recent nginx security issue announce

2013-04-26 Thread Maxim Konovalov
-- Maxim Konovalov +7 (910) 4293178 http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Debian 7

2013-05-28 Thread Maxim Konovalov
On 5/14/13 3:27 PM, David Geistert wrote: Hey, I only want to ask, when the Debian Wheezy package will be released in http://nginx.org/packages/debian/ As a follow-up: http://mailman.nginx.org/pipermail/nginx/2013-May/039096.html http://nginx.org/en/linux_packages.html -- Maxim Konovalov +7

Re: SV: IPv6 range specification for allow/deny

2013-08-15 Thread Maxim Konovalov
___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx -- Maxim Konovalov http

Re: nginx.conf(5) man page

2013-09-24 Thread Maxim Konovalov
page into the distribution once it's ready? I think it's a good idea while we manage to keep a single source for both nginx.org docs and man page. -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org

Re: nginx-1.5.8

2013-12-20 Thread Maxim Konovalov
On 12/19/13 1:59 PM, athalas wrote: Where would we find documentation on the fastopen parameter? http://nginx.org/r/listen -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: [PATCH] SPDY: support for SPDY v3

2013-12-25 Thread Maxim Konovalov
support in our roadmap (http://trac.nginx.org/nginx/roadmap) and planning to finish this project by the end of January, 2014. During this work we will evaluate the Taobao patch too. Thanks again, Maxim Konovalov -- Maxim Konovalov http://nginx.com

Re: OpenSSL leaks server-Keys / The Heartbleed Bug

2014-04-09 Thread Maxim Konovalov
://nginx.com/blog/nginx-and-the-heartbleed-vulnerability/ -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Optimization of Nginx for 128 MB RAM VPS

2014-06-18 Thread Maxim Konovalov
On 6/18/14 4:21 PM, akurczyk wrote: I am expecting lets say 20 connections per hour. [...] Personally I don't think that you need any optimizations for such load. -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http

Re: nginx-1.6.1

2014-08-05 Thread Maxim Konovalov
have been addressed? It seems like a major stability concern. Just install 1.7.4. -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx-1.7.4

2014-08-06 Thread Maxim Konovalov
NGINX_VERSION tmp/src/core/nginx.h #define NGINX_VERSION 1.7.5 #define NGINX_VER nginx/ NGINX_VERSION -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Bugfix: requests might hang if resolver was used [...]

2014-08-26 Thread Maxim Konovalov
in that branch too, since it's still a current version? We are working now on the another bugfix in the nginx resolver code and will consider backporting these patches to 1.6.2 (ETA ~2 weeks). -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx

Re: Bugfix: requests might hang if resolver was used [...]

2014-09-16 Thread Maxim Konovalov
On 8/26/14 5:18 PM, Maxim Konovalov wrote: Hi Jason, On 8/26/14 12:47 PM, Jason Woods wrote: Hi, Where do I need to ask if a bug fix will be treated as major and ported to the 1.6 feature stable branch? Specifically, the following is having a significant impact for us, and makes using

Re: 200ms Delay With SPDY - Nginx 1.6.x ?

2015-02-18 Thread Maxim Konovalov
in production (this is what we actually recommend to do; e.g. nginx-plus based on 1.7 branch currently). We will discuss merging this code to 1.6 for the next release but we don't have a schedule for 1.6.3 yet. -- Maxim Konovalov http://nginx.com ___ nginx

Re: 200ms Delay With SPDY - Nginx 1.6.x ?

2015-02-18 Thread Maxim Konovalov
On 2/18/15 6:57 PM, rik...@deds.nl wrote: On 2/18/15 5:42 PM, rik...@deds.nl wrote: You can't optimize a site to the max without SPDY. That's doesn't match our experience. Also, enabling SPDY doesn't make your site faster automagically. It is not a silver bullet. -- Maxim Konovalov http

Re: 200ms Delay With SPDY - Nginx 1.6.x ?

2015-02-18 Thread Maxim Konovalov
On 2/18/15 5:42 PM, rik...@deds.nl wrote: You can't optimize a site to the max without SPDY. That's doesn't match our experience. Also, enabling SPDY doesn't make your site faster automagically. It is not a silver bullet. -- Maxim Konovalov http://nginx.com

Re: Nginx Supports SLES 11?

