" directive is not allowed here in /etc/nginx/email/balanceador.conf:1 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288282,288291#msg-288291

Re: Switch between upstream server

2020-05-28 Thread itpp2012
Sam Henaghan Wrote: --- > Please stop emailing me and delete anything or any information you > have about me or even accounts please this wasn’t me whatever has been > made so please delete You have joined a public mailing list with the email

Re: `if` or `include` for mode-specific `server` directives?

2020-05-16 Thread itpp2012
https://blog.devcloud.hosting/configuring-nginx-for-quickly-switching-to-maintenance-mode-e4136cf497f3 https://forum.openresty.us/d/4770-c84503afcecd42ad08f3ec457c0948b7 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288057,288058#msg-288058

Re: Print current running connections in nginx

2020-04-16 Thread itpp2012
Best sample code: https://github.com/vozlt/nginx-module-vts Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287673,287680#msg-287680 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-04-02 Thread itpp2012
Thomas Stephen Lee Wrote: --- > Hi, > > does > > OpenSSL 1.1.1f. > > fix the issue ? Yes. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287377,287532#msg-287532 ___ nginx mailing list

Re: NGINX on windows

2020-03-27 Thread itpp2012
Look at this version, per-compiled, high performance http://nginx-win.ecsds.eu/ Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287488,287489#msg-287489 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: SSL_read() failed on Nginx built with new OpenSSL 1.1.1e

2020-03-26 Thread itpp2012
See https://forum.nginx.org/read.php?2,287377 Revert back to 1.1.1d Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287464,287466#msg-287466 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-23 Thread itpp2012
It doesn't and there are a few more for which this doesn't work either, it needs a lot more work and testing. I had a new concept patch but today decided to roll back to 1.1.1d and back port 1.1.1e (de) patches only. Only NGX_ERROR mitigates a truncation attack, not NGX_DONE (which is open for

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-22 Thread itpp2012
How about this as this catches all 3 while conditions: +++ src/event/ngx_event_openssl.c @@ -2318, c->ssl->no_wait_shutdown = 1; c->ssl->no_send_shutdown = 1; if (sslerr == SSL_ERROR_ZERO_RETURN || ERR_peek_error() == 0) { ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0,

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-21 Thread itpp2012
Other not as often as the primary but all related to 1.1.1e: All [crit]: SSL_read() failed (SSL: error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading) while processing HTTP/2 connection SSL_read() failed (SSL: error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading)

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-20 Thread itpp2012
Maxim Dounin Wrote: --- > On Fri, Mar 20, 2020 at 10:41:32AM +0300, Sergey Kandaurov wrote: > > > On 18 Mar 2020, at 14:17, itpp2012 wrote: > > > Question: does this need to resolved in openssl or nginx ? > > So

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-18 Thread itpp2012
After using 1.1.1e, see also the commit where an explicit entry has been added. nginx just reports back what openssl passes, if this was unexpected (none critical) nginx needs to be patched, if not this openssl workaround (10880) needs to be changed. Posted at Nginx Forum:

openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-18 Thread itpp2012
Logging getting swamped with: [crit] 1808#2740: *20747 SSL_read() failed (SSL: error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading) while keepalive Related to: https://github.com/openssl/openssl/issues/10880 and this commit:

Proxy stream pop3 110 to secure 995

2019-08-15 Thread itpp2012
Considering this example https://docs.nginx.com/nginx/admin-guide/security-controls/securing-tcp-traffic-upstream/ How would you stream plain unsecured pop3 traffic to a secure endpoint elsewhere ? (without the backend certificates) ea. stream { listen 110; proxy_ssl on; proxy_pass site.com:995;

Re: Proxy Caching ignore path

2019-08-06 Thread itpp2012
Above not below. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,285128,285135#msg-285135 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Proxy Caching ignore path

2019-08-06 Thread itpp2012
The first location match is the active one, add another location before this one to change its caching behavior. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,285128,285130#msg-285130 ___ nginx mailing list nginx@nginx.org

Re: SMTP proxy with "STARTTLS only" accepts unencrypted mail

2019-06-05 Thread itpp2012
You might be better of with nginx stream to offload (ssl/tls), all of it is then encrypted. stream { upstream backendsmtp { server 192.168.3.32:25; } server { listen 1234 ssl; ssl_certificate /nginx/crts/global1.cert; ssl_certificate_key /nginx/crts/global1.key; include

