Re: Port numbers in the access or error logs ?

2022-09-13 Thread Lucas Rolff
Yes, it’s documented in http://nginx.org/en/docs/http/ngx_http_core_module.html#variables $remote_port is probably what you’re after. On 13 Sep 2022, at 20:24, Michael Williams mailto:michael.glenn.willi...@totalvu.tv>> wrote: Is there a way to include the request port number in each line of

Re: Slice module 206 requirement

2022-07-10 Thread Lucas Rolff
You’re truly awesome! I’ll give the patch a try tomorrow - and thanks for the other bits and pieces of information, especially regarding the expectations as well. I wish you an awesome Sunday! Best Regards, Lucas Rolff > On 10 Jul 2022, at 10:35, Maxim Dounin wrote: > > Hello! &g

Slice module 206 requirement

2022-07-08 Thread Lucas Rolff
olution other than disabling slice when an origin returns 200 OK for files smaller than the slice size. Thanks in advance Best Regards, Lucas Rolff ___ nginx mailing list -- nginx@nginx.org To unsubscribe send an email to nginx-le...@nginx.org

Re: Strange problem with expires?

2022-03-01 Thread Lucas Rolff
= is for exact matches, so unless your static file is called / - it obviously won’t match that exact location. No modifier (so no =) means it’s a prefix Get Outlook for iOS From: Grzegorz Kulewski Sent: Wednesday, March 2, 2022 4:40:48 AM

Re: Memory usage in nginx proxy setup and use of min_uses

2021-05-19 Thread Lucas Rolff
useless that way. Best Regards, Lucas Rolff On 18/05/2021, 03.27, "nginx on behalf of Maxim Dounin" wrote: Hello! On Mon, May 17, 2021 at 07:33:43PM +, Lucas Rolff wrote: > Hi Maxim! > > > - The attack you are considering is not about "pois

Re: Memory usage in nginx proxy setup and use of min_uses

2021-05-17 Thread Lucas Rolff
st help mitigate) the above from happening. It makes things just a tad harder to cause troubles. Best Regards, Lucas Rolff On 17/05/2021, 21.06, "nginx on behalf of Maxim Dounin" wrote: Hello! On Mon, May 17, 2021 at 02:47:33PM +, Lucas Rolff wrote: > Hi Maxim, &

Re: Memory usage in nginx proxy setup and use of min_uses

2021-05-17 Thread Lucas Rolff
f the cache key, but still ideally prevent memory poisoning as above - the inactive flag for min_uses would be pretty useful for this - while it won't prevent it fully, we'd still be able to somewhat control memory even if people are trying to do the cache/memory poisoning. Best Regards, Lucas Ro

Memory usage in nginx proxy setup and use of min_uses

2021-05-16 Thread Lucas Rolff
out the memory for example, for anything that haven’t yet reached the proxy_cache_min_uses if it indeed uses up memory. Best Regards, Lucas Rolff ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: LiteSpeed 5.4 vs Nginx 1.16 benchmarks

2019-08-18 Thread Lucas Rolff
> Misconfigure Nginx Which parts are misconfigured? If I run the tests and tweak it to use CloudFlares suggested SSL settings for example then it still doesn’t really change anything. And I’d assume CloudFlare want good SSL performance. So I’m curious what settings would be configured wrong,

Re: Do nginx 1.14 and 1.17 have compatible configuration file formats?

2019-07-15 Thread Lucas Rolff
I would say, install a box with 1.17, copy your config, and do a config test to see if it works  From: nginx on behalf of "Zheng, Qi" Reply-To: "nginx@nginx.org" Date: Monday, 15 July 2019 at 10.46 To: "'nginx@nginx.org'" Subject: RE: Do nginx 1.14 and 1.17 have compatible configuration

Re: I'm about to embark on creating 12000 vhosts

2019-02-12 Thread Lucas Rolff
In haproxy, you simply specify a path where you have all your certificates. frontend https_frontend bind *:443 ssl crt /etc/haproxy/certs/default-cert.pem crt /etc/haproxy/certs alpn h2,http/1.1 This way, haproxy will read all certs, and when stuff comes in, it uses the host header to

