Re: does nginx forward requests to backend servers using http or https?

can you move the backend server declaration from your .conf file to the nginx.conf file inside the http stanza? On Tue, Jul 5, 2016 at 10:05 AM, NdridCold . wrote: > Yes, However I did not have the entire stanza un-commented out. I have > done that, but now I am

Re: basic nginx setup help as load balancer

But I am confused on a few concepts here. First of all, should my server name in the "upstream" directive be the same name in the "server_name" directive in the "server" stanza? Here is what I have so far: And to recap, should my server name in the "upstream" directive be the same name in the

very simple question about cache

Hi,I set simply reverse proxy (backend is an Apache web server): upstream backend {ip_hash;server 127.0.0.1:8080; } server {listen x.y.w.z:80; # IP goes here.server_name somedomain.com;expires off;location / {proxy_pass http://backend;

Cache calculating erroneous size

Hello, I've been experiencing a rather strange situation regarding the cache size occupation (calculated by nginx's cache manager and reported in debug logs) versus the real occupied size as reported by `df`. Just exemplifying: - reported by cache manager: 76009.340M disk space used, 19458391

Setting ssl_ecdh_curve to secp384r1 does not work

Hi all, I was running nginx 1.9.12 on Ubuntu 14.04 built from the source tarball with these options: --with-ipv6 --with-http_ssl_module --with-http_v2_module --with-openssl=/openssl-1.0.2g While switching to a new server, I also wanted to switch to the nginx Docker container using my existing

Re: Setting ssl_ecdh_curve to secp384r1 does not work

Hello! On Tue, Jul 05, 2016 at 02:00:04PM +0200, Florian Reinhart wrote: > Hi all, > > I was running nginx 1.9.12 on Ubuntu 14.04 built from the source tarball with > these options: --with-ipv6 --with-http_ssl_module --with-http_v2_module > --with-openssl=/openssl-1.0.2g > > While switching

Re: Setting ssl_ecdh_curve to secp384r1 does not work

Hello! On Tue, Jul 05, 2016 at 04:02:21PM +0200, Florian Reinhart wrote: > Hi Maxim! > > That’s what I thought. However, all clients can access the nginx server on > the old Ubuntu 14.04 server, which uses the same config, > > I tested the following clients on OS X 10.11.5, all failed to

does nginx forward requests to backend servers using http or https?

I am using the free version of nginx on RHEL 6.7. The version is : nginx-1.10.1-1.el6.ngx.x86_64 When using nginx as a load balancer I would like to know if nginx forwards requests to backend servers using http or https?? ___ nginx mailing list

Re: does nginx forward requests to backend servers using http or https?

You define what you want it sent to the backend as. So if you use http://backendserver it's http, if https://backendserver:443 - https. On Tue, Jul 5, 2016 at 9:26 AM, Brian Pugh wrote: > I am using the free version of nginx on RHEL 6.7. The version is : > > >

Re: Setting ssl_ecdh_curve to secp384r1 does not work

Hi Maxim! That’s what I thought. However, all clients can access the nginx server on the old Ubuntu 14.04 server, which uses the same config, I tested the following clients on OS X 10.11.5, all failed to connect: curl, installed from Homebrew: curl 7.49.1 (x86_64-apple-darwin15.5.0)

Re: does nginx forward requests to backend servers using http or https?

Are you referring to the proxy pass declaration? If so I get an error when I uncomment that line out saying "nginx: [emerg] "proxy_pass" directive is not allowed here in /etc/nginx/conf.d/default.conf:40?" From: nginx on behalf of

Re: basic nginx setup help as load balancer

Thank you. In my setup all 3 servers in the upstream block will answer requests for "myapplication.net" . Knowing that, would you say my config I have is sufficient? On Tue, Jul 5, 2016 at 1:42 PM, Reinis Rozitis wrote: > But I am confused on a few concepts here. First of all,

How to leverage HTTP upstream features

Hi Gurus, I'm new to nginx... I would like to define upstream handler in HTTP without a HTTP server listener. From SMTP/POP3/IMAP I would like to use the upstream handler for my http endpoint. Thus requiring http_upstream initialize, create a request, hand the request off to upstream for

Re: does nginx forward requests to backend servers using http or https?