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

2019-01-10 Thread itpp2012
Try this; worker_processes 2; worker_rlimit_nofile 32767; thread_pool iopool threads=16 max_queue=32767; Posted at Nginx Forum: https://forum.nginx.org/read.php?2,282613,282640#msg-282640 ___ nginx mailing list nginx@nginx.org

Re: sni hostname and request Host header mismatch

2018-10-10 Thread itpp2012
Via map and the default ? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,281564,281565#msg-281565 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Avoiding Nginx restart when rsyncing cache across machines

2018-09-14 Thread itpp2012
It is fairly simple to hack nginx and use Lua to reload the cache timed or via a request. The code is already there, its just a matter of calling it again. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,281179,281225#msg-281225 ___ nginx

Re: redirect based on file content

2018-07-16 Thread itpp2012
This can be done with Lua but each disk access is a blocking call to nginx, your design should include caching of such calls (access disk once every 100 calls or after 60 seconds). Posted at Nginx Forum: https://forum.nginx.org/read.php?2,280529,280533#msg-280533

Re: nginx on Windows

2018-07-10 Thread itpp2012
Have a look here http://nginx-win.ecsds.eu/ Posted at Nginx Forum: https://forum.nginx.org/read.php?2,280470,280474#msg-280474 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: failover to the next upstream server if one of the servers is slow

2018-06-23 Thread itpp2012
Can't tell atm. if a timeout forces a node to become offline but 60s is still along time to wait (and decide) without actually knowing if a node is overloaded (it might be just busy which does not always mean overloaded). There are tools for fi. edge routers which polls a status page to decide to

Re: failover to the next upstream server if one of the servers is slow

2018-06-22 Thread itpp2012
You may have to resort to Lua (openresty) and periodically perform via a sub request a query which should indicate how fast an upstream is and decide weather to take it offline (which also can be done with Lua). Posted at Nginx Forum: https://forum.nginx.org/read.php?2,280259,280260#msg-280260

Re: fsync()-in webdav PUT

2018-02-28 Thread itpp2012
Not waiting for fsync to complete makes calling fsync pointless, waiting for fsync is blocking, thread based or otherwise. The only midway solution is to implement fsync as a cgi, ea. a none-blocking (background)fc call in combination with an OS resource lock. Posted at Nginx Forum:

Re: Nginx error log parser

2018-01-10 Thread itpp2012
Aziz Rozyev Wrote: --- > Hi Mohit, > > check the second reply. I’m not sure that there is a conventional > pretty printing > tools for nginx error log. Look at awstats. Posted at Nginx Forum:

Re: Migrating from Varnish

2017-11-23 Thread itpp2012
Andrei Wrote: --- > Thanks for the tip. Have you ran into any issues as Maxim mentioned? > Not yet. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,277462,277487#msg-277487 ___ nginx

Re: Migrating from Varnish

2017-11-23 Thread itpp2012
Andrei Wrote: --- > I'm aware of the paid version, but I don't have a budget for it yet, > and > quite frankly this should be a core feature for any caching service. > Are > there no viable options for the community release? It's a rather

Re: location settings for Django Uwsgi Nginx Configuration for production

2017-09-15 Thread itpp2012
A 404 is logged unless logging has been disabled, ask the hosting company where logs are, check nginx.conf what/where is logged. . Posted at Nginx Forum: https://forum.nginx.org/read.php?2,276402,276407#msg-276407 ___ nginx mailing list

Re: location settings for Django Uwsgi Nginx Configuration for production

2017-09-15 Thread itpp2012
Have a look in the nginx error logfile where it expects the file to be. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,276402,276403#msg-276403 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Building Nginx from source for Windows

2017-08-02 Thread itpp2012
Use this one, portable, tried, tested, production ready http://nginx-win.ecsds.eu/ 2: yes 3: yes already included. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275804,275808#msg-275808 ___ nginx mailing list nginx@nginx.org

Re: A Nginx Upstream DDoS Blackhole how does it work ?