Re: .service ExecStartPre in example

2019-01-11 Thread Lucas Rolff
There's nothing wrong with testing the configuration before starting the web server. The config is tested during restart, by the ExecStartPre. If you modify a config and you want to restart, you should execute nginx -t prior to restarting your service - but generally you'd want to use nginx -s

Re: Byte-range request not possible for proxy_cache if origin doesn't return accept-ranges header

2018-11-14 Thread Lucas Rolff
n Wed, Nov 14, 2018 at 02:36:10PM +0000, Lucas Rolff wrote: > Hi guys, > > I've been investigating why byte-range requests didn't work for files that are cached in nginx with proxy_cache, I'd simply do something like: > > $ curl -r 0-1023 https://c

Byte-range request not possible for proxy_cache if origin doesn't return accept-ranges header

2018-11-14 Thread Lucas Rolff
t; the cached file to contain the "Accept-Ranges: bytes" header, to be able to do range requests to it? Thanks in advance! Best Regards, Lucas Rolff ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Please DO NOT add [nginx] to subject

2018-10-15 Thread Lucas Rolff
Might be important to mention that services such as exchange doesn’t support subaddressing, so it’s a bit harder there :) With that said, I’d love [nginx] in the header, regardless if it breaks DKIM or similar, I have mailing lists whitelisted anyway for that exact reason, because there’s

Re: Avoiding Nginx restart when rsyncing cache across machines

2018-09-13 Thread Lucas Rolff
t returns 304 not modified (plus some more headers). Best Regards, Lucas Rolff ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Avoiding Nginx restart when rsyncing cache across machines

2018-09-13 Thread Lucas Rolff
rigin traffic (e.g. because of having a lot of “edge servers”) – if you’re like 10 servers, I wouldn’t even consider a secondary layer unless your origin is under heavy load and can’t handle 10 possible clients (CDN Servers). Best Regards, Lucas Rolff ___

Re: Avoiding Nginx restart when rsyncing cache across machines

2018-09-12 Thread Lucas Rolff
Can I ask, why do you need to start with a warm cache directly? Sure it will lower the requests to the origin, but you could implement a secondary caching layer if you wanted to (using nginx), so you’d have your primary cache in let’s say 10 locations, let's say spread across 3 continents (US,

Re: reverse proxy https not working

2018-08-26 Thread Lucas Rolff
s then it’s all OK anyway, I don’t know the specific case when it will and will not work – so I by default set $request_uri because it works in 99% of the cases, and I’ll only modify it if another behaviour is required. Best Regards, Lucas Rolff From: nginx on behalf of "Jungersen, Danj

Re: reverse proxy https not working

2018-08-26 Thread Lucas Rolff
onally, if your software uses Location or Refresh headers, then you might want to look into proxy_redirect ( http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_redirect ) to rewrite this on the “return” to the user. Best Regards, Lucas Rolff From: nginx on behalf of "Jungersen,

Re: reverse proxy https not working

2018-08-26 Thread Lucas Rolff
Which functions do not work? Be aware some software (WordPress being a good example) doesn’t always work with reverse proxies that easy. Could you possibly include your nginx configuration? Especially your proxy parts. From: nginx on behalf of "Jungersen, Danjel - Jungersen Grafisk ApS"

Re: proxy_cache_background_update leads to 200 ms delay

2018-07-07 Thread Lucas Rolff
It's not a combination of tcp_nopush and proxy_cache_background_update that creates this delay. tcp_nopush (TCP_CORK in Linux) introduces a delay of packets being sent for up to 200ms or until the packet size gets to the defined MTU. proxy_cache_background_update (if I remember correctly),

Re: location blocks, and if conditions in server context

2018-03-08 Thread Lucas Rolff
rom? $sslproxy_protocol is a simple map doing: map $https $sslproxy _protocol { default "http"; SSL "https"; on "https"; } Best Regards, Lucas Rolff On 08/03/2018, 09.44, "nginx on behalf of Francis Daly" <nginx-boun...@nginx.org on behalf of fran..

Re: location blocks, and if conditions in server context

2018-03-07 Thread Lucas Rolff
bose Sent from my iPhone On Mar 7, 2018, at 11:55, Lucas Rolff <lu...@lucasrolff.com<mailto:lu...@lucasrolff.com>> wrote: Hi guys, I have a few hundred nginx zones, where I try to remove as much duplicate code as possible, and inherit as much as possible to prevent nginx from consu

location blocks, and if conditions in server context

2018-03-07 Thread Lucas Rolff
kend-host.com$request_uri; proxy_redirect off; } } Thank you in advance! Best Regards, Lucas Rolff ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: What kind of problems will happen to nginx when updated from centos 6 to 7 ?