Yes, However I did not have the entire stanza un-commented out. I have done that, but now I am encountered with a different error message. Now I get: nginx: [emerg] host not found in upstream "resolveservergroup.com" in /etc/nginx/conf.d/default.conf:40 Here is my default.conf file: upstream

Re: Setting ssl_ecdh_curve to secp384r1 does not work

Thanks a lot for your suggestions. It is the same certificate on both servers and it is indeed a secp256r1 aka prime256v1 certificate. So does this mean, I have to use prime256v1 for ssl_ecdh_curve with this certificate? It’s still strange that it used to work before... Here is what the error

Re: does nginx forward requests to backend servers using http or https?

Yes that is in proxy_pass. Are you sure proxy_pass is defined in the server stanza and that it's inside an include stanza? Posting the code would be helpful if you can redact the sensitive information. On Tue, Jul 5, 2016 at 9:41 AM, Brian Pugh wrote: > Are you referring

basic nginx setup help as load balancer

I was getting a host not found problem while trying to start nginx. nginx: [emerg] host not found in upstream "backendservers.com" in /etc/nginx/conf.d/default.conf:37 I am fairly certain that this is because there is no name resolution for " backendservers.com" in our DNS. So I changed up a

nginx-1.11.2

Changes with nginx 1.11.205 Jul 2016 *) Change: now nginx always uses internal MD5 and SHA1 implementations; the --with-md5 and --with-sha1 configure options were canceled. *) Feature: variables support in the stream module. *) Feature:

cache issue with cms

Hi, I am using nginx version 1.10.1 with reverse proxy function toward Apache 2.2.15 I noticed that if I change something inside backend (eg. modify some text on some article), that changes appear on frontend, but I still view old post's content into backend. I tried to disable any caching

Re: Order of execution of nginx filters

AFAIK you do not control the order of filters, and when you are building a filter, you deal with data on-the-fly, which means your filter might be invoked with a partial response coming from other filters. Moreover, the module needs to 'win' its selection on a specific event. I suggest you read

Re: [nginx-announce] nginx-1.11.2

Hello Nginx users, Now available: Nginx 1.11.2 for Windows https://kevinworthington.com/nginxwin1112 (32-bit and 64-bit versions) These versions are to support legacy users who are already using Cygwin based builds of Nginx. Officially supported native Windows binaries are at nginx.org.

Re: Setting ssl_ecdh_curve to secp384r1 does not work

Hello! On Tue, Jul 05, 2016 at 05:02:07PM +0200, Florian Reinhart wrote: > It is the same certificate on both servers and it is indeed a > secp256r1 aka prime256v1 certificate. So does this mean, I have > to use prime256v1 for ssl_ecdh_curve with this certificate? It’s > still strange that it

Re: reverseproxy ломается заголовок ответа Content-Type

Да, Вы правы. Дабаг показал, что там всё-таки LineFolding. Я изначально смотрел через Fiddler, а он как раз интерпретирует ответ по RFC7230. A user agent that receives an obs-fold in a response message that is not within a message/http container MUST replace each received obs-fold with one

Re: reverseproxy ломается заголовок ответа Content-Type

On 2016-07-05 13:33, Maxim Dounin wrote: A proxy or gateway that receives an obs-fold in a response message that is not within a message/http container MUST either discard the message and replace it with a 502 (Bad Gateway) response, preferably with a representation explaining that

Re: Странное с set_real_ip_from

Из того, что удалось поймать - нет, не помогло. Приезжает “x-forwarded-for” (именно в таком регистре). > On 05 Jul 2016, at 14:54, Fedor Dikarev wrote: > > И можно поделиться с общественностью: > а) помогло ли включение real_ip_recursive? > б) что приезжало в заголовке