2015-01-28 Thread Maxim Konovalov
. It works just well there. -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: 1.9 stream not working? 'directive is not allowed here'

2015-04-28 Thread Maxim Konovalov
bug? Put it in the same level as http. E.g. ... http { foo } stream { bar } # EOF -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: 200ms Delay With SPDY - Nginx 1.6.x ?

2015-04-07 Thread Maxim Konovalov
appriciated. Regards, This bugfix was merged to 1.6 and will be a part of 1.6.3 release which is out today. -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: SO_REUSEPORT

2015-06-10 Thread Maxim Konovalov
On 6/10/15 1:06 PM, itpp2012 wrote: Try the latest 1.9.2, in 191 is was added but not working. http part is fully functional in 1.9.1. The author has different issue and Lukas Tribus already answered. -- Maxim Konovalov http://nginx.com ___ nginx

Re: Thanks

2015-06-04 Thread Maxim Konovalov
On 6/4/15 1:16 AM, Thiago Farina wrote: Thanks all devs who put Nginx together and made this awesome piece of work! With it and freedns.afraid.org I was able to host my site from my home server. Thanks for using nginx! -- Maxim Konovalov http://nginx.com

Re: unknown directive thread_pool

2015-06-26 Thread Maxim Konovalov
On 6/25/15 8:21 PM, Francis Daly wrote: On Wed, Jun 24, 2015 at 06:55:05PM +0300, Maxim Konovalov wrote: Hi there, it seems that you start to learn Russian! :-) That's the joy of machine translation :-) I hope I didn't end up answering the wrong question. Valentin wrote a good blog

Re: unknown directive thread_pool

2015-06-24 Thread Maxim Konovalov
/ There is a complete and simple configuration in the Configuring Thread Pools section, near the end of the post. Also, there is a russian version of this article on habrahabr.ru. -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http

Re: ssh load-balancing

2015-07-31 Thread Maxim Konovalov
On 7/31/15 8:05 PM, Jerry Wyman wrote: Hi, I’m new to nginx and am trying to load-balance ssh sessions to an autoscaling group of ECS instances in AWS. [...] Just curious: is it just a test or a real use-case? Why does anybody want to load-balance ssh? -- Maxim Konovalov http://nginx.com

Re: Free O’Reilly animal book about nginx

2015-07-31 Thread Maxim Konovalov
Hi, [...] Thank you, but the download doesn't start on my Firefox. Check your mailbox instead. You should receive a link to the preview. -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman

blog post: new debugging features in nginx

2015-07-30 Thread Maxim Konovalov
Hello, Andrew Hutchings wrote a blog post about new debugging features you can find in nginx 1.9.2 and later: https://www.nginx.com/blog/new-debugging-features-probe-nginx-internals/ -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx

Re: nginx load balancing

2015-08-14 Thread Maxim Konovalov
capability this weekend. nginx admin guide(*) and blog.nginx.com is a good start * https://www.nginx.com/resources/admin-guide/ -- Maxim Konovalov Discover best practices for building delivering apps at scale. nginx.conf 2015: Sept. 22-24, San Francisco. http://nginx.com/nginxconf

Re: NGINX plus REST monitoring API query

2015-07-13 Thread Maxim Konovalov
configured in NGINX through REST monitoring API's? please forward your requests regarding nginx-plus trials to evaluati...@nginx.com. Thanks, Maxim Konovalov -- Maxim Konovalov http://nginx.com ___ nginx mailing list nginx@nginx.org http

Re: nginx on Debian pop-up

2015-10-28 Thread Maxim Konovalov
here: http://nginx.org/en/docs/welcome_nginx_facebook.html -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx Javascript Configuration

2015-09-24 Thread Maxim Konovalov
t; Lua? does/should it matter? >> It doesn't matter. >> > Hello, > > Could you please clarify, is this module will be in main code base > or should be installed as separate module? > It should be compiled in as an external module: http://hg.nginx.org/njs/file/11d4d66851ed/READ

Re: Nginx Javascript Configuration

2015-09-23 Thread Maxim Konovalov
g/njs/ > > This is preliminary version. > No built-in JS objects, no closures. > We appreciate your feedback on JS interface to nginx internals. > .. and for readers in twitter: we are not going to kill lua or any other great nginx modules. -- Maxim Konovalov __

Re: How about to add splice

2015-12-09 Thread Maxim Konovalov
or even some > simple substitution, then splice() cannot be used. > It should fit in our stream quite nicely. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: using nginx to mitigate the latest joomla-vuln - discussion