2018-02-20 Thread Lucas Rolff
You do not update from CentOS 6 to CentOS 7 – you install a new server – so you’ll have proper time to perform tests on a new box. On 21/02/2018, 08.51, "nginx on behalf of mslee" wrote: Hello. I prepare for

Re: 2 of 16 cores are constantly maxing out - how to balance the load?

2018-01-11 Thread Lucas Rolff
In high traffic environments it generally make sense to “dedicate” a core to each RX and TX queue you have on the NIC – this way you lower the chances of a single core being overloaded from handling network and thus degrading performance. And then at same time within nginx, map the individual

Re: 2 of 16 cores are constantly maxing out - how to balance the load?

2018-01-11 Thread Lucas Rolff
If it’s the same two cores, it might be another process that uses the same two cores and thus happens to max out. One very likely possibility would be interrupts from e.g. networking. You can check /proc/interrupts to see where interrupts from the network happens. From: nginx

Re: NTLM

2018-01-10 Thread Lucas Rolff
It’s only available for nginx-plus Get Outlook for iOS From: nginx on behalf of Otto Kucera Sent: Wednesday, January 10, 2018 12:37:49 PM To: nginx@nginx.org Subject: NTLM Hi all, I am testing

NGINX and RFC7540 (http2) violation

2017-12-28 Thread Lucas Rolff
, and they’re violated because servers implementing the http2 specification allowed them to do so, effectively causing the specification not to be followed. Thanks in advance. Best Regards, Lucas Rolff ___ nginx mailing list nginx@nginx.org http

Re: Nginx optimal speed in limit_rate for video streams

2017-11-16 Thread Lucas Rolff
Depends on your bitrate of your movies as well, it will be hard to play 4K videos on 1 megabit/s Get Outlook for iOS From: nginx on behalf of c0nw0nk Sent: Thursday, November 16, 2017

Re: Nginx Listen directive with reuseport; SO_REUSEPORT

2017-10-23 Thread Lucas Rolff
What’s high traffic? At a previous employer we used it across the infrastructure, and I’d say it’s fairly high traffic (100s of gigabit of traffic). On 23/10/2017, 21.15, "nginx on behalf of c0nw0nk" wrote: So on each

Re: Reverse cache not working on start pages (solution founD)

2017-10-12 Thread Lucas Rolff
If your server gets hacked due to a single website, you have bigger problems, and mod_security won’t fix the issue. Consult with security professionals or give the task of managing your infrastructure to someone that can properly secure the environment. On 12/10/2017, 13.26, "nginx on behalf of

Re: Directive inheritance

2017-10-06 Thread Lucas Rolff
onf_t" - then it can be inherited, or it's a coincidence that it's missing the "offsetoff" for all directives that doesn't inherit in that module from top of my head. Thanks again! Francis Daly wrote: On Fri, Oct 06, 2017 at 07:32:51PM +, Lucas Rolff wrote: Hi there, I know that t

Directive inheritance

2017-10-06 Thread Lucas Rolff
Hi guys, I do a lot of nginx configuration which contains plenty of “location” blocks, however – I often see myself duplicating a lot of directives throughout my configuration which can sadly make a single nginx server block about 400 lines long, often due to repeated settings. Not only is it

Re: Using request URI path to store cached files instead of MD5 hash-based path

2017-10-06 Thread Lucas Rolff
design decisions can share briefly why. Best Regards, Lucas Rolff On 05/10/2017, 13.29, "nginx on behalf of rnmx18" <nginx-boun...@nginx.org on behalf of nginx-fo...@forum.nginx.org> wrote: Hi, If proxy caching is enabled, NGINX is saving the files under subdir

Re: limit_conn is dropping valid connections and causing memory leaks on nginx reload

2017-09-30 Thread Lucas Rolff
Anoop, He added v and double quotes around $binary_remote_addr. Best Regards, From: nginx on behalf of Anoop Alias Reply-To: "nginx@nginx.org" Date: Saturday, 30 September 2017 at 12.14 To: Nginx Subject:

Re: Can the cacheloader process stay alive and keep rebuilding or updating the cache metadata?

