Re: 504 gateway timeouts

On 12/27/2017 2:03 PM, Wade Girard wrote: I am using nginx on an ubuntu server as a proxy to a tomcat server. The nginx server is setup for https. I don't know how to determine what version of nginx I am using, but I install it on the ubuntu 1.16 server using apt-get. Run:  nginx -v I

Re: conflicting rules

And you're sure about the CaSe, right?  I notice that everything is lowercase for you except for the Scripts directory. On 10/5/2017 12:15 PM, shiz wrote: 1 - If I disable that section #location ~* ^.+\.(css|js)$|^/(css|Scripts|uploads)/ { #expires -1; #access_log off; #log_not_found off;

Re: conflicting rules

On 10/5/2017 11:40 AM, shiz wrote: Thanks, unfortunately it does not work Did you reload the config after you modified it? Igal Sapir Lucee Core Developer Lucee.org ___ nginx mailing list nginx@nginx.org

Re: conflicting rules

Hi, On 10/5/2017 11:25 AM, shiz wrote: I exclude the stylesheets and javascript from the logs to alleviate them. However I would want to make an exception for awstats. So far the following doesn't work. Any help? location ~* ^/Scripts/awstats_misc_tracker.js { access_log on; }

Re: Nginx CPU Issue : Remain at 100%

Hello, On 9/30/2017 12:43 AM, Yogesh Sharma wrote: Thank you Valentin. Will give a chance. On Fri, 29 Sep 2017 at 5:20 PM, Valentin V. Bartenev > wrote: On Friday, 29 Sep 2017 14:38:58 MSK Yogesh Sharma wrote: > Team, > > I am using

Re: Nginx Address is already in use

Try the following to find which process listens on port 80: sudo netstat -tulpn | grep ':80 ' Igal Sapir Lucee Core Developer Lucee.org On 7/30/2017 6:48 PM, spectre inc wrote: Is there contact email so I can give it my head tech Sent from my iPhone On Jul 30, 2017,

Re: Buffering issues with nginx

my problem is that response that my node app (upstream server) generates is buffered by nginx. Generate the following header from node: X-Accel-Buffering: no That will disable nginx's buffering for the request. Igal Sapir Lucee Core Developer Lucee.org

Re: nginx hogs cpu on Windows

Downgrading to 1.12.0 did not help. The server ran fine for about 12 hours and then the problem started again. On 6/12/2017 3:39 PM, Igal @ Lucee.org wrote: Hello, I've noticed a few times already that after running for some time nginx hogs a CPU thread. The machine has 8 CPU threads, so

Re: Quinceanera nevada

nginx/2016-June/050919.html. That thread was all kinds of wonderful. On Tue, Jun 13, 2017 at 8:36 AM, Igal @ Lucee.org <i...@lucee.org <mailto:i...@lucee.org>> wrote: On 6/13/2017 7:16 AM, Yadira Gallego wrote: Hello my name is Yadira and I want to sign up my twins

Re: Quinceanera nevada

On 6/13/2017 7:16 AM, Yadira Gallego wrote: Hello my name is Yadira and I want to sign up my twins for the cover page, can I get information please. Thank you You have come to the right place...?!@# ___ nginx mailing list nginx@nginx.org

nginx hogs cpu on Windows

Hello, I've noticed a few times already that after running for some time nginx hogs a CPU thread. The machine has 8 CPU threads, so when the problem happens I see in Task Manager that nginx takes 12% or 13% (consistent with a full 1/8 of CPU power). Issuing a reload fixes the problem

Re: Nginx rule for subdomains: ERR_TOO_MANY_REDIRECTS

That wasn't the issue though. The issue is that you don't have a prefix location for /index.cfm as described in my previous post. Igal On 6/9/2017 12:06 PM, iivan wrote: Hi Igal, The lucee proxy is configured correctly: https://gist.github.com/ivanionut/c4339b4006fa1bf8e12c3ba7be9ee0bc I

Re: Nginx rule for subdomains: ERR_TOO_MANY_REDIRECTS

Hi, On 6/9/2017 12:11 AM, Francis Daly wrote: On Thu, Jun 08, 2017 at 03:59:19AM -0400, iivan wrote: Here's the full configuration file: https://gist.github.com/ivanionut/946468ce86086a55937e92c7249e3ed7 That shows that the "if/rewrite" that you showed previously is within "location / {}",

Re: Nginx rule for subdomains: ERR_TOO_MANY_REDIRECTS

On 5/31/2017 2:58 AM, iivan wrote: I updated nginx to version 1.13.0 This rule that was working correctly right now makes me mistake in the browser: ERR_TOO_MANY_REDIRECTS if ($host ~* ^(.*)\.website\.com$) { set $sub_domain $1; rewrite ^/(.*)?$

Re: How to restrict acces to specific friendly URL by IP in Wordpress site?

