Re: Possible memory leak?

2019-03-12 Thread Gary
I use three maps to kick out the usual clowns trying to misuse the web server. (I detect odd urls, bad user agents, and references [Links] from shady websites.) Any change to a map requires a reload. Or am I wrong?   Original Message   From: nginx@nginx.org Sent: March 12, 2019

Re: Possible memory leak?

2019-03-12 Thread Anoop Alias
An nginx restart can take the web server offline for more than 30 seconds or so depending upon the number of server{} blocks and configuration. It may be fine for a few vhost though On Wed, Mar 13, 2019 at 11:14 AM Peter Booth via nginx wrote: > Perhaps I’m naive or just lucky, but I have

Re: Possible memory leak?

2019-03-12 Thread Peter Booth via nginx
Perhaps I’m naive or just lucky, but I have used nginx on many contracts and permanent jobs for over ten years and have never attempted to reload canfigurations. I have always stopped then restarted nginx instances one at a time. Am I not recognizing a constraint that affects other people?

Re: Transform a file with dynamic size.

2019-03-12 Thread Irelia
About "Transfer Encoding-Chunked", we're reading NGINX open source to find some useful messege. If you have some suggestions or questions, we can talk about it. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,283332,283368#msg-283368 ___

Re: Possible to modify response headers from a proxied request before the response is written do the cache? (modified headers should be written to disk)

2019-03-12 Thread Maxim Dounin
Hello! On Tue, Mar 12, 2019 at 09:42:22PM +0100, Manuel wrote: > > From practical point of view, however, these should be enough to > > return correct responses to clients. What is stored in the cache > > file is irrelevant. > > Well, the expires header is in the cached file, and that was the

Re: Possible memory leak?

2019-03-12 Thread Maxim Dounin
Hello! On Tue, Mar 12, 2019 at 02:09:06PM -0400, wkbrad wrote: > First of all, thanks so much for your insights into this and being patient > with me. :) I'm just trying to understand the issue and what can be done > about it. > > Can you explain to me what you mean by this? > > you can

Re: Protect against php files being send as static files

2019-03-12 Thread Ian Hobson
Hi, On 12/03/2019 08:53, Olaf van der Spek wrote: Ian Hobson Wrote: http://forumm.nginx.org/read.php?2,88846,page 3 This link doesn't work.. Sorry - typo (made months ago) https://forum.nginx.org/read.php?2,88845,page=3 try_files $uri =404; fastcgi_split_path_info

Re: Possible to modify response headers from a proxied request before the response is written do the cache? (modified headers should be written to disk)

2019-03-12 Thread Manuel
Hi Maxim, thanks for taking the time to answer my question. > From practical point of view, however, these should be enough to > return correct responses to clients. What is stored in the cache > file is irrelevant. Well, the expires header is in the cached file, and that was the problem. The

Re: NGINX to Join F5

2019-03-12 Thread Mark Moseley
On Mon, Mar 11, 2019 at 1:16 PM Igor Sysoev wrote: > Today is an important day for NGINX. We signed an agreement to join to F5. > > The NGINX team and I believe this is a significant milestone for our > open source technology, community, and the company. > > F5 is committed to our open source

Re: Possible memory leak?

2019-03-12 Thread wkbrad
Hey Maxim, First of all, thanks so much for your insights into this and being patient with me. :) I'm just trying to understand the issue and what can be done about it. Can you explain to me what you mean by this? > you can configure system allocator to use mmap() I'm not a C programmer so

Re: NGINX to Join F5

2019-03-12 Thread Alexander Azarov
Поздравляю! пн, 11 мар. 2019 г. в 22:17, Igor Sysoev : > Сегодня исторический день для NGINX. Мы подписали соглашение о > присоединении к компании F5. Команда и я считаем это событие > значимым этапом для наших открытых проектов, сообщества и компании. > > Для F5 крайне важны наши freeware

[njs] Reporting file name and function name in disassembler output.

2019-03-12 Thread Dmitry Volyntsev
details: https://hg.nginx.org/njs/rev/dcc7965410bd branches: changeset: 827:dcc7965410bd user: Dmitry Volyntsev date: Tue Mar 12 19:28:11 2019 +0300 description: Reporting file name and function name in disassembler output. diffstat: njs/njs.c | 2 +-

Re: Possible memory leak?