2017-09-29 Thread Lucas Rolff
> It would help in a use-case when there are 2 NGINX processes, both working with the same cache directory. Why would you want 2 nginx processes to use the same cache directory? Explain your situation, what's your end-goal, etc. If it's no minimize the amount of origin requests, you can

Re: Can the cacheloader process stay alive and keep rebuilding or updating the cache metadata?

2017-09-29 Thread Lucas Rolff
I can’t think of any scenario, you’d want that – care to explain why you’d like this behaviour? On 29/09/2017, 22.28, "nginx on behalf of rnmx18" wrote: Hi, As I understand, during startup, the cache loader process

Re: Any method for NGINX (as a web-server) to skip metadata and serve content from cached file?

2017-09-29 Thread Lucas Rolff
> In this model, only the originally cached file at /disk1/cache can be served > properly by the NGINX-proxy. You can balance disk usage using split_clients module in nginx, and use different proxy_cache’s (e.g. /disk1/cache, /disk2/cache and so on) as described in

Re: Any method for NGINX (as a web-server) to skip metadata and serve content from cached file?

2017-09-29 Thread Lucas Rolff
Can I ask, what’s the problem with having the metadata in the files? On 29/09/2017, 18.33, "nginx on behalf of rnmx18" wrote: Hi Reinis, Thank you for that pointer to proxy_store directive. I understand

Re: Scaling nginx caching storage

2017-09-23 Thread Lucas Rolff
same item to our upstream server ? On Sat, Sep 23, 2017 at 1:48 PM, Lucas Rolff <lu...@lucasrolff.com<mailto:lu...@lucasrolff.com>> wrote: > is there any way to share a cache directory between two nginx instances ? > If it can't be done what do you think is the best way to go

Re: Scaling nginx caching storage

2017-09-23 Thread Lucas Rolff
> is there any way to share a cache directory between two nginx instances ? > If it can't be done what do you think is the best way to go when we need to > scale the nginx caching storage ? One is about using same storage for two nginx instances, the other one is scaling the nginx cache

Re: nginx cache growing well above max_size threshold

2017-09-14 Thread Lucas Rolff
Okay cool, I'll give it a try In our case we do not run http2 on the machines since haproxy runs in front as well (which doesn't support http2) I'll also try enable a bit more verbose logging on one of the machines to see what the logs say Thanks a lot Maxim! Best regards, Lucas Rolff Get

nginx cache growing well above max_size threshold

2017-09-14 Thread Lucas Rolff
Hi guys, I have a minor question, so I have an nginx box using proxy_cache, it has a key zone of 40 gigabyte (so it can cache 320 million files), a max_size of 1500 gigabyte for the cache and the inactive set to 30 days. However we experience that nginx goes well above the defined limit - in

Re: MP4 module with pseudo streaming + proxy_cache

2017-09-12 Thread Lucas Rolff
> is it too much to ask for nginx to implement this It depends on what you want to get implemented. You can just have a location block in nginx handing mp4 and then using the slice module as Roman already mentioned, this will cause the initial chunk (which contains the MOOV atom) to be loaded

Re: Too many connections in waiting state

2017-09-07 Thread Lucas Rolff
Check if any of the sites you run on the server gets crawled by any crawlers around the time you see an increase – I know that a crawler such as Screaming Frog doesn’t handle servers that are capable of http2 connections and have it activated for sites that are getting crawled, and will result

Re: Get rid of args from $request_uri

2017-08-08 Thread Lucas Rolff
I use the set_misc module from openresty and do something like: if ($request_uri ~ "([^/?]*)(?:\?|$)") { set $double_encoded_filename $1; } set_unescape_uri $encoded_uri $double_encoded_uri; Can probably be improved, but I can use $encoded_uri and get the reslt you’re looking

Re: NGINX stale-while-revalidate cluster

2017-07-07 Thread Lucas Rolff
Instead of doing round robin load balancing why not do a URI based load balancing? Then you ensure your cached file is only present on a single machine behind the load balancer. Sure there will be moments where this is not the case – let's assume that a box goes down, and traffic will switch,