2017-07-27 Thread itpp2012
See the 'upstream_EBLB_with_IWCP.txt' document and the pdf documentation, the primary control (ie. signaling) should be (initiated) triggered by your edge controllers or router. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275671,275688#msg-275688

Re: Nginx allowed characters inside full URL / URI and ARGS

2017-07-15 Thread itpp2012
Use my simple map/waf example (nginx-simple-WAF.conf) and some cleaver regex's. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275500,275511#msg-275511 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Same cached objects, but different body_bytes_sent

2017-06-02 Thread itpp2012
I can imagine a client only asking for the first 2xx bytes (where a 206 reply is not required) to compare against its local cache. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,274589,274622#msg-274622 ___ nginx mailing list

Re: Same cached objects, but different body_bytes_sent

2017-06-02 Thread itpp2012
Does Curl do the same thing from 2 different locations? looks like typical client behavior with partial matching (range request). Posted at Nginx Forum: https://forum.nginx.org/read.php?2,274589,274592#msg-274592 ___ nginx mailing list nginx@nginx.org

Re: Can you migrate a web app available via '/' to a proxied sub-URI without modifying the web app?

2017-05-09 Thread itpp2012
Francis Daly Wrote: --- > nginx gets a request for /static/styles.css. > > I'm not aware of a rewrite which will let you decide which of > web-app-1 > and web-app-2 is the correct one to proxy_pass this request to this > time. Both web apps use

Re: Can you migrate a web app available via '/' to a proxied sub-URI without modifying the web app?

2017-05-09 Thread itpp2012
Francis Daly Wrote: --- > It cannot work in stock nginx just using nginx.conf normal directives. You can with (many) proper rewrites but this does require a very close eye on the logfiles until you have rewritten all the 40x's, and for the sake

Re: Can you migrate a web app available via '/' to a proxied sub-URI without modifying the web app?

2017-05-09 Thread itpp2012
location /flask-demo/ { root /var/www/passenger-python-flask-demo; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Host $host; rewrite/flask-demo/([^/]+) /$1

Re: unable to log upstream_bytes_sent

2017-05-01 Thread itpp2012
Its part of stream {} http://mailman.nginx.org/pipermail/nginx-devel/2016-September/008752.html Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273859,274018#msg-274018 ___ nginx mailing list nginx@nginx.org

Re: How to Edit/Delete own posted reply or topic

2017-04-12 Thread itpp2012
You can if you use the web portal at https://forum.nginx.org/ Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273547,273556#msg-273556 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Tomcat EOFException when nginx is Reverse Proxy for WebSockets

2017-03-21 Thread itpp2012
Looks like this issue: http://stackoverflow.com/questions/30619703/java-io-eofexception-when-downloading-files-from-remote-server-to-android-phone Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273064,273066#msg-273066 ___ nginx mailing

Re: MySQL Access w/ Nginx

2017-03-02 Thread itpp2012
With Lua you will find many examples how to interact (non-blocking) with mysql, Lua also contains a load balancer which can be adapted to loadbalance sql instances. See also https://www.google.nl/#q=nginx+lua+mysql Posted at Nginx Forum:

Re: need help reverse-proxy config

2017-01-09 Thread itpp2012
stream { limit_conn_zone $binary_remote_addr zone=straddr:10m; upstream backendsmtp { server smtp1.local:25; server smtp2.local:25; } server { listen 2025 ssl; error_log /logging/stream_local_smtp.log debug; ssl_certificate /nginx/crts/sdom.cert;

Re: AW: AW: AW: AW: SNI and certs.

2016-11-30 Thread itpp2012
Lukas Tribus Wrote: --- > As I said, the best way would be to drop the TLS handshake, but nginx > doesn't support this afaik. If you mind the overhead, ssl_preread_server_name could be used for this. Posted at Nginx Forum:

Re: Help with securing "route" cookie

2016-11-22 Thread itpp2012
Some workarounds: http://serverfault.com/questions/496749/in-nginx-reverse-proxy-how-to-set-the-secure-flag-for-cookies https://maximilian-boehm.com/hp2134/NGINX-as-Proxy-Rewrite-Set-Cookie-to-Secure-and-HttpOnly.htm Posted at Nginx Forum:

Re: Help with securing "route" cookie

2016-11-22 Thread itpp2012
The 'secure' option is not working? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,271052,271119#msg-271119 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Rewrite Vary header before stored in proxy_cache

2016-10-24 Thread itpp2012
Lucas Rolff Wrote: --- > > When using purge as availalbe in nginx-plus > (http://nginx.org/r/proxy_cache_purge), it takes care of removing all > cached variants, much like it does for wildcard purge requests. > Ahh cool! Nice one - maybe we'll be

Re: Hacker log

2016-10-22 Thread itpp2012
The idea is nice but pointless, if you maintain this list over 6 months you most likely will end up blocking just about everyone. Stick to common sense with your config, lock down nginx and the backends, define proper flood and overflow settings for nginx to deal with, anything beyond the scope

Re: nginx 1.11.5 'duplicate' map_hash_bucket_size error when geoip_country block used?

