Re: Nginx as reverse proxy for https traffic

2018-04-11 Thread Aleksandar Lazic
Am 11.04.2018 um 07:11 schrieb Ajay Sonawane: > I am trying to use Nginx as a reverse proxy in an environment where > clients connects to my server (https://myserver:10443 > ). I am trying to use Nginx as a reverse proxy > so that client will connect to Nginx proxy and Ngin

RE: [EXT] Re: Nginx as reverse proxy for https traffic

2018-04-11 Thread Ajay Sonawane
Nginx version 1.13.7 There are no longs in error.log file. Access log show "POST /HTTP /1.1 408 ..." entries. Nothing specific to if connection is established or not. I need some troubleshooting steps as well to know what exactly is happening. At client side, SSL handshake is completed but n

Re: More than 65K connections of a proxy on FreeBSD

2018-04-11 Thread Salikhov Dinislam
Unfortunately, the article says nothing about 65K+ connections _per_single_ local address. Using of IP_BIND_ADDRESS_NO_PORT for Linux was mentioned in the comment and there's nothing about FreeBSD. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,279368,279394#msg-279394 ___

RE: More than 65K connections of a proxy on FreeBSD

2018-04-11 Thread Reinis Rozitis
> Unfortunately, the article says nothing about 65K+ connections _per_single_ > local address. > Using of IP_BIND_ADDRESS_NO_PORT for Linux was mentioned in the comment > and there's nothing about FreeBSD. Correct me if I'm wrong but in case of IP_BIND_ADDRESS_NO_PORT doesn't the unique 4-tuple (

Re: RE: More than 65K connections of a proxy on FreeBSD

2018-04-11 Thread Salikhov Dinislam
> Correct me if I'm wrong but in case of IP_BIND_ADDRESS_NO_PORT doesn't the unique 4-tuple (sourceip+sourceport+destip+destport) limit still remain? Yes, it still remains. > As you only defer/delegate to kernel to assign the ephemeral port in connect() rather than at the bind() time (when the de

Re: [EXT] Re: Nginx as reverse proxy for https traffic

2018-04-11 Thread Aleksandar Lazic
Am 11.04.2018 um 10:13 schrieb Ajay Sonawane: > Nginx version 1.13.7 > > There are no longs in error.log file. Access log show "POST /HTTP /1.1 408 > ..." entries. Nothing specific to if connection is established or not. I > need some troubleshooting steps as well to know what exactly is happ

TLS 1.3

2018-04-11 Thread Frank Liu
https://trac.nginx.org/nginx/roadmap says - [in progress] TLS 1.3 support Now that milestone 1.13 has only 6 days left, is this still in the plan or are we pushing it to 1.15? ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/l

Re: TLS 1.3

2018-04-11 Thread Maxim Dounin
Hello! On Wed, Apr 11, 2018 at 10:12:52AM -0700, Frank Liu wrote: > https://trac.nginx.org/nginx/roadmap says > >- [in progress] TLS 1.3 support > > > Now that milestone 1.13 has only 6 days left, is this still in the plan or > are we pushing it to 1.15? There is basic TLS 1.3 supported i

Re: Monitoring http returns

2018-04-11 Thread Peter Booth
So under the covers things are rarely as pretty as one hopes. In the example quoted the influxdb instance was actually a pool of different pre 1.0 instances- each of which had different bugs or fixes. The log script actually pushed 15:30 worth of data to intentionally overlap. The most surprisi

Re: Monitoring http returns

2018-04-11 Thread Peter Booth
Just to be clear, I’m not contrasting active synthetic testing with monitoring resource consumption. I think that the highest value variable is $, or those variables that have highest correlation to profit. The real customer experience is probably #2 after sales. Monitoring things like active c

sub_filter (CSS,JS)

2018-04-11 Thread Adrian Acosta
Hi Everyone! We're using nginx as a reverse proxy for a staging system so customers can view the contents of their directories without a resolving domain. It's working really well, but the issue is, references to their domain aren't being filtered inside their CSS or JS files which are also loadi