How to create same location to point different proxy server

Hi, I need to know how to configure nginx for below scenario. I have configured the Load Balancer(Nginx) for ignition. I have created two upstream(ignapp & ignProdapp) server. For ignapp upstream it is working fine. I need to configure the below code for upstream server(ignProdapp) in the same co

Re: [PATCH] QUIC: fixed post-close use-after-free

> On 21 May 2023, at 13:20, Roman Arutyunyan wrote: > > # HG changeset patch > # User Roman Arutyunyan > # Date 1684659758 -14400 > # Sun May 21 13:02:38 2023 +0400 > # Node ID 321b69f47a0a9874a063e464d13706339a706bb8 > # Parent 235d482ef6bc8c40a956b2413865d42c94e0fc05 > QUIC: fixed post-

Re: [PATCH] QUIC: fixed post-close use-after-free

On Mon, May 22, 2023 at 03:28:24PM +0400, Sergey Kandaurov wrote: > > > On 21 May 2023, at 13:20, Roman Arutyunyan wrote: > > > > # HG changeset patch > > # User Roman Arutyunyan > > # Date 1684659758 -14400 > > # Sun May 21 13:02:38 2023 +0400 > > # Node ID 321b69f47a0a9874a063e464d137063

[nginx] QUIC: better sockaddr initialization.

details: https://hg.nginx.org/nginx/rev/68fa4b86ed46 branches: changeset: 9111:68fa4b86ed46 user: Maxim Dounin date: Sun May 21 04:38:45 2023 +0300 description: QUIC: better sockaddr initialization. The qsock->sockaddr field is a ngx_sockaddr_t union, and therefore can hold any sock

Re: [PATCH] QUIC: fixed post-close use-after-free

> On 22 May 2023, at 16:00, Roman Arutyunyan wrote: > > On Mon, May 22, 2023 at 03:28:24PM +0400, Sergey Kandaurov wrote: >> >>> On 21 May 2023, at 13:20, Roman Arutyunyan wrote: >>> >>> # HG changeset patch >>> # User Roman Arutyunyan >>> # Date 1684659758 -14400 >>> # Sun May 21 13:02

[nginx] QUIC: fixed post-close use-after-free.

details: https://hg.nginx.org/nginx/rev/d59277dd3d8c branches: changeset: 9112:d59277dd3d8c user: Roman Arutyunyan date: Mon May 22 15:59:42 2023 +0400 description: QUIC: fixed post-close use-after-free. Previously, ngx_quic_close_connection() could be called in a way that QUIC conn

Re: [PATCH] Added $realip_add_x_forwarded_for

Hello! On Sun, May 14, 2023 at 04:51:58AM +0100, J Carter wrote: > # HG changeset patch > # User jordanc.car...@outlook.com > # Date 1684035158 -3600 > # Sun May 14 04:32:38 2023 +0100 > # Node ID dad6e472ee0d97a738b117f6480987ef135c9e7f > # Parent b71e69247483631bd8fc79a47cc32b762625b1fb >

memcpy(3), strict aliasing, pointer provenance rules (was: [PATCH] QUIC: better sockaddr initialization)

Hello! On 5/22/23 04:35, Maxim Dounin wrote: [...] > As you've correctly noticed, your example is different from the > nginx code, since it uses a local variable (and not an allocated > object, like nginx does). > > The next question you might consider is: what difference it makes? > And if

[PATCH] Post-merge README with a disclaimer

# HG changeset patch # User Roman Arutyunyan # Date 1684568499 -14400 # Sat May 20 11:41:39 2023 +0400 # Branch quic # Node ID a83071314a22652d4a552e72e13d18aa4c01d79e # Parent e92a03d1d6dad22866e9e5e09fac8545cbdb15e4 Post-merge README with a disclaimer. diff --git a/README b/README new fil

Re: [PATCH] Post-merge README with a disclaimer

On 22.05.2023 08:26, Roman Arutyunyan wrote: # HG changeset patch # User Roman Arutyunyan # Date 1684568499 -14400 # Sat May 20 11:41:39 2023 +0400 # Branch quic # Node ID a83071314a22652d4a552e72e13d18aa4c01d79e # Parent e92a03d1d6dad22866e9e5e09fac8545cbdb15e4 Post-merge README with a di