Re: Measuring nginx's efficiency

2017-06-29 Thread Lucas Rolff
> Well, this php-engine is built into apache itself Just because apache do have a built in PHP handler such as mod_dso doesn't mean it's actually used to serve static files ( I can tell you that the php engine is never hit if you serve static files) > Anyway, considering only this fact, such a

Re: Measuring nginx's efficiency

2017-06-29 Thread Lucas Rolff
If your current apache configuration serves static files via the php engine, then you're doing something very wrong. You might or might not see any speed gain depending on your apache configuration, but you should see a big difference in the amount of resources used to serve traffic. As

Re: [nginx logging module]$Request_time almost show 0.000 with proxy cache configuration

2017-06-22 Thread Lucas Rolff
> - a cache hit means that the resource should also be in the linux page cache - so no physical disk read needed. That's a very wrong assumption to make, and only makes sense in very small scale setups - and multiple terabytes of memory isn't exactly cheap, that's why we have SSD storage to

Re: Separate logs within the same server for different server names?

2017-06-15 Thread Lucas Rolff
http://nginx.org/en/docs/http/ngx_http_log_module.html "The file path can contain variables (0.7.6+), but such logs have some constraints" So yes, you can use things such as $host - but there will be a performance penalty. On 15/06/2017, 13.02, "nginx on behalf of ST"

Re: Serve index.html file if exists try_files + proxy_pass?

2017-05-01 Thread Lucas Rolff
s "${uri}index.html" @upstream; } // continue normal code here } location @upstream { proxy_pass http://127.0.0.1:9000; } I'm not sure if the above made it more clear. Best Regards, Lucas R Francis Daly wrote: On Sun, Apr 30, 2017 at 10:44:21AM +, Lucas Rolff wrote:

Re: Http proxy module

2017-04-29 Thread Lucas Rolff
You shouldn't pass --with-http_proxy_module at all From: nginx > on behalf of Roman Pastushkov via nginx > Reply-To: "nginx@nginx.org"

Re: URL-Rewriting not working

2017-04-09 Thread Lucas Rolff
In general try to avoid using the if directive too much. https://www.nginx.com/resources/wiki/start/topics/depth/ifisevil/ For what you're trying to do, using a map would be the cleanest (and nicest) way I believe – someone can correct me if they want :-D From: nginx

Re: Mechanism to avoid restarting nginx upon every change

2017-04-09 Thread Lucas Rolff
Hi Ajay, If you generate the configuration, and issue a nginx reload – it won't cause any downtime. The master process will reread the configuration, start new workers, and gracefully shut down the old ones. There's absolutely no downtime involved in this process. From: nginx

Re: Memory issue

2017-04-06 Thread Lucas Rolff
> cpanel stat generation cause thet nginx makes a lot of reload to grab new > file descriptor... no issue on that Even though this is off-topic - if you issue a lot of reloads during cPanel stat generation, your hooks are configured wrong, since Apache in cPanel only reloads *once* during the

Re: Binary upgrade with systemd

2017-04-04 Thread Lucas Rolff
to the old master and it exits. Everything looks fine at that point. But it seems a little odd to have to do this. On Apr 4, 2017, at 4:43 AM, Lucas Rolff <lu...@lucasrolff.com <mailto:lu...@lucasrolff.com>> wrote: Hello Marc, For which PID do you send the WINCH signal? From: nginx

Re: Binary upgrade with systemd

2017-04-04 Thread Lucas Rolff
Hello Marc, For which PID do you send the WINCH signal? From: nginx > on behalf of Marc Soda > Reply-To: "nginx@nginx.org" > Date: Tuesday,

Re: echo-nginx-module and 1.11.12

2017-03-26 Thread Lucas Rolff
When the pull request here gets merged into master, then it should work on 1.11.11 (and 1.11.12): https://github.com/openresty/echo-nginx-module/pull/65 A. Schulze wrote: Am 01.02.2016 um 23:53 schrieb Yichun Zhang (agentzh): Hello! On Fri, Jan 29, 2016 at 8:40 PM, Kurt Cancemi wrote: I

Re: Change target host in proxy_pass

2017-03-17 Thread Lucas Rolff
You can proxy_set_header Host – that should override whatever is defined in proxy_pass From: nginx > on behalf of Tomasz Kapek > Reply-To: "nginx@nginx.org"