2015-12-16 Thread Maxim Konovalov
On 12/16/15 7:52 PM, mex wrote: > this one: https://www.nginx.com/blog/new-joomla-exploit-cve-2015-8562/ > [...] Thanks for feedback. I passed your comment to appropriate people. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.or

Re: Exclude specific location from cache

2015-12-24 Thread Maxim Konovalov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/24/15 12:24 PM, Dewangga Bachrul Alam wrote: > Sorry I forgot something, I'm using Nginx Plus R7. > [...] Hi Dewangga, please open a support ticket. Our engineers will help you with that in a minute. - -- Maxim Konovalov -BEG

Re: Missing SSL directives in ngx_stream_ssl_module

2015-11-18 Thread Maxim Konovalov
e > * ssl_stapling_responder > * ssl_stapling_verify > * ssl_trusted_certificate > * ssl_verify_client > * ssl_verify_depth > > Is there a reason why these are not included? Can we expect them being added? > The directives above cover several very different areas and use-

Re: Issue with HTTP/2 and async file upload from Safari on iOS

2016-06-06 Thread Maxim Konovalov
On 6/6/16 1:00 PM, A. Schulze wrote: > > Hello, > > I'm using horde and observe similar errors since some weeks. > Unsure if the same problem would be the reason. > > Maxim Konovalov: >> It was fixed in 1.11.0 two weeks ago. > > I found one patch 'preread_

Re: Issue with HTTP/2 and async file upload from Safari on iOS

2016-06-06 Thread Maxim Konovalov
On 6/6/16 10:53 AM, ZaneCEO wrote: > Thank you very much!! At least now I know what's going on! Let's wait for a > patch... > It was fixed in 1.11.0 two weeks ago. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.

Re: Problem

2016-06-03 Thread Maxim Konovalov
ncourage use to click on that website > link.) > Actually, a number of such complains is still surprisingly low. > I think another mistake is to have the error page indicate the rev > of nginx. That is an easy way for someone to spot a vulnerable rev > of the nginx on a serv

Re: TCP hostname routing using SNI

2016-06-20 Thread Maxim Konovalov
ll route TCP calls to a single host:port to different host:port combos > based on the hostname held in the SNI information. > Currently the stream (tcp/udp lb) module misses this feature. However, we do have it in the short-term roadmap and hope to have it implemented more or less soon. -

Re: udp balancing

2016-06-23 Thread Maxim Konovalov
e behaviour though: https://www.nginx.com/resources/admin-guide/tcp-load-balancing/#hash -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: udp balancing

2016-06-23 Thread Maxim Konovalov
e connection. > Not sure I understand your request. For tcp nginx balances new connections based on the configured load balancing discipline (rr by default). > Frank > > On Thursday, June 23, 2016, Maxim Konovalov <ma...@nginx.com > <mailto:ma...@nginx.com>> wrote: >

Re: load balancer on nginx : how to monitoring backend ?

2016-01-27 Thread Maxim Konovalov
t;>> >>> ___ >>> nginx mailing list >>> nginx@nginx.org >>> http://mailman.nginx.org/mailman/listinfo/nginx >>> >> >> ___ >> nginx mailing lis

Re: Building from source - Where is ./configure ?

2016-02-22 Thread Maxim Konovalov
On 2/22/16 2:56 PM, Evert Meulie wrote: > Hi all, > > I have obtained the sources via git > from https://github.com/nginx/nginx , but seem to be missing a > 'configure' script. > > Where/how do I get that? > http://hg.nginx.org/nginx/file/tip/auto/config

Re: proxy_bind pool

2016-02-19 Thread Maxim Konovalov
IPs for proxy_bind, or is there another workaround to have > more connections to upstream server farm? > Yes, it's possible -- proxy_bind supports variables (this support was added exactly for the use case above). -- Maxim Konovalov ___ nginx mailing l

Re: accept_filter being ignored

2016-02-19 Thread Maxim Konovalov
y; > listen [::]:80 accept_filter=http_ready; > listen 443 ssl accept_filter=data_ready; > listen [::]:443 ssl accept_filter=data_ready; > [...] They should be "httpready" and "dataready", see nginx.org/r/listen for more details. Also see man p