[PATCH 0 of 6] SSL tests refactoring fixes

This series fixes various issues arised post SSL tests simplification, seen on various distributions with old OpenSSL and/or Perl, most notably: - Amazon Linux (LTS) ssl_certificate.t ssl_certificates.t stream_ssl_certificate.t stream_ssl_variables.t - CentOS 7 ssl_certificate.t stream_ssl_certific

[PATCH 1 of 6] Tests: unbreak ssl_stapling.t after IO::Socket::SSL refactoring

# HG changeset patch # User Sergey Kandaurov # Date 1684773873 -14400 # Mon May 22 20:44:33 2023 +0400 # Node ID 231b14e2041afed10f5c2e6f62aad298854a6379 # Parent a797d7428fa529e843181d802dd85bc4306b89e9 Tests: unbreak ssl_stapling.t after IO::Socket::SSL refactoring. Previously, the test u

[PATCH 3 of 6] Tests: unbreak stream_ssl_variables.t with old IO::Socket::SSL

# HG changeset patch # User Sergey Kandaurov # Date 1684773874 -14400 # Mon May 22 20:44:34 2023 +0400 # Node ID e60c76cbf2a5b0d9e1d235770d68f260cf1a4e3e # Parent 4a3a451716ba26f8fc4be1ccc88dd8596101a6b2 Tests: unbreak stream_ssl_variables.t with old IO::Socket::SSL. Do not clobber a stream

[PATCH 2 of 6] Tests: unbreak tests with IO::Socket:SSL lacking SSL_session_key

# HG changeset patch # User Sergey Kandaurov # Date 1684773874 -14400 # Mon May 22 20:44:34 2023 +0400 # Node ID 4a3a451716ba26f8fc4be1ccc88dd8596101a6b2 # Parent 231b14e2041afed10f5c2e6f62aad298854a6379 Tests: unbreak tests with IO::Socket:SSL lacking SSL_session_key. diff --git a/ssl_cert

[PATCH 4 of 6] Tests: avoid specifying PSS in sigalgs unless in TLSv1.3

# HG changeset patch # User Sergey Kandaurov # Date 1684774417 -14400 # Mon May 22 20:53:37 2023 +0400 # Node ID 42066e126d2ca0f6d5095d818910559adf5d4bdc # Parent e60c76cbf2a5b0d9e1d235770d68f260cf1a4e3e Tests: avoid specifying PSS in sigalgs unless in TLSv1.3. It might happen that TLSv1.3

[PATCH 5 of 6] Tests: added missing socket_ssl_alpn guard in mail_ssl.t

# HG changeset patch # User Sergey Kandaurov # Date 1684784660 -14400 # Mon May 22 23:44:20 2023 +0400 # Node ID 633613b924b957fc18dde972ff346fe92b9e823e # Parent 42066e126d2ca0f6d5095d818910559adf5d4bdc Tests: added missing socket_ssl_alpn guard in mail_ssl.t. diff --git a/mail_ssl.t b/mai

[PATCH 6 of 6] Tests: added missing socket_ssl_reused prerequisites

# HG changeset patch # User Sergey Kandaurov # Date 1684784712 -14400 # Mon May 22 23:45:12 2023 +0400 # Node ID 193b129568708d6689c7cb8707f46bca7280a0d0 # Parent 633613b924b957fc18dde972ff346fe92b9e823e Tests: added missing socket_ssl_reused prerequisites. diff --git a/mail_ssl_session_reu

Re: memcpy(3), strict aliasing, pointer provenance rules (was: [PATCH] QUIC: better sockaddr initialization)

Hello! On Mon, May 22, 2023 at 04:23:56PM +0200, Alejandro Colomar wrote: > Hello! > > On 5/22/23 04:35, Maxim Dounin wrote: > [...] > > > As you've correctly noticed, your example is different from the > > nginx code, since it uses a local variable (and not an allocated > > object, like ngin