Re: Странное с set_real_ip_from

И можно поделиться с общественностью: а) помогло ли включение real_ip_recursive? б) что приезжало в заголовке X-Forwarded-For? On 04/07/16 15:28, Vladimir Sopot wrote: Внезапно, подозреваю отсутствие в конфиге real_ip_recursive on; Сегодня буду тестировать. On 02 Jul 2016, at 19:24, Vladimir

Re: отдать 444 код возврата для всех неуказанных имен серверов для всех айпи адресов сервера

Hello! On Tue, Jul 05, 2016 at 02:06:04PM +0300, Vasiliy Tolstov wrote: > Добрый день. > Есть сервер, на котором есть много айпи адресов (скажем 200). Хочется > для всех неописанных имен серверов для всех этих 200 адресов прописать > в одном месте return 444. > На текущий момент (nginx/1.9.14)

[njs] Array.reverse() method.

details: http://hg.nginx.org/njs/rev/ef2b708510b1 branches: changeset: 115:ef2b708510b1 user: Igor Sysoev date: Wed Jun 29 13:38:20 2016 +0300 description: Array.reverse() method. diffstat: njs/njs_array.c | 40

[njs] String.split() method.

details: http://hg.nginx.org/njs/rev/41404eee5063 branches: changeset: 114:41404eee5063 user: Igor Sysoev date: Tue Jun 28 19:28:00 2016 +0300 description: String.split() method. diffstat: njs/njs_array.c | 62 + njs/njs_array.h

[nginx] Updated PCRE used for win32 builds.

details: http://hg.nginx.org/nginx/rev/4a32b3ac54c6 branches: changeset: 6613:4a32b3ac54c6 user: Maxim Dounin date: Tue Jul 05 18:30:56 2016 +0300 description: Updated PCRE used for win32 builds. diffstat: misc/GNUmakefile | 2 +- 1 files changed, 1

[nginx] release-1.11.2 tag

details: http://hg.nginx.org/nginx/rev/365b31afd276 branches: changeset: 6615:365b31afd276 user: Maxim Dounin date: Tue Jul 05 18:56:14 2016 +0300 description: release-1.11.2 tag diffstat: .hgtags | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diffs

[nginx] nginx-1.11.2-RELEASE

details: http://hg.nginx.org/nginx/rev/4d3b3a13a8cf branches: changeset: 6614:4d3b3a13a8cf user: Maxim Dounin date: Tue Jul 05 18:56:14 2016 +0300 description: nginx-1.11.2-RELEASE diffstat: docs/xml/nginx/changes.xml | 113

[nginx-ru-announce] nginx-1.11.2

Изменения в nginx 1.11.2 05.07.2016 *) Изменение: теперь nginx всегда использует внутренние реализации MD5 и SHA1; параметры configure --with-md5 и --with-sha1 упразднены. *) Добавление: поддержка переменных в модуле stream. *)

[nginx-announce] nginx-1.11.2

Changes with nginx 1.11.205 Jul 2016 *) Change: now nginx always uses internal MD5 and SHA1 implementations; the --with-md5 and --with-sha1 configure options were canceled. *) Feature: variables support in the stream module. *) Feature:

AW: [nginx] Set IP_BIND_ADDRESS_NO_PORT socket option for upstream sockets.

Hello, > if (setsockopt(s, IPPROTO_IP, IP_BIND_ADDRESS_NO_PORT, Isn't this a SOL_IP socket option? Also, does this cover IPv6? Thanks, Lukas ___ nginx-devel mailing list nginx-devel@nginx.org

AW: [nginx] Set IP_BIND_ADDRESS_NO_PORT socket option for upstream sockets.

>> if (setsockopt(s, IPPROTO_IP, IP_BIND_ADDRESS_NO_PORT > Isn't this a SOL_IP socket option? Actually SOL_IP and IPPROTO_IP are the same thing, so it doesn't make any difference. Sorry for the noise, Lukas ___ nginx-devel mailing list