Re: Performance of NGINX on 16 instances vs 1 instance

2016-04-07 Thread Maxim Konovalov
t;worker_processes auto". http://nginx.org/r/worker_processes -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Workers CPU leak [epoll_wait,epoll_ctl]

2016-03-21 Thread Maxim Konovalov
nginx.org/pipermail/nginx-devel/2016-March/008012.html -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Vulnerability related Doubts in Nginx

2016-03-22 Thread Maxim Konovalov
sn't come from nginx.org. If you built your own package or compiled nginx from the nginx.org sources you are safe with 1.8.1. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Vulnerability related Doubts in Nginx

2016-03-22 Thread Maxim Konovalov
r we can move > forward with higher one ? > > > Any help will be appreciated! > Does it help? https://alas.aws.amazon.com/ALAS-2016-655.html -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Maxim Konovalov
On 3/1/16 3:46 PM, drhowarddrfine wrote: > Do you know why FreeBSD does not do this? Is there a technical reason to not > do that? > Just because you need someone to write this code for FreeBSD. -- Maxim Konovalov ___ nginx mailing l

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Maxim Konovalov
red in FreeBSD at this time? >>>>>> [...] > My point is that I would like to see more rigorous, bullet-proof > config parsing/testing on the part of nginx. This is one example. > We can agree to disagree on its importance to users. > This is definitely something that makes perfect sense. We will try to figure out how to fix it when time permits. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: TCP Connection

2016-03-04 Thread Maxim Konovalov
or less recent, i.e 1.9.2+, please run "nginx -T" command to collect the configuration. Otherwise just find a folder with the nginx configs and check for another error_log directives (e.g. grep -r error_log /etc/nginx/). Hope this helps, M

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Maxim Konovalov
on is supported. Especially if that support changes >> over >> time. > > I don't claim to know how "difficult" that would be, but with all > the extremely talented coders in the Nginx group, I would think that > "difficult" would not be a barrier to "doin

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Maxim Konovalov
On 3/1/16 4:08 PM, drhowarddrfine wrote: > Yes but is there a technical reason why it hasn't been done yet? Does > FreeBSD have a reason to not do it? Just because Linux did does not mean it > should be done. > Please approach FreeBSD developers. -- Max

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Maxim Konovalov
On 3/1/16 8:19 PM, Jim Ohlstein wrote: > Hello, > > On Mar 1, 2016, at 9:35 AM, Maxim Konovalov <ma...@nginx.com > <mailto:ma...@nginx.com>> wrote: > >> On 3/1/16 5:23 PM, Jim Ohlstein wrote: >>> Hello, >>> >>> On 3/1/16 8:34 AM, Andr

Re: Nginx as reverse proxy scalability

2016-05-10 Thread Maxim Konovalov
solutions are: > > - use UNIX domain sockets (this works when you have everything on > a single host); > > - add more local addresses on nginx side and use proxy_bind to > balance users between these addresses. > + https://www.nginx.com/blog/overcoming-ephemeral-port-ex

Re: Nginx as reverse proxy scalability

2016-05-10 Thread Maxim Konovalov
nginx > (not Nginx Plus). The blog post I sent has nothing -plus specific in this area. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: ngx_stream module build error on 1.11.3

2016-07-28 Thread Maxim Konovalov
Hi Dewangga, On 7/28/16 10:31 AM, Dewangga Bachrul Alam wrote: > Hello! > > I've tried to build nginx 1.11.3 with --with-stream module parameter, > but, attached below: > [...] That was already fixed. As a workaround you can add "--with-stream_ssl_module" to your c

Re: [nginx-announce] nginx-1.11.3

2016-07-26 Thread Maxim Konovalov
t; nginx mailing list > nginx@nginx.org <mailto:nginx@nginx.org> > http://mailman.nginx.org/mailman/listinfo/nginx > > > > > ___ > nginx mailing list > nginx@nginx.org > http://mailman.nginx.org/mailman/l

Fwd: [njs] Updated README to reflect changes in HTTP and Stream modules.

2016-07-21 Thread Maxim Konovalov
$foo and $bar variables and set JavaScript +# functions foo() and bar() from the included JavaScript +# file as their handlers +js_set $foo foo; +js_set $bar bar; + +return $foo-$bar; + } +}

Re: enable reuseport then only one worker is working?