Re: [PATCH 1 of 6] Tests: unbreak ssl_stapling.t after IO::Socket::SSL refactoring

Hello! On Mon, May 22, 2023 at 11:52:13PM +0400, Sergey Kandaurov wrote: > # HG changeset patch > # User Sergey Kandaurov > # Date 1684773873 -14400 > # Mon May 22 20:44:33 2023 +0400 > # Node ID 231b14e2041afed10f5c2e6f62aad298854a6379 > # Parent a797d7428fa529e843181d802dd85bc4306b89e9 >

[nginx] QUIC: fixed OpenSSL compat layer with OpenSSL master branch.

details: https://hg.nginx.org/nginx/rev/bddd3f76e3e5 branches: changeset: 9113:bddd3f76e3e5 user: Sergey Kandaurov date: Tue May 23 00:45:18 2023 +0400 description: QUIC: fixed OpenSSL compat layer with OpenSSL master branch. The layer is enabled as a fallback if the QUIC support is

Re: [PATCH 2 of 6] Tests: unbreak tests with IO::Socket:SSL lacking SSL_session_key

Hello! On Mon, May 22, 2023 at 11:52:14PM +0400, Sergey Kandaurov wrote: > # HG changeset patch > # User Sergey Kandaurov > # Date 1684773874 -14400 > # Mon May 22 20:44:34 2023 +0400 > # Node ID 4a3a451716ba26f8fc4be1ccc88dd8596101a6b2 > # Parent 231b14e2041afed10f5c2e6f62aad298854a6379 >

Re: [PATCH 3 of 6] Tests: unbreak stream_ssl_variables.t with old IO::Socket::SSL

Hello! On Mon, May 22, 2023 at 11:52:15PM +0400, Sergey Kandaurov wrote: > # HG changeset patch > # User Sergey Kandaurov > # Date 1684773874 -14400 > # Mon May 22 20:44:34 2023 +0400 > # Node ID e60c76cbf2a5b0d9e1d235770d68f260cf1a4e3e > # Parent 4a3a451716ba26f8fc4be1ccc88dd8596101a6b2 >

Re: [PATCH 4 of 6] Tests: avoid specifying PSS in sigalgs unless in TLSv1.3

Hello! On Mon, May 22, 2023 at 11:52:16PM +0400, Sergey Kandaurov wrote: > # HG changeset patch > # User Sergey Kandaurov > # Date 1684774417 -14400 > # Mon May 22 20:53:37 2023 +0400 > # Node ID 42066e126d2ca0f6d5095d818910559adf5d4bdc > # Parent e60c76cbf2a5b0d9e1d235770d68f260cf1a4e3e >

[njs] Tests: imported nginx modules tests from nginx-tests.

details: https://hg.nginx.org/njs/rev/08a912ab9520 branches: changeset: 2129:08a912ab9520 user: Dmitry Volyntsev date: Mon May 22 17:59:47 2023 -0700 description: Tests: imported nginx modules tests from nginx-tests. diffstat: nginx/t/README | 12 + nginx/t/j

Re: [PATCH 5 of 6] Tests: added missing socket_ssl_alpn guard in mail_ssl.t

Hello! On Mon, May 22, 2023 at 11:52:17PM +0400, Sergey Kandaurov wrote: > # HG changeset patch > # User Sergey Kandaurov > # Date 1684784660 -14400 > # Mon May 22 23:44:20 2023 +0400 > # Node ID 633613b924b957fc18dde972ff346fe92b9e823e > # Parent 42066e126d2ca0f6d5095d818910559adf5d4bdc >

Re: [PATCH 6 of 6] Tests: added missing socket_ssl_reused prerequisites

Hello! On Mon, May 22, 2023 at 11:52:18PM +0400, Sergey Kandaurov wrote: > # HG changeset patch > # User Sergey Kandaurov > # Date 1684784712 -14400 > # Mon May 22 23:45:12 2023 +0400 > # Node ID 193b129568708d6689c7cb8707f46bca7280a0d0 > # Parent 633613b924b957fc18dde972ff346fe92b9e823e >