Re: Nginx behind a reverse proxy sending 499

2015-01-12 Thread Maxim Dounin
Hello! On Sun, Jan 11, 2015 at 01:37:31AM -0500, ppwm wrote: To debug the issue further, I wrote a simple Java based HTTP client. This client would open a socket to the nginx server, write the request line (GET / HTTP/1.1), write the host header, write the Connection:close header and commit

Re: Upstream Keepalive connection close

2015-01-12 Thread Maxim Dounin
Hello! On Tue, Jan 06, 2015 at 06:06:18AM -0500, Gona wrote: I have Nginx server configured with couple of backend servers with keepalive connections enabled. I am trying to understand what will be the Nginx's behaviour in case the connection is closed by an upstream server legitimately

nested location inheritance

2015-01-12 Thread Vasil Mikhalenya
Добрый день, озадачен вопросом составления казалось бы тривиального конфига, задача - для определенно урла выключить логирование, обойдясь без дублирования конфигурации. Однако, как я понял, директивы fastcgi_pass не наследуются во вложенный location. location / { root

Re: nested location inheritance

2015-01-12 Thread Maxim Dounin
Hello! On Mon, Jan 12, 2015 at 03:18:20PM +0200, Ivan Polonevich wrote: Вынести обработку всех fastcgi в именованный локейшн location @zabbix {} и location ~ ^/api_jsonrpc\.php поставить выше в конфиге, чем location ~ \.php Не надо так. (c) -- Maxim Dounin http://nginx.org/

Re: nested location inheritance

2015-01-12 Thread Ivan Polonevich
Вынести обработку всех fastcgi в именованный локейшн location @zabbix {} и location ~ ^/api_jsonrpc\.php поставить выше в конфиге, чем location ~ \.php -Original Message- From: Vasil Mikhalenya bazi...@gmail.com Reply-to: nginx-ru@nginx.org To: nginx-ru@nginx.org Subject: nested location

Re: Помогите, пожалуйста, с регулярным выражением для локейшена

2015-01-12 Thread Ivan
Здравствуйте, Владислав! Файла там нет, т.к. согласно задания он лежит в корне сайт, т.е. в $document_root Нужно чтобы для запросах следующих URLов site.com/autodiscover/autodiscover.xml site.com/autodiscover/Autodiscover.xml site.com/Autodiscover/autodiscover.xml

Re: Помогите, пожалуйста, с регулярным выражением для локейшена

2015-01-12 Thread Daniel Podolsky
request: GET /autodiscover/ HTTP/1.1 что-то этот запрос вашему заданию не соответствует ___ nginx-ru mailing list nginx-ru@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx-ru

Re: [PATCH] Add strict Host validation

2015-01-12 Thread Maxim Dounin
Hello! On Mon, Jan 05, 2015 at 02:12:04PM -0800, Piotr Sikora wrote: Hey Maxim, While I agree that there is no real reason for forbidding some of those characters, I think that Host still should be restricted to at least printable ASCII characters (minus space and path separators).

Re: resolver does not re-resolve upstream servers after initial cache

2015-01-12 Thread Maxim Dounin
Hello! On Thu, Jan 08, 2015 at 05:13:42AM +0100, Miroslav S. wrote: any update? This is now available as a commercial feature in nginx+, see the resolve parameter here: http://nginx.org/en/docs/http/ngx_http_upstream_module.html#server -- Maxim Dounin http://nginx.org/

Re[2]: Помогите, пожалуйста, с регулярным выражением для локейшена

2015-01-12 Thread Vladislav Prodan
--- Original message --- From: Ivan nginx@dubrovskiy.net Date: 12 January 2015, 14:55:52 Спасибо за ответ, но к сожалению не помог, получаю ошибку 404 2015/01/11 20:34:19 [error] 10334#0: *1 FastCGI sent in stderr: Unable to open primary script:

Adding timer in nginx.c main

2015-01-12 Thread Nikhita
Hi, I am adding a timer in nginx's main loop. if (counter == -1) { ngx_log_error(NGX_LOG_EMERG, cycle-log, 0, counter is null adding imer); /* Registring Timer */ ngx_ipc_event.data = dumb; ngx_ipc_event.handler = ngx_ipc_event_handler;

Re: Bug re: openssl-1.0.1

2015-01-12 Thread Peter Fraser
Sorry for taking so long to reply. I am running FreeBSD 10.1 RELEASE and it is Openssl version is OpenSSL 1.0.1j and I installed it from the ports tree (source). Regards On Tue, Jan 6, 2015 at 4:56 PM, Lukas Tribus luky...@hotmail.com wrote: Hi. Thanks for replying. I read it in two places.