2016-10-22 Thread itpp2012
Syntax: map_hash_bucket_size size; Default:map_hash_bucket_size 32|64|128; Context:http The err message is valid but may be misleading due to the places you used, a dup msg does not indicate the valid context area. Posted at Nginx Forum:

Re: Using Nginx as proxy content are "striped"

2016-10-20 Thread itpp2012
proxy_pass http://192.168.1.100:38080; (remove the trailing slash) Posted at Nginx Forum: https://forum.nginx.org/read.php?2,270422,270423#msg-270423 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: URL is not pointing to https on iframe

2016-10-12 Thread itpp2012
geopcgeo Wrote: --- > fine on https. But please let me know whats the issue? Is it on Iframe > or > on Nginx. Can anyone please help us? This needs to be fixed in the iframe (or whatever you use to generate this iframe). Posted at Nginx Forum:

Re: Nginx Proxy KeepAlive and FastCGI KeepAlive

2016-09-30 Thread itpp2012
A backend is a pool (upstream) for which work is distributed to, the pool size has no bearing to keepalive. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269997,27#msg-27 ___ nginx mailing list nginx@nginx.org

Re: Inquiry regarding support for OpenSSL 1.0.2i

2016-09-28 Thread itpp2012
Try this one http://nginx-win.ecsds.eu/ with 1.0.2j Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269889,269898#msg-269898 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Recommended limit_req and limit_conn for location ~ \.php$ {}

2016-09-27 Thread itpp2012
General rule of thumb is set it as low as possible, as soon as 503's are getting your users upset or resources are getting blocked, then double the values, keep an eye on the logs, double it one more time when required, done. Posted at Nginx Forum:

Re: access_log format $remote_user anonymous question

2016-09-21 Thread itpp2012
Its just an attempt to gain access, ignore it, we get 1000's a day. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269734,269741#msg-269741 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: access_log format $remote_user anonymous question

2016-09-21 Thread itpp2012
http://nginx.org/en/docs/http/ngx_http_core_module.html#variables $remote_user user name supplied with the Basic authentication Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269734,269738#msg-269738 ___ nginx mailing list

Re: typical value(s) for stream/limit_conn

2016-09-20 Thread itpp2012
Francis Daly Wrote: --- > On Tue, Sep 20, 2016 at 09:27:40PM +0100, Francis Daly wrote: > > > "stream" is "arbitrary tcp connections". There is no "typical", I > think. > > "stream" is also "arbitrary udp datagrams" too, of course. Which >

Re: typical value(s) for stream/limit_conn

2016-09-20 Thread itpp2012
5 wasn't really enough, 12 seems a better value. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269663,269701#msg-269701 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

typical value(s) for stream/limit_conn

2016-09-19 Thread itpp2012
Plenty of guidelines for http limit_conn but hardly any for stream, what would be a typical value in which cases? Has anyone done some log/connection analysis to determine what would be typical use? Atm. I'd say '5', but this is more a feeling then science. Posted at Nginx Forum:

Re: Keeping your Nginx limit_* Anti-DDoS behind CloudFlare's servers

2016-09-14 Thread itpp2012
A simple test from here: http://hg.nginx.org/nginx-tests/rev/4e6d21192037 passes and works as it should even with the basic version, also have a look at: http://serverfault.com/questions/409155/x-real-ip-header-empty-with-nginx-behind-a-load-balancer Posted at Nginx Forum:

Re: Keeping your Nginx limit_* Anti-DDoS behind CloudFlare's servers

2016-09-13 Thread itpp2012
c0nw0nk Wrote: --- > I take it the module is a part of the Nginx.exe build and not > Nginx_basic.exe If its part of stock its also part of the basic version. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269502,269553#msg-269553