Re: slow https performance compared to http

2016-11-13 Thread Lucas Rolff
Because you have the TLS handshake that has to be done which is CPU bound Try change things like ssl_ciphers (to something faster), and use ssl_session_cache/ -- Best Regards, Lucas Rolff gigihc11 wrote: Hi, I have: nginx 1.11.3 Ubuntu 16.04.1 LTS openssl 1.0.2g-1ubuntu4.5 amd64

Re: Blocking tens of thousands of IP's

2016-11-01 Thread Lucas Rolff
You could very well do a small ipset together with iptables, it's fast, and you don't have to reload for every subnet / ip you add. Doing it within nginx is rather.. Yeah. -- Best Regards, Lucas Rolff Cox, Eric S wrote: Random, blocks, certain durations, etc. Its very random and or short

Re: Pre-compressed (gzip) HTML using fastcgi_cache?

2016-10-31 Thread Lucas Rolff
different files. -- Best Regards, Lucas Rolff seo010 wrote: Hi Lucas, Thanks a lot for the suggestion. We were already using that solution but a strange behavior occurred (see opening post). The first request uses an expected MD5 hash of the KEY, and the client will keep using that hash (the MISS

Re: Pre-compressed (gzip) HTML using fastcgi_cache?

2016-10-30 Thread Lucas Rolff
proxy separately anyway, and then you can basically just scale out during peaks anyway. -- Best Regards, Lucas Rolff seo010 wrote: Hi! It sounds like a good solution to improve the performance, however, I just read the following post by Jake Archibald (Google Chrome developer). "Yeah

Re: Pre-compressed (gzip) HTML using fastcgi_cache?

2016-10-30 Thread Lucas Rolff
of storage and it should give you the result you want. Serving (pre)compressed files to clients that support it. -- Best Regards, Lucas Rolff seo010 wrote: Hi *B. R.*! Thanks a lot for the reply and information! The KEY however, does not contain different data from http_accept_encoding. Wh

Re: Rewrite Vary header before stored in proxy_cache

2016-10-24 Thread Lucas Rolff
- but also makes purging super easy! Once again, thanks a lot! -- Best Regards, Lucas Rolff Maxim Dounin wrote: Hello! On Mon, Oct 24, 2016 at 06:38:25AM +0200, Lucas Rolff wrote: Hi guys, I'm building a small nginx reverse proxy to take care of a bunch of static files for my clients - an

Rewrite Vary header before stored in proxy_cache

2016-10-23 Thread Lucas Rolff
l use additional CPU resources. Thanks in advance! -- Best regards, Lucas Rolff ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Problems with custom log file format

2016-08-23 Thread Lucas Rolff
1st one matches your log format, the 2nd one matches the `combined` format - so: - Maybe you've still some old nginx processes that are still not closed after reloading, which causes it to log in the combined format, or can it be another vhost logging to same log file, without using

Re: Issue with HTTP/2 and async file upload from Safari on iOS

2016-06-04 Thread Lucas Rolff
https://trac.nginx.org/nginx/ticket/979 https://trac.nginx.org/nginx/ticket/959 It's a known bug ZaneCEO 5 June 2016 at 01:17 Hi guys, I'm at my first deploy of Nginx with php-fpm after 10+ years of love with Apache and mod_php. So far so (very) good. I

Re: 502 Bad Gateway once running php on command line

2016-03-23 Thread Lucas Rolff
When issuing php directly from the command-line, you don't even go through nginx. php from the command-line relies on the php-cli which isn't talking to your nginx process nor php-fpm. marcusy3k 23 March 2016 at 10:05 Eventually I find what went wrong, it

Re: 502 Bad Gateway once running php on command line

2016-03-23 Thread Lucas Rolff
Hi, What is the exact call you're trying to do? - Lucas marcusy3k wrote: I have just installed: - FreeBSD 10.2 - Nginx 1.8.1 - PHP 5.5.33 Nginx works fine with PHP that the web sites seems ok to run php pages. However, once I run php on command line (e.g. php -v), the web site will get "502