2017-01-28 Thread Maxim Konovalov
forum.nginx.org/read.php?2,264913,272170#msg-272170 > > ___ > nginx mailing list > nginx@nginx.org > http://mailman.nginx.org/mailman/listinfo/nginx > -- Maxim Konovalov ___ nginx

Re: SSL Offloading in UDP load

2017-02-09 Thread Maxim Konovalov
Hello, On 1/13/17 10:46 PM, Maxim Konovalov wrote: > On 1/13/17 12:51 PM, nginxsantos wrote: >> Thanks Maxim. >> I am looking for a scenario to load balance the LWM2M server (my backend >> servers would be LWM2M Servers). I am thinking of using the Nginx UDP >> loadbal

Re: No HTTPS on nginx.org by default

2016-08-22 Thread Maxim Konovalov
mailman.nginx.org/mailman/listinfo/nginx > <http://mailman.nginx.org/mailman/listinfo/nginx> > > > > > ___ > nginx mailing list > nginx@nginx.org > http://mailman.nginx.org/mailman/listinfo/nginx > -- Maxim Konovalov Join us at nginx.conf, Sept. 7-9, Austin, TX: http://nginx.com/nginxconf ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: No HTTPS on nginx.org by default

2016-08-24 Thread Maxim Konovalov
On 8/22/16 8:30 PM, Maxim Konovalov wrote: > On 8/22/16 8:23 PM, Richard Stanway wrote: >> See https://nginx.org/en/linux_packages.html#stable >> >> PGP key links are hard coded to http URLs: >> >> >> For Debian/Ubuntu, in order to authent

Re: No HTTPS on nginx.org by default

2016-08-25 Thread Maxim Konovalov
On Wed, Aug 24, 2016 at 1:58 PM, Maxim Konovalov <ma...@nginx.com > <mailto:ma...@nginx.com>> wrote: > > On 8/22/16 8:30 PM, Maxim Konovalov wrote: > > On 8/22/16 8:23 PM, Richard Stanway wrote: > >> See https://nginx.org/en/linux_

Re: No HTTPS on nginx.org by default

2016-08-22 Thread Maxim Konovalov
On 8/22/16 8:15 PM, Richard Stanway wrote: > Could you at least fix the https download page, so it doesn't > directly link to a HTTP PGP key? > It works correctly: https://nginx.org/en/download.html > On Mon, Aug 22, 2016 at 6:49 PM, Maxim Konovalov <ma...@nginx.com > <m

Re: No HTTPS on nginx.org by default

2016-08-22 Thread Maxim Konovalov
n when I can't download new version of > OpenSSL using old > version of OpenSSL is ridiculous, but they have configured > openssl.org <http://openssl.org> that way. > How I supposed to use Internet then? > > wbr, Valentin V. Bartenev > -- Maxim Konovalov Join us at nginx.conf, Sept. 7-9, Austin, TX: http://nginx.com/nginxconf ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: No HTTPS on nginx.org by default

2016-08-23 Thread Maxim Konovalov
On 8/23/16 4:15 PM, B.R. wrote: > On Mon, Aug 22, 2016 at 6:49 PM, Maxim Konovalov > <ma...@nginx.com <mailto:ma...@nginx.com>> wrote: > On 8/22/16 7:41 PM, B.R. wrote: > > In 2016, stating that content served over HTTP is 'secure' blows my > >

Re: Are there plans for Nginx supporting HTTP/2 server push?

2016-11-08 Thread Maxim Konovalov
ted. > Not plus vs community. Are there any plans on releasing the server > push feature for the community version? > > On Tue, Nov 8, 2016 at 6:00 PM, Maxim Konovalov <ma...@nginx.com > <mailto:ma...@nginx.com>> wrote: > > Andrei, > > On 11/8/16 6:53

Re: Are there plans for Nginx supporting HTTP/2 server push?

2016-11-08 Thread Maxim Konovalov
if not some > extraordinary delays with this feature as well considering it's > marketing appeal and profit. You're better off doing like > CloudFlare, and investing in some dev time if you want push > support in the community version any time soon. The ground

Re: Are there plans for Nginx supporting HTTP/2 server push?