Re: Keeping your Nginx limit_* Anti-DDoS behind CloudFlare's servers

2016-09-13 Thread itpp2012
c0nw0nk Wrote: > Yes I can't test it at the moment unfortunately with the realip module > due to the fact i use "itpp2012" Nginx builds > http://nginx-win.ecsds.eu/ They do not come compiled with the realip > module (for now ?) Of course this module is compiled in. Posted

Re: add_header Set-Cookie The difference between Max-Age and Expires

2016-09-09 Thread itpp2012
Good, keep in mind that "ngx.time()" can be expensive, it would be advisable to use a global var to store time and update this var once every hour. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269438,269444#msg-269444 ___ nginx mailing

Re: add_header Set-Cookie The difference between Max-Age and Expires

2016-09-09 Thread itpp2012
In Lua it's as easy as: https://github.com/openresty/lua-nginx-module/issues/19#issuecomment-19966018 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269438,269439#msg-269439 ___ nginx mailing list nginx@nginx.org

Re: pcre.org down?

2016-09-08 Thread itpp2012
Still down and so are many mirrors (broken or empty updates) Found one still working at https://fourdots.com/mirror/exim/exim-ftp/pcre/ Or get a copy here http://nginx-win.ecsds.eu/download/pcre-8.40-r1664-10-8-2016-svn-src.zip Both cross-platform sources. Posted at Nginx Forum:

Re: curl -I says X-Cache-Status: MISS

2016-09-06 Thread itpp2012
Brent Clark Wrote: --- > Vary: User-Agent See https://forum.nginx.org/read.php?2,262943,262943#msg-262943 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269389,269391#msg-269391 ___ nginx

pcre.org down?

2016-09-02 Thread itpp2012
Anyone any idea what happened to www.pcre.org ? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269359,269359#msg-269359 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: proxy_cache:Why Receive >Transmit?

2016-08-14 Thread itpp2012
When compressing (nginx) an already compressed stream (backend) that stream usually gets bigger. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268938,268941#msg-268941 ___ nginx mailing list nginx@nginx.org

Re: 413 Request Entity Too Large

2016-08-11 Thread itpp2012
The 413 is coming from your backend. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268922,268923#msg-268923 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: transferring site from apache....

2016-08-02 Thread itpp2012
Sounds like this add-on: https://github.com/alibaba/nginx-http-concat Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268683,268699#msg-268699 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Hierarchy of malformed requests and blocked IPs

2016-07-31 Thread itpp2012
See https://forum.nginx.org/read.php?2,267651 at this level nginx is not an advanced all layer firewall/ids/dds tool. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268629,268646#msg-268646 ___ nginx mailing list nginx@nginx.org

Re: Hierarchy of malformed requests and blocked IPs

2016-07-30 Thread itpp2012
A 400 doesn't reach location blocks. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268629,268638#msg-268638 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Issue with HTTP/2 and async file upload from Safari on iOS

2016-07-08 Thread itpp2012
You can manually apply the patches and recompile. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,267385,268205#msg-268205 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Differing ocsp responses

2016-06-29 Thread itpp2012
CJ Ess Wrote: --- > Ok, that explains it then. Does the cache survive reloads? Or does it > need > to requery? See also https://forum.nginx.org/read.php?2,249249,249249#msg-249249 "When Nginx starts for the first time, and there's no cached

Re: Enable HTTP2 in one of several name-based servers

2016-06-23 Thread itpp2012
Valentin V. Bartenev Wrote: > What effect do you expect? Since clients are able to request > different hosts > using single HTTP/2 connection, closing the connection in one server > block > will break everything. I'm just venting an (untested) idea, some other way to tell the client to revert

Re: Double Redirect

2016-06-20 Thread itpp2012
Lebod Wrote: > > What do you think this does?: return 301 > > https://www.example.com$request_uri; > > Doesn't that re-direct https://example.com to https://www.example.com > ? It would if you used "listen 443", maybe you should read the docs to get a basic grasp what your doing.