Re: nginx 1.9.12 proxy_cache always returns MISS

2016-03-19 Thread Lucas Rolff
Seems like it's resolved: $ curl -I http://dev.ts-export.com/kuriyamacache/images/parts/13375/thumbnail_0/1_1.jpg HTTP/1.1 200 OK Server: nginx Date: Sat, 19 Mar 2016 20:42:46 GMT Content-Type: image/jpeg Content-Length: 53491 Connection: keep-alive Last-Modified: Thu, 10 Mar 2016 05:01:30 GMT

Re: secure and httponly cookies

2016-03-07 Thread Lucas Rolff
Without knowing much about webseal (only simple googling), webseal really seems to be a very custom IBM product that does one thing: Integrate into Tivoli Access Manager - meaning they've very specific features (such as single sign-on) etc. nginx is a general webserver, it doesn't hook into

Re: secure and httponly cookies

2016-03-07 Thread Lucas Rolff
This isn't really something you do on your web server but rather in your backend configuration (such as php.ini), etc. kris...@brocade.com 7 March 2016 at 20:38 Hi, How to mark all the cookies from the backend servers as secure and httponly? Is there some

Re: lose value of $uid_set

2016-02-25 Thread Lucas Rolff
What is the http status code of those failed requests? youjie zeng 25 February 2016 at 14:28 Hello, master of nginx, I have a question when using ngx_http_userid_module. here is the detail description: nginx version:1.7 conf: log_format main '$remote_addr -

Re: proxy_pass not seen as SNI-client according to Apache directive

2016-02-14 Thread Lucas Rolff
/nginx.org/r/proxy_ssl_server_name Lucas Rolff <mailto:lu...@slcoding.com> 14 February 2016 at 20:14 Hi guys, I'm having a rather odd behavior - I use nginx as a reverse proxy (basically as a CDN) - where if the file isn't in cache, I do use proxy_pass to the origin server, to get the file and then cach

proxy_pass not seen as SNI-client according to Apache directive

2016-02-14 Thread Lucas Rolff
n a server that runs SNI. Best Regards, Lucas Rolff ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Throughput with Loadbalancer

2015-09-29 Thread Lucas Rolff
You'll decrease your capacity to 1 gigabit, because you'll send it out via the load balancer again. Else you need to look for "DSR" (Direct Server Return), I'm not completely sure if nginx actually supports this. wolfgangpue 29 Sep 2015 08:21 Hi, I am not sure

Re: Throughput with Loadbalancer

2015-09-29 Thread Lucas Rolff
You could also use multiple A records on a DNS level, and let DNS balance the traffic between the two machines. wolfgangpue <mailto:nginx-fo...@nginx.us> 29 Sep 2015 14:19 Lucas Rolff Wrote: --- Ok, thank you. I think DSR is on a

Re: mp4 streaming/seeking works from firefox (fedora) and not from firefox (windows) (nginx 1.9.3)

2015-08-02 Thread Lucas Rolff
Be aware it doesn't work either in Chrome on mac :-) tunist mailto:nginx-fo...@nginx.us 2 Aug 2015 13:16 oh, so the solution here was to add: add_header Accept-Ranges bytes; to the site's config file. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,260615,260702#msg-260702

Re: Serving from cache even when the origin server goes down

2015-06-29 Thread Lucas Rolff
http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_use_stale You can use multiple values e.g. the below is probably a good start: proxy_cache_use_stale error timeout invalid_header updating; Cherian Thomas mailto:cherian...@gmail.com 30 Jun 2015 03:27 Is it possible to

Re: Malware in /tmp/nginx_client

2015-06-27 Thread Lucas Rolff
It's not harmful that they're there, but you could simply exclude the /tmp/nginx_client folder from maldet, It's due to the option client_body_in_file_only being set to on in your nginx.conf (Sounds like you're using http://www.nginxcp.com/ for cpanel) guillefar mailto:nginx-fo...@nginx.us 27

Re: static file performance staircase pattern

2015-05-11 Thread Lucas Rolff
___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx Lucas Rolff mailto:lu...@slcoding.com 9 May 2015 20:24 What you should do, to increase the concurrent amount of requests, is to use domain-sharding, since as Paul mentioned, browsers

Re: static file performance staircase pattern

2015-05-09 Thread Lucas Rolff
What you should do, to increase the concurrent amount of requests, is to use domain-sharding, since as Paul mentioned, browsers have between 4 and 8 (actually) simultaneous connections per domain, meaning if you introduce static1,2,3.domain.com, you will increase your concurrency. But at same

Re: please suggest performance tweak and the right siege options for load test

2015-03-18 Thread Lucas Rolff
Have you checked the socket level, and checking kernel log on all 3 servers (nginx and load balancer) meanwhile doing the test? It could be that for some reason you reach a limit really fast (We had an issue that we reached the nf_conntrack limit at 600 concurrent users because we had like 170

Re: Image serving via nginx are too slow, why ?