2016-11-08 Thread Maxim Konovalov
...] Yes, right, partially because HTTP/2 push was never "the primary boost" for HTTP/2 but I agree that different people at different time can have very different ideas about the same thing. I'd also encourage to read the comments in this blog post. -- Maxim Konovalov

Re: Use nginx ngx_stream_ssl_preread_module to connect to ocserv using proxy protocol v2

2016-12-16 Thread Maxim Konovalov
the binary header preamble. Can > someone confirm? > > https://thomas.glanzmann.de/tmp/nginx.pcap > Yes, that's right -- no support for the proxy proto v2. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: access_logging in the stream block

2016-12-15 Thread Maxim Konovalov
:22 > > I also tried adding a log_format section in the event that was required. Any > advice/suggestions welcome. > You are probably using an old version of nginx -- ngx_stream_log_module was added in nginx-1.11.4. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: SSL Offloading in UDP load

2017-01-13 Thread Maxim Konovalov
> UDP. So, I was thinking if I could offload the DTLS traffic here. > > Any thoughts? > OK, thanks for sharing this. Indeed, we do have this item in the stream module roadmap. I wouldn't promise any ETA for this specific feature, still need to figure out the demand for it from the communi

Re: upstream timeouts I can not explain

2017-01-11 Thread Maxim Konovalov
sendfile2-to-freebsd/ -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: SSL Offloading in UDP load

2017-01-12 Thread Maxim Konovalov
Hello, On 1/12/17 2:26 PM, nginxsantos wrote: > Hi, > > Does the opensource Nginx support DTLS offloading when acting as an UDP > loadbalancer? > It doesn't. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.ng

Re: SSL Offloading in UDP load

2017-01-12 Thread Maxim Konovalov
On 1/12/17 2:30 PM, Maxim Konovalov wrote: > Hello, > > On 1/12/17 2:26 PM, nginxsantos wrote: >> Hi, >> >> Does the opensource Nginx support DTLS offloading when acting as an UDP >> loadbalancer? >> > It doesn't. > Btw, it would be usefu

Re: NGINX Support for version 1.9.4

2017-03-21 Thread Maxim Konovalov
s communication has been maintained and nor is > this communication free of viruses, interceptions or > interference".'. If the disclaimer can't be applied, attach the > message to a new disclaimer message. > > > > _____

Re: HTTP To TCP Conversion

2017-03-22 Thread Maxim Konovalov
ives the > HTTP messages, it will parse the message and then put to those registerd TCP > clients. Any idea how can this be done. > Thanks, Santos > I'd check if nchan module suits your needs. -- Maxim Konovalov ___ nginx mailin

Re: nginx-mail and proxy protocol

2017-04-20 Thread Maxim Konovalov
On 20/04/2017 17:41, Kees Bos wrote: > On do, 2017-04-20 at 17:12 +0300, Maxim Konovalov wrote: >> Hi Kees, >> >> On 20/04/2017 17:06, Kees Bos wrote: >>> >>> Hi all, >>> >>> Does someone have experience with nginx-mail and the proxy &

Re: nginx-mail and proxy protocol

2017-04-20 Thread Maxim Konovalov
. There were no plans for that basically because nobody asked before. What's your backend software which supports proxy proto? Thanks, Maxim -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Reverse Proxy with 500k connections

2017-03-09 Thread Maxim Konovalov
h slot could > get out of balance > over time. > > > On Wed, Mar 8, 2017 at 3:20 AM, Maxim Konovalov <ma...@nginx.com> wrote: >> On 3/7/17 10:50 PM, larsg wrote: >>> Hi, >>> >>> we are operating native nginx 1.8.1 on RHEL as a reverse proxy. >&

Re: Reverse Proxy with 500k connections

2017-03-08 Thread Maxim Konovalov
;>>> >>>> >>>> I’m not sure if you can proxy web socket connections like http-connections. >>>> >>>> After all, they are persistent (hence the large number of connections). >>>> >>>> Why can’t you (OP) do the upgrade to 1.10? I thought it’s the only >>>> „supported" version anyway? >>>> >>>> >>>> >>>> >>>> >>>> ___ >>>> nginx mailing list >>>> nginx@nginx.org >>>> http://mailman.nginx.org/mailman/listinfo/nginx >>> ___ >>> nginx mailing list >>> nginx@nginx.org >>> http://mailman.nginx.org/mailman/listinfo/nginx >> >> ___ >> nginx mailing list >> nginx@nginx.org >> http://mailman.nginx.org/mailman/listinfo/nginx > ___ > nginx mailing list > nginx@nginx.org > http://mailman.nginx.org/mailman/listinfo/nginx > -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Reverse Proxy with 500k connections