Re: Double Redirect

2016-06-20 Thread itpp2012
Lebod Wrote: --- > Thank you for the reply; > > If we did this: > > server { > listen 80; > -listen 443 ssl; > server_name example.com ***IP Address***; > return 301 https://www.example.com$request_uri; > } > > Wouldn't this stop

Re: Double Redirect

2016-06-19 Thread itpp2012
Lebod Wrote: --- > nginx: [warn] conflicting server name "example.com" on 0.0.0.0:80, It says it all. > server { > listen 80; remove this line: > listen 443 ssl; > server_name example.com ***IP Address***; > return 301

Re: send_header with NGX_HTTP_INTERNAL_SERVER_ERROR code

2016-06-16 Thread itpp2012
This is a general remark, adding stuff to handle a bad request, ea., will eventually kill the performance, sending bad requests is a popular way to create a DOS/DDOS attack since the server(the added module) has to process them and do something while technically it makes no sense to do anything at

Re: nginx custom module multi process help

2016-06-16 Thread itpp2012
Theoretically yes, it all depends how and by what means this data is collected and if you need to wait for some parts, have a look at the example Urls I send before or join the openresty forum on googlegroups with some example code/description what your after. nb. a Lua cache is an in-memory

Re: nginx custom module multi process help

2016-06-15 Thread itpp2012
Why not use Lua, collect the data from your variables, run the query (and optionally store them in a Lua cache) and process it all real-time, none-blocking and without any (extra) module. Examples: http://stackoverflow.com/questions/25955869/how-do-i-use-mysql-for-dynamic-doc-root-with-nginx

Re: Access and Error Log file for Nginx stream server configuration

2016-05-17 Thread itpp2012
stream { error_log logs/stream_error.log; or error_log logs/stream_error.log debug; Posted at Nginx Forum: https://forum.nginx.org/read.php?2,266943,266947#msg-266947 ___ nginx mailing list nginx@nginx.org

Re: reverse proxying exchange with rpc/mapi over http

2016-05-17 Thread itpp2012
Sure, just make sure when its TCP you use stream {}, the rest can use http {} Posted at Nginx Forum: https://forum.nginx.org/read.php?2,266936,266938#msg-266938 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Помогите скомпилировать nginx под Windows

2016-05-16 Thread itpp2012
См http://nginx-win.ecsds.eu/download/ngxLuaDB-1.1.zip из http://nginx-win.ecsds.eu/ и пример "/ngxLuaDB/conf/nginx GEOIP-MYSQL with Cache Non-Blocking.conf" Posted at Nginx Forum: https://forum.nginx.org/read.php?21,266886,266928#msg-266928 ___

Re: Gzip issue with Safari

2016-05-16 Thread itpp2012
Have you had a look yet at /conf/mime.types Posted at Nginx Forum: https://forum.nginx.org/read.php?2,266915,266916#msg-266916 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Serving website with Apache, with Nginx as interface?

2016-05-14 Thread itpp2012
Alex Hall Wrote: --- > upstream apache2Redirect { > server 127.0.0.1:8080; > } > > location / { > proxy_set_header Host $host; > proxy_pass http://apache2Redirect; > } Browser(get localhost:8080) -> osticket (return responses with

Re: nginx 1.11.0: client sent stream with data before settings were acknowledged while processing HTTP/2 connection

2016-04-30 Thread itpp2012
eiji-gravion Wrote: --- > I'm seeing the same thing happen in Firefox 46. Nb. there is currently an issue with 46 and TLS. ea. don't use 46 for testing. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,266525,266551#msg-266551

Re: nginx logrotate : permission denied

2016-04-28 Thread itpp2012
nginx -s reopen Posted at Nginx Forum: https://forum.nginx.org/read.php?2,266475,266476#msg-266476 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Protect site with username and password

2016-04-27 Thread itpp2012
http://nginx.org/en/docs/http/ngx_http_auth_basic_module.html Posted at Nginx Forum: https://forum.nginx.org/read.php?2,266445,266454#msg-266454 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx collect status data

2016-04-05 Thread itpp2012
marcosbontempo Wrote: --- > Hello, > > I'm using the nginx free version and I need to collect status data > like number of connections, number of requests per second, failures, > latency and sent and received bytes. Is there a way to get these

Re: HTTP/2 and HTTPS

2016-03-19 Thread itpp2012
Roswebnet Wrote: --- > On US15.10 I have nginx: > > root@LIA-RP-VS-WEB:/etc/nginx/tls# nginx -V > nginx version: nginx/1.9.12 > built by gcc 5.2.1 20151010 (Ubuntu 5.2.1-22ubuntu2) > built with OpenSSL 1.0.2d 9 Jul 2015

  1   2   3   4   >