2019-03-12 Thread Maxim Dounin
Hello! On Tue, Mar 12, 2019 at 08:28:54PM +0530, Anoop Alias wrote: > limiting the server blocks may not be practical when each domain has a > different TLS config > > unless we use lua modules provided in the openresty > > Correct me if I am wrong There are at least several ways to reduce

Re: Possible memory leak?

2019-03-12 Thread Anoop Alias
limiting the server blocks may not be practical when each domain has a different TLS config unless we use lua modules provided in the openresty Correct me if I am wrong On Tue, Mar 12, 2019 at 8:09 PM Maxim Dounin wrote: > Hello! > > On Mon, Mar 11, 2019 at 04:37:50PM -0400, wkbrad wrote: >

Re: Possible memory leak?

2019-03-12 Thread Maxim Dounin
Hello! On Mon, Mar 11, 2019 at 04:37:50PM -0400, wkbrad wrote: > I think I haven't been clear in what I'm seeing so let's start over. :) I > set up a very simple test on Centos 7 with a default install of Nginx > 1.12.2. Below is exactly what I did to produce the result and it's clear to > me

Re: Possible memory leak?

2019-03-12 Thread Anoop Alias
I am able to reproduce the issue @wkbrad is reporting [root@server1 ~]# ps_mem|head -1 && ps_mem|grep nginx Private + Shared = RAM used Program 25.3 MiB + 119.5 MiB = 144.9 MiB nginx (3) [root@server1 ~]# systemctl restart nginx [root@server1 ~]# ps_mem|head -1 && ps_mem|grep

Re: Possible to modify response headers from a proxied request before the response is written do the cache? (modified headers should be written to disk)

2019-03-12 Thread Maxim Dounin
Hello! On Tue, Mar 12, 2019 at 12:57:59AM +0100, Manuel wrote: > Hello, > > nginx writes the rsponse from a proxy to disk. eg. > [...] > Server: nginx > Date: Mon, 11 Mar 2019 23:23:28 GMT > Content-Type: image/png > Content-Length: 45360 > Connection: close > Expect-CT: max-age=0, report-uri="

Re: NGINX to Join F5

2019-03-12 Thread Андрей Голубев via nginx-ru
наши поздравления! >Сегодня исторический день для NGINX. Мы подписали соглашение о >присоединении к компании F5. Команда и я считаем это событие >значимым этапом для наших открытых проектов, сообщества и компании. С уважением, Андрей Голубев 44...@mail.ru

Re: accept_mutex и upstream Connection timed out

2019-03-12 Thread Alex Vorona via nginx-ru
Привет, 11.03.19 23:45, Vitaliy Okulov wrote: [...] nginx version: nginx/1.14.0 Kernel 4.4.0 Возможно будет полезнее использовать reuseport у listen вместо accept_mutex. -- Alex Vorona ___ nginx-ru mailing list nginx-ru@nginx.org

nginx directives geo and map behind proxy

2019-03-12 Thread gogan
We have a problem with mapping ip's on our nginx loadbalancer behind myracloud (proxy). In configuration file we have: set_real_ip_from x.x.x.x ... real_ip_header CF-Connecting-IP; real_ip_recursive on; In addition to map ip's: geo $limited { default 0; x.x.x.x 1; } map $limited

Re: Protect against php files being send as static files

2019-03-12 Thread Olaf van der Spek
Ian Hobson Wrote: > http://forumm.nginx.org/read.php?2,88846,page 3 This link doesn't work.. >try_files $uri =404; >fastcgi_split_path_info ^(.+\.php)(/.+)$; >include /etc/nginx/fastcgi_params; >fastcgi_param SCRIPT_FILENAME > $document_root$fastcgi_script_name; >

Re: NGINX to Join F5

2019-03-12 Thread Aleksandar Lazic
Hi Igor. Am 11.03.2019 um 21:16 schrieb Igor Sysoev: > Today is an important day for NGINX. We signed an agreement to join to F5. > > The NGINX team and I believe this is a significant milestone for our > open source technology, community, and the company. > > F5 is committed to our open source

Re: Protect against php files being send as static files

2019-03-12 Thread Olaf van der Spek
Francis Daly Wrote: > I don't think that stock-nginx has a configuration directive for this. > > "Not putting files that you don't want sent, into a directory that > nginx > has been told to send files from", would probably be the safest way to > avoid external misconfiguration. Sure, but as