RE: SSL session cache full

2020-03-16 Thread Cox, Eric S
How can this be monitored however? -Original Message- From: nginx On Behalf Of Maxim Dounin Sent: Monday, March 16, 2020 8:33 AM To: nginx@nginx.org Subject: Re: SSL session cache full ** [EXTERNAL EMAIL]: Do not click links or open attachments unless you recognize the sender and know t

Use individual upstream server name as host header

2016-10-05 Thread Cox, Eric S
Is anyone aware of a way to pass the upstream server name as the host header per individual server instead of setting it at the location level for all the upstream members? Without using a lua script that is. Thanks This e-mail message, including any attachments

Dynamically Reload Map

2016-10-27 Thread Cox, Eric S
Is anyone aware of a way to dynamically reload a file when using the MAP module without having to reload the server? We have a file that gets updated roughly every minute that needs reloaded and it seem that doing a reload every minute on the server processes might cause a performance issue? Al

Blocking tens of thousands of IP's

2016-11-01 Thread Cox, Eric S
Is anyone aware of a difference performance wise between using return 403; vs deny all; When mapping against a list of tens of thousands of ip? Thanks This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may co

RE: Blocking tens of thousands of IP's

2016-11-01 Thread Cox, Eric S
on == 4) { print $cidr . "\n"; } else { print $cidr->short() . "/" . $cidr->masklen() . "\n"; } On Tue, Nov 1, 2016 at 11:15 AM, Cox, Eric S mailto:eric@kroger.com>> wrote: Is anyone aware of a difference performance wise between using return 4

RE: Blocking tens of thousands of IP's

2016-11-01 Thread Cox, Eric S
Currently we track all access logs realtime via an in house built log aggregation solution. Various algorithms are setup to detect said IPS whether it be by hit rate, country, known types of attacks etc. These IPS are typically identified within a few mins and we reload to banned list every 60 s

RE: Blocking tens of thousands of IP's

2016-11-01 Thread Cox, Eric S
nginx@nginx.org [nginx@nginx.org] Subject: Re: Blocking tens of thousands of IP's Am 01.11.2016 um 23:35 schrieb Cox, Eric S mailto:eric@kroger.com>>: Currently we track all access logs realtime via an in house built log aggregation solution. Various algorithms are setup to

RE: Blocking tens of thousands of IP's

2016-11-01 Thread Cox, Eric S
- From: Rainer Duffner [rai...@ultra-secure.de] Received: Tuesday, 01 Nov 2016, 6:54PM To: nginx@nginx.org [nginx@nginx.org] Subject: Re: Blocking tens of thousands of IP's Am 01.11.2016 um 23:43 schrieb Cox, Eric S mailto:eric@kroger.com>>: Unfortunately much like others have

Custom Error Log Format

2016-11-20 Thread Cox, Eric S
Has anyone done anything with using a lua script, third party module etc to be able to define a customer log error format? Currently the log format I believe is /MM/DD HH:MM:SS [LEVEL] PID#TID: *CID MESSAGE Parsing/rewriting this is possible with some custom scripts but I would like to do

RE: Request_Id Variable unknown?

2017-02-09 Thread Cox, Eric S
$request_id unique request identifier generated from 16 random bytes, in hexadecimal (1.11.0) You need at least version 1.11.0 -Original Message- From: iridude--- via nginx [nginx@nginx.org] Received: Thursday, 09 Feb 2017, 11:54PM To: nginx@nginx.org [nginx@nginx.org] CC: irid...@aol.co

Including Multiple Server Blocks via wildcard

2017-02-14 Thread Cox, Eric S
In my main nginx.conf file I am doing an include for various files to include multiple server blocks (1 block per file) If I use a wildcard include the https servers break but the http server is fine Example include /servers/*; this would include 3 server blocks 1 http 2 https If

RE: Including Multiple Server Blocks via wildcard

2017-02-14 Thread Cox, Eric S
It appears it had nothing to do with the includes but what I had in my server blocks. If I put a particular https server include above another it broke one. I made 1 of the https server blocks as the default. From: nginx [mailto:nginx-boun...@nginx.org] On Behalf Of Cox, Eric S Sent: Tuesday

RE: Nginx multiple upstream with different protocols

2017-02-22 Thread Cox, Eric S
If you are SSL on the frontend (server directive) why would you want to proxy between ssl/non-ssl on the upstreams? Can they not be the same? I don't get what you are trying to solve? From: nginx [mailto:nginx-boun...@nginx.org] On Behalf Of Kilian Ries Sent: Wednesday, February 22, 2017 9:55 AM