On 5/19/2017 4:02 PM, li...@lazygranch.com wrote: https://httpstatuses.com/444 A non-standard status code used to instructnginx to close the connection without sending a response to the client, most commonly used to deny malicious or malformed requests. This status code

Re: How to restrict acces to specific friendly URL by IP in Wordpress site?

On 5/19/2017 3:44 PM, li...@lazygranch.com wrote: I would return nothing, that is the 444 code. There is no such thing as the "444" code. It is an arbitrary number that was chosen because it is not used by the http specs. You might as well use 456, 499, or anything that is not defined.

Re: How to restrict acces to specific friendly URL by IP in Wordpress site?

On 5/19/2017 3:14 PM, Alex Samad wrote: On 20 May 2017 at 08:00, > wrote: My experience with deny in nginx is the url isn't hidden So you don't want to just restrict access but you want to send a 404 not found unless they come from a

Re: How to restrict acces to specific friendly URL by IP in Wordpress site?

Hello, On 5/19/2017 12:24 AM, ohmykot wrote: What I tried so far in my website config: [code] location ~* ^/secret-page/ { allow 1.1.1.1; deny all; } [/code] But this didn't work. It returns 404 error when I try to open this page from allowed IP. Looks like it tried to find the real file or

Re: unable to log upstream_bytes_sent

Chad, On 5/1/2017 1:05 PM, Chad Hansen via nginx wrote: Bumping; does anyone have experience using upstream_bytes_sent or upstream_byes_received? nginx: [emerg] unknown "upstream_bytes_sent" variable nginx: configuration file /etc/nginx/nginx.conf test failed It's unclear to me

Re: Blocking all URIs except for one directory

Maxim, Thank you for your help, as always! On 4/26/2017 5:50 AM, Maxim Dounin wrote: Hello! On Tue, Apr 25, 2017 at 12:50:24PM -0700, Igal @ Lucee.org wrote: Hello, I want to secure a site using the allow/deny directives so that only allowed networks will be able to access

Blocking all URIs except for one directory

Hello, I want to secure a site using the allow/deny directives so that only allowed networks will be able to access it. There is one "public" directory, however, that I want to be accessible for everyone. nginx serves as a reverse proxy on that site, and requests for URIs that end with the

Re: HTTP/2 on the Upstream

Maxim, On 4/13/2017 8:07 AM, Maxim Dounin wrote: Note: there is no HTTP/2 push support in nginx as of now. If you indeed see the resources being pushed with the "Link" header, likely you are using cloudflare and this is something Cloudflare does for you. Thank you for clarifying. That did

Re: Windows 1024 Connections Limit

Hi, On 4/13/2017 12:54 AM, B.R. via nginx wrote: Even though using nginx on Windows goes way over my head (even for development) and/or seing WIndows as any kind of server, It's very simple - this system was set up many years ago and I was uncomfortable at the time with running Linux -- not

Re: HTTP/2 on the Upstream

Hello, On 4/12/2017 12:59 PM, Maxim Dounin wrote: It's just a matter of providing upstream servers with a way to push resources, e.g., via something like the X-Accel-Push header or something like this. This doesn't need HTTP/2 between nginx and upstream servers. On 4/12/2017 2:13 PM, Igal

Re: HTTP/2 on the Upstream

Thank you, Maxim and Valentin, for your prompt replies. I will reply here to both so that we can maintain a single thread for this issue: On 4/12/2017 12:57 PM, Valentin V. Bartenev wrote: Server Push doesn't require HTTP/2 from the Upstream side. Moreover, upstream usually don't have

HTTP/2 on the Upstream

According to https://www.nginx.com/blog/http2-module-nginx/#QandA nginx only supports HTTP/2 on the client side, but it is possible to configure proxy_pass to use HTTP/2. There is a huge benefit in supporting HTTP/2 on the Upstream, as that will allow the Upstream servers to perform HTTP/2

Re: Windows 1024 Connections Limit

Maxim, On 4/12/2017 5:57 AM, Maxim Dounin wrote: On Windows, nginx uses select() system call to handle connection events. This syscall implies fixed-size bitmasks to pass file descriptors from userland to kernel and back. Size of these bitmasks can be only specified during compilation, and