2017-03-08 Thread Maxim Konovalov
rally: to overcome the 64k problem? > We ever wrote a blog post for you! https://www.nginx.com/blog/overcoming-ephemeral-port-exhaustion-nginx-plus/ As a side note: I'd really encourage all of you to add our blog rss to your feeds. While there is some marketing "

Re: Modsecurity dynamic module with Nginx-plus

2017-08-10 Thread Maxim Konovalov
/www.nginx.com/resources/admin-guide/nginx-plus-modsecurity-waf-installation-logging/ https://www.nginx.com/blog/compiling-and-installing-modsecurity-for-open-source-nginx/ -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Modsecurity dynamic module with Nginx-plus

2017-08-10 Thread Maxim Konovalov
x-oss source to compile dynamic modules for nginx-plus. https://www.nginx.com/blog/compiling-dynamic-modules-nginx-plus/ -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Health checks and reloads

2017-04-26 Thread Maxim Konovalov
to approach -plus support channel. You can open a support ticket just by forwarding this email. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Proxy LDAP port TCP 389

2017-06-19 Thread Maxim Konovalov
/192.168.183.20:389>"" > > > Any ideas? Out of the blue: this is your local packet filter/firewall rules. By the way, it makes sense to approach nginx-plus support channel with such questions. Best regards, Maxim -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: UDP Load balancer does not scale

2017-05-22 Thread Maxim Konovalov
metrics for any obvious limits. Also, it makes sense to read the following great slides about udp perf tuning from Toshiaki Makita from NTT: http://textlab.io/doc/15478046/boost-udp-transaction-performance -- Maxim Konovalov ___ nginx mai

Re: [ANN] OpenResty 1.11.2.3 released

2017-05-05 Thread Maxim Konovalov
ons! We wish you and all your team success with your project. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Stable version release date for 1.13.X

2017-10-16 Thread Maxim Konovalov
line in production. -- Maxim Konovalov "I'm not a software developer, but it doesn't seem as rocket science" ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx-plus and nginx-asg-sync

2018-04-27 Thread Maxim Konovalov
Hi Matthew, If you are nginx-plus customer it makes sense to open a support ticket. Thanks, Maxim -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx-plus and nginx-asg-sync

2018-04-27 Thread Maxim Konovalov
; from my upstream config. I was trying without the > 64k. > > > On 27/04/2018 19:36, Maxim Konovalov wrote: >> Hi Matthew, >> >> If you are nginx-plus customer it makes sense to open a support ticket. >> >> Thanks, >> >> Maxim >> >

nginx is hiring: tech writer position for the -unit project

2018-05-31 Thread Maxim Konovalov
option available at this time. Thanks, Maxim -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx-1.15.0

2018-06-05 Thread Maxim Konovalov
2 release is anticipated this week. Maxim -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx-1.15.0

2018-06-05 Thread Maxim Konovalov
't see this mentioned in the release notes? > You are probably talking about nginx-unit project, right? -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: TCP load balancing with domain name

2018-06-21 Thread Maxim Konovalov
ny nginx variable in stream which > supports hostname i am connecting. > This is simple not possible. TCP doesn't have any signs of the original domain name that was used for connect(2) on the client side. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Where can I find nginScript shell

2018-01-06 Thread Maxim Konovalov
cy":"brick dust"}, > {"name":"blue","fancy":"sea spray"}]}'; >>> var my_object = JSON.parse(my_data); >>> my_object.colors[1].fancy; > sea spray >>> > > > I found this in https://ww

Re: NTLM

2018-01-10 Thread Maxim Konovalov
pp/conf:4> > > > This is my version: > > nginx version: nginx/1.12.2 > > > What do I make wrong? Since version 1.9.2 this option should be > possible. > It is a part of paid version. From nginx.org/r/ntlm: "This directive

Re: How is the progress to support DTLS

2018-02-09 Thread Maxim Konovalov
us about the progress of releasing the official feature? And is > it being supported in Nginx Plus? > have you tested the patch? Any feedback? Thanks, Maxim -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: How to distinguish between nginx and nginx plus ?

2018-02-15 Thread Maxim Konovalov
On 15/02/2018 14:50, Akhil Dangore wrote: > Hello Team, > > Is there any to distinguish between nginx and nginx plus except > "version check"(nginx -v)  ? > Yes, there is. This is -plus: $ nginx -v nginx version: nginx/1.13.7 (nginx-*plus*-r14

  1   2   3   4   >