2014-08-26 Thread Lucas Rolff
Takes me 2.65 seconds to load the PDF with no caching. tristanb wrote: Thanks for your message, I applyed your patched, restarted varnish, nginx and php5-fpm and it's still the same. Browing with browser cache off feels like the image are downloaded and displayed in a progressive way because

Re: Image serving via nginx are too slow, why ?

2014-08-26 Thread Lucas Rolff
I've been testing from a 10 megabit connection in Netherlands, 100mbit connection in netherlands, 500 mbit connection in netherlands, 500mbit connection in France, 100mbit connection in france and a 250 megabit connection in france, a 20 megabit connection in UK. Can ask people from Denmark to

Re: Image serving via nginx are too slow, why ?

2014-08-26 Thread Lucas Rolff
NL example: mtr admin.yproximite.fr HOST: server1Loss% Snt Last Avg Best Wrst StDev 1. hosted.by.leaseweb.com0.0% 20.5 0.5 0.5 0.5 0.0 2. te0-7-0-3.hvc3.evo.leaseweb. 0.0% 20.7 0.7 0.6 0.7 0.1 3. ix-5-1-1-0.thar1.HNN-Amsterd 0.0%

Re: proxy_pass_header not working in 1.6.0

2014-07-01 Thread Lucas Rolff
Well, it used to work before 1.6.0.. For me http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_pass_header shows that I should do: proxy_pass_header Cache-Control; So that should be correct Best regards, Lucas Rolff Jonathan Matthews wrote: On 1 Jul 2014 07:58, Lucas Rolff

Re: proxy_pass_header not working in 1.6.0

2014-07-01 Thread Lucas Rolff
So.. Where is the thing that states I can't use proxy_pass_header cache-control, or expires? :))) Maybe I'm just stupid Best regards, Lucas Rolff Jonathan Matthews wrote: On 1 Jul 2014 10:34, Lucas Rolff lu...@slcoding.com mailto:lu...@slcoding.com wrote: Do you have a link

Re: proxy_pass_header not working in 1.6.0

2014-07-01 Thread Lucas Rolff
find the root cause, since for me this is very odd that it's suddenly not sent to the client anymore. Best regards, Lucas Rolff Robert Paprocki wrote: Can we move past passive aggressive posting to a public mailing list and actually try to accomplish something? The nginx docs indicate

Re: proxy_pass_header not working in 1.6.0

2014-07-01 Thread Lucas Rolff
I've been investigating, and seems like it's related to 1.6 or so - because 1.4.2 and 1.4.4 works perfectly with the config in the first email. Any that can possibly reproduce this as well? Best regards, Lucas R Robert Paprocki wrote: Can we move past passive aggressive posting to a public

Re: proxy_pass_header not working in 1.6.0

2014-07-01 Thread Lucas Rolff
, 31 Jul 2014 10:42:30 GMT Content-Type: image/png So backend returns the headers just fine. Best regards, Lucas Rolff Valentin V. Bartenev wrote: On Tuesday 01 July 2014 10:30:47 Lucas Rolff wrote: I've verified that 1.4.4 works as it should, I receive the cache-control and expires headers

Re: proxy_pass_header not working in 1.6.0

2014-07-01 Thread Lucas Rolff
, specially because nothing has been listed in the change logs about this 'fix' - it was in earlier versions, and was actually served by nginx, even when it did fetch headers from the backend. Best regards, Lucas Rolff Valentin V. Bartenev wrote: On Tuesday 01 July 2014 14:33:54 Lucas Rolff

proxy_pass_header not working in 1.6.0

2014-06-30 Thread Lucas Rolff
/lucasRolff/c4a359d93b5906678a23 Do you guys know what can be wrong, and if there is a fix for it in any newer version of nginx, or if I should downgrade to 1.4.4 again (Where I know it's working at least). Thanks in advance! Best regards, Lucas Rolff