Windows 1024 Connections Limit

Is there a technical reason for the 1,024 Connections Limit on Windows? http://nginx.org/en/docs/windows.html#known_issues Surely the OS can handle many more connections than that. This is not much of an issue with regular requests, but when you use WebSockets you can run out of connections

Re: Primeknit version with the NMD can be confirmed

Moderator?? On 3/21/2017 10:09 PM, MM520 wrote: Please take a closer search top inside the gallery and you should definitely let you know down below, Which colorway is the best favorite. as the fulllength plastic sole unit is enhanced having BOOST properties. The emblem undoubtedly adds a

Re: http/2 for Windows

rifies on things. I don't know if Maxim Dounin can tell us if Nginx Windows builds on the nginx.org site will have these problems ( http://nginx.org/en/docs/windows.html#known_issues ) fixed like itpp2012 fixed for us anytime soon ? Igal @ Lucee.org

Re: Tomcat EOFException when nginx is Reverse Proxy for WebSockets

Yup. That was it. Thanks! I also found this related post: http://stackoverflow.com/questions/10550558/nginx-tcp-websockets-timeout-keepalive-config Igal Sapir Lucee Core Developer Lucee.org On 3/21/2017 2:33 AM, Reinis Rozitis wrote: Any ideas? Try to increase the

Re: nginx-1.11.11

That was fast! C:\nginx-1.11.11>nginx.exe -V nginx version: nginx/1.11.11 built by cl 16.00.40219.01 for 80x86 built with OpenSSL 1.0.2k 26 Jan 2017 TLS SNI support enabled configure arguments: --with-cc=cl --builddir=objs.msvc8 --with-debug --prefix= --conf-path=conf/nginx.conf

Re: http/2 for Windows

Hi, On 3/21/2017 7:10 AM, c0nw0nk wrote: I have used his builds you can download them for free... I didn't see a download link at http://nginx-win.ecsds.eu/ other than the commercial subscription Just like nginx mainline builds from nginx.org But specific custom features cost money just

Re: http/2 for Windows

Awesome! Thank you, Maxim :) Igal Sapir Lucee Core Developer Lucee.org <http://lucee.org/> On 3/21/2017 7:41 AM, Maxim Dounin wrote: Hello! On Mon, Mar 20, 2017 at 12:32:00PM -0700, Igal @ Lucee.org wrote: Is there a technical reason why the Windows binaries do not include the

Re: Tomcat EOFException when nginx is Reverse Proxy for WebSockets

Well, in both issues nginx closes the connection prematurely, so the exception in Java is similar, but they are very different issues. I suspect that this issue is specific to WebSocket proxying. I am connecting locally both through nginx (on port 80) and directly to Tomcat (on port 8080),

Re: http/2 for Windows

Thank you, but that's a commercial solution and your reply did not answer my question of whether there is a technical reason for the Windows binaries not including http/2 or not. TBH, I will switch to Linux long before I pay 500 EUR per year with those restrictions. Igal Sapir Lucee Core

Tomcat EOFException when nginx is Reverse Proxy for WebSockets

I am getting an EOFException after a couple of minutes when connecting via nginx that acts as reverse proxy. I am running Windows 2008R2 server, with Tomcat 8.5.12, and nginx 1.11.10 When connecting directly to Tomcat I do not see this issue, but direct connection is locally (i.e. network

http/2 for Windows

Hi, Is there a technical reason why the Windows binaries do not include the http/2 option? I understand that it's advised to use Linux, but that's not always an option. Thanks, Igal Sapir Lucee Core Developer Lucee.org ___

Re: upload xml file

wrote: On Mar 11, 2017 9:04 PM, "Igal @ Lucee.org" <i...@lucee.org <mailto:i...@lucee.org>> wrote: > > Ran, > > You would probably want to use an Application Server behind the Web Server (nginx). Then you would use the nginx to proxy the request to the appl

Re: upload xml file

Ran, You would probably want to use an Application Server behind the Web Server (nginx). Then you would use the nginx to proxy the request to the application server, where you can write code in the language that the application server supports (for example, I use Lucee as an application

Re: convert $msec to sec

On 4/3/2016 8:10 AM, Anoop Alias wrote: Thanks Valentin. That works. Can you explain see http://nginx.org/en/docs/http/ngx_http_map_module.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Building nginx from Source on Windows

2#9464: *1 connection already closed while waiting for request, client: 127.0.0.1, server: 0.0.0.0:8080 On 12/26/2015 10:14 PM, Igal @ Lucee.org wrote: Hi, I posted a question at http://stackoverflow.com/questions/34478016/building-nginx-from-source-on-windows -- copied below: I'm tryin