Re: A build of nginx with static-linked OpenSSL fails on Mac

2015-01-12 Thread cubicdaiya
Hello. Maxim Dounin Wrote: --- Though the rough patch below fixes failure, is there a better solution expect dynamic-linking OpenSSL? Defining KERNEL_BITS=64 in the environment will convince recent enough OpenSSL to build 64-bit

Re: nested location inheritance

2015-01-12 Thread Vasil Mikhalenya
Большое спасибо, так значительно компактнее. Можно пару слов, чем обусловлена такая реализация и где в документации описаны данные особенности, если описаны? 2015-01-12 16:30 GMT+03:00 Maxim Dounin mdou...@mdounin.ru: Hello! On Mon, Jan 12, 2015 at 04:06:33PM +0300, Vasil Mikhalenya wrote:

Re: Bug re: openssl-1.0.1

2015-01-12 Thread Peter Fraser
You were absolutely correct. It is working now. I changed three things. I firstly forced TLS 1.0 then changed the directive ssl_protocols to proxy_ssl_protocols as you suggested. Finally, I restricted to Cipher list as you also mentioned. I had thought that I would leave all that out and tie

Re: resolver directive doesn't fallback to the system DNS resolver

2015-01-12 Thread Kunal Pariani
Is there already a patch for this ? I am not completely sure of how to make the nginx resolver (in ngx_resolver.c) fallback to libresolv automatically and if this not trivial enough, i just might read the resolvers from /etc/resolv.conf and provide it to the 'resolver' directive. Any

auth_request vs auth_pam_service_name

2015-01-12 Thread nginxuser100
Hi, I am a newbie at nginx and looking at its authentication capabilities. It appears that when using auth_request, every client request would still require an invokation to the auth_request fastcgi or proxy_pass server. Looking at auth_pam, I am not clear on how it works: 1. How does nginx pass

Re: resolver directive doesn't fallback to the system DNS resolver

2015-01-12 Thread Yichun Zhang (agentzh)
Hello! On Mon, Jan 12, 2015 at 1:48 PM, Kunal Pariani wrote: Is there already a patch for this ? AFAIK, the Tengine fork has a patch for this. I am not completely sure of how to make the nginx resolver (in ngx_resolver.c) fallback to libresolv automatically and if this not trivial enough,

Re: resolver directive doesn't fallback to the system DNS resolver

2015-01-12 Thread Kunal Pariani
Thanks Yichun Zhang.. - Original Message - From: Yichun Zhang (agentzh) agen...@gmail.com To: nginx@nginx.org Sent: Monday, January 12, 2015 2:19:08 PM Subject: Re: resolver directive doesn't fallback to the system DNS resolver Hello! On Mon, Jan 12, 2015 at 1:48 PM, Kunal Pariani

Re: [PATCH] Add strict Host validation

2015-01-12 Thread Piotr Sikora
Hey Maxim, I still think it's a no. If needed, allowed characters can be easily restricted by a configuration. Just to make a point: $ curl -I nginx.org HTTP/1.1 200 OK Server: nginx/1.7.7 Date: Mon, 12 Jan 2015 23:42:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 8981

Re: Adding timer in nginx.c main

2015-01-12 Thread Maxim Dounin
Hello! On Mon, Jan 12, 2015 at 11:34:12AM -0500, Nikhita wrote: Hi, I am adding a timer in nginx's main loop. if (counter == -1) { ngx_log_error(NGX_LOG_EMERG, cycle-log, 0, counter is null adding imer); /* Registring Timer */ ngx_ipc_event.data = dumb;

Re: A build of nginx with static-linked OpenSSL fails on Mac

2015-01-12 Thread Maxim Dounin
Hello! On Fri, Jan 09, 2015 at 05:45:39AM -0500, cubicdaiya wrote: Hello. A build of nginx with static-linked OpenSSL seems to fail on Mac. $ uname -ar Darwin host 14.0.0 Darwin Kernel Version 14.0.0: Fri Sep 19 00:26:44 PDT 2014; root:xnu-2782.1.97~2/RELEASE_X86_64 x86_64 $ cd

RE: Bug re: openssl-1.0.1

2015-01-12 Thread Lukas Tribus
I did an ssldump and this is the conversation between both servers: This ssldump seems incomplete, there is no response. Please post the full ssldump. The bug is probably neither in openssl nor in nginx, but in the origin server (but we don't have the full handshake here). Since nginx 1.5.6,

Re: Bug re: openssl-1.0.1

2015-01-12 Thread Peter Fraser
I did an ssldump and this is the conversation between both servers: New TCP connection #1: nginx.domain.net(46318) - backend.domain.net((443) TCP: nginx.domain.net((46318) - backend.domain.net((443) Seq 54751863.(307) ACK 350741031 PUSH 1 1 1421082336.3009 (0.0012) CSV3.1(302) Handshake