Re: [Announcement] New book about Nginx

+1 (intentionally top-posted) I'd like to take this opportunity to thank the nginx team for all of their time and hard work that they've put into their product. I, for one, completely understand that it's impossible to pay the bills with FOSS exclusively, and I welcome the occasional

Re: preventing requests with unknown host names

@ Lucee.org wrote: On 8/20/2015 3:55 PM, Igal @ Lucee.org wrote: Hi there, I do not know the full answer to your question. when I tried to add listen for port 443 it broke the https for requests with the valid hostname as well. ## disable http server for requests with unknown hosts server

Re: preventing requests with unknown host names

On 8/21/2015 4:49 AM, navern wrote: On 21.08.2015 10:30, Francis Daly wrote: On Thu, Aug 20, 2015 at 11:35:58PM -0700, Igal @ Lucee.org wrote: On 8/20/2015 3:55 PM, Igal @ Lucee.org wrote: Hi there, I do not know the full answer to your question. when I tried to add listen for port 443

Re: preventing requests with unknown host names

So while this worked well for port 80: On 8/20/2015 3:55 PM, Igal @ Lucee.org wrote: Thank you, Francis. For each listen directive with a unique ip:port, add one server{} block which contains listen ip:port default_server; return 444; This seems to do the trick. when I tried to add listen

Re: preventing requests with unknown host names

Thank you, Francis. For each listen directive with a unique ip:port, add one server{} block which contains listen ip:port default_server; return 444; This seems to do the trick. I expected there to be a way to do all of the IP addresses at once. Thanks for your help! Igal On 8/20/2015

preventing requests with unknown host names

I want to disable processing of all requests that do not have a valid hostname I'm tried to follow the advice on: http://nginx.org/en/docs/http/request_processing.html#how_to_prevent_undefined_server_names so I have (inside http directive): server { listen 80;

proxy_set_header concatenated value

hi, I want to pass the following header to the backend server: name: X-Original-URL value: $scheme://$host$request_uri but the concatenation of the values for the value above do not seem to work. how can I do that? thanks, -- Igal Sapir Lucee Core Developer Lucee.org

Re: Free O’Reilly animal book about nginx

this is awesome news! congrats!!! the download link is broken though (404). Igal Sapir Lucee Core Developer Lucee.org http://lucee.org/ On 7/30/2015 12:34 PM, Igor Sysoev wrote: Nearly 20 years ago I read my first O’Reilly book, Learning Perl. Back then I never would have dreamed

Re: [ANN] Windows nginx 1.9.3.1 Lizard

On 7/10/2015 12:07 PM, itpp2012 wrote: Based on nginx 1.9.3 (10-7-2015) with; is there a release for nginx 1.9.3 (non-Lizard)? I do not see it at http://nginx.org/en/download.html thanks, Igal Sapir Lucee Core Developer Lucee.org http://lucee.org/ On 7/10/2015 12:07 PM, itpp2012 wrote:

Re: [ANN] Windows nginx 1.9.3.1 Lizard

On 7/10/2015 1:12 PM, itpp2012 wrote: This nginx for Windows does not come from nginx.org right, but it says that it is based on nginx 1.9.3 which I can not find anywhere, so my question is: was nginx 1.9.3 released already or not yet? ___ nginx

Re: SSL Session Cache on Windows

with that setting for now. Thanks again, Igal On 5/16/2015 8:31 PM, Maxim Dounin wrote: Hello! On Fri, May 15, 2015 at 12:30:11PM -0700, Igal @ Lucee.org wrote: hi, I know that in the past the directive: ssl_session_cache shared:SSL:1m; did not work on Windows. in nginx 1.9.0 I see

Re: SSL cert issues with mobile devices

, Igal @ Lucee.org wrote: I have an issue with my SSL certificate on some mobile devices, e.g. Safari on iPhone and Firefox on Android. Everything seems to be fine with desktop browsers as well as some mobile browsers (works fine on Chrome on Android). According to ssllabs.com the issue

SSL cert issues with mobile devices

I have an issue with my SSL certificate on some mobile devices, e.g. Safari on iPhone and Firefox on Android. Everything seems to be fine with desktop browsers as well as some mobile browsers (works fine on Chrome on Android). According to ssllabs.com the issue is with the Certificate Chain

Reverse Proxy for SNMP

hi, can it be used as reverse proxy for any protocol or is it limited to http(s) and smtp? I'm trying to setup a reverse proxy for SNMP for the purpose opening remote SNMP access and using the proxy for whitelisting IPs etc. is that possible? TIA Igal