Re: Routing Http2 traffic without decrypting tls packets

2019-09-03 Thread Ruslan Ermilov
On Mon, Sep 02, 2019 at 05:45:59PM +, Jayarajan, Keerthi (AT ASP RTC) wrote: > Hi, > > I'm working in blockchain project for Honeywell. We have blockchain nodes > hosted in our cloud. These nodes should connect and talk to external node and > vice versa. We are using Nginx as Reverse proxy ser

Re: flood detected with file uploads over http2

2019-12-17 Thread Ruslan Ermilov
On Mon, Dec 16, 2019 at 05:45:55PM +, Jasper Wallace wrote: > We are having intermittent problems uploading files via nginx to a > flask backend over http2: > > 2019/12/16 16:07:08 [debug] 27658#27658: *1 event timer: 3, old: > 1576512608187, new: 1576512608301 > 2019/12/16 16:07:08 [debug] 27

Re: using $upstream* variables inside map directive

2020-11-11 Thread Ruslan Ermilov
On Wed, Nov 11, 2020 at 12:55:30PM -0500, unoobee wrote: > Ruslan, could you send that patch for "map"? I would like to check it. The "volatile" parameter of the "map" directive is available since nginx version 1.11.7. ___ nginx mailing list nginx@nginx.

Re: Use individual upstream server name as host header

2016-10-05 Thread Ruslan Ermilov
On Wed, Oct 05, 2016 at 11:07:04AM +, Cox, Eric S wrote: > Is anyone aware of a way to pass the upstream server name as the host header > per individual server instead of setting it at the location level for all the > upstream members? Without using a lua script that is. This is currently impo

Re: nginx-1.11.6

2016-11-15 Thread Ruslan Ermilov
On Tue, Nov 15, 2016 at 01:07:29PM -0500, shiz wrote: > Hi, > > I build it every time a new version is available. > > This one didn't make it. > > System is Debian 8 jessie > > (...) > > /usr/local/src/nginx/nginx-1.11.6/debian/modules/nginx-upstream-fair/ngx_http_upstream_fair_module.c: > In

Re: What's the meaning of Nginx variables of "$tcpinfo_rtt, $tcpinfo_rttvar, $tcpinfo_snd_cwnd, $tcpinfo_rcv_space"

2016-12-16 Thread Ruslan Ermilov
On Fri, Dec 16, 2016 at 03:09:14PM +0800, yanqun sun wrote: > Hi, all: > I want to get the network latency between the users and my Nginx servers > on tcp layer. I searched about this and found several Nginx variables > bellow: > > $tcpinfo_rtt, $tcpinfo_rttvar, $tcpinfo_snd_cwnd, $tcpinfo_rcv_s

Re: disable 301 redirect for directory / use relative redirect / change scheme

2016-12-22 Thread Ruslan Ermilov
On Wed, Aug 26, 2015 at 05:30:37PM +0200, Etienne Champetier wrote: > Hi, > > I have this setup > browser -> ssl proxy -> nginx > browser to ssl proxy is https only > ssl proxy to nginx is http only > > now i browse to "https://exemple.com/aaa";, where aaa is a directory, > so nginx send back a 3

Re: fail_timeout in upstream not rescpeted?

2017-01-30 Thread Ruslan Ermilov
On Mon, Jan 30, 2017 at 02:41:06AM -0500, plrunner wrote: > Hi everybody, > > I am running nginx v1.11 and I noticed something pretty weird in my > error.log. > > I have fail_timeout=1800s along with max_fails=1 in my upstream and > proxy_next_upstream is set to "error timeout", so I expect an up

Re: fail_timeout in upstream not rescpeted?

2017-01-30 Thread Ruslan Ermilov
On Mon, Jan 30, 2017 at 03:41:24AM -0500, plrunner wrote: > Thank you very much for the quick reply. > > OK, it's pretty clear now. > > I've read the "zone" directive is available since nginx v1.9. > For sake of other readers as well, does this mean that what am addressing > here is not possible

Re: combining map

2017-03-09 Thread Ruslan Ermilov
~1 1; > > } > > > > > > > > Thanks, > > -- > > *Anoop P Alias* > > > > > > > > ___ > > nginx mailing > > listnginx@nginx.orghttp://mailman.nginx.org/mailman/lis

Re: minor manpage fix

2017-04-05 Thread Ruslan Ermilov
On Wed, Apr 05, 2017 at 11:16:27AM +0200, A. Schulze wrote: > hello > > by buildsystem warn about a minor glitch in nginx.8 > patch attached "\-" is a "minus sign in the current font", while "-" is a dash character, which is the correct character for the utility arguments. Applying this patch an

Re: 99.999% my config works - then default_server is used

2017-04-06 Thread Ruslan Ermilov
On Thu, Apr 06, 2017 at 11:18:02PM +0200, Michal Kralik wrote: > Hi, > > We're facing super strange issues with nginx 1.10.3 (CentOS 7, > 3.10.0-327.36.3.el7.x86_64). Our config works ok, we get a lot of traffic, > but every day a couple of requests (5-10) don't get processes correctly by > a serv

Re: upstream - behavior on pool exhaustion

2017-04-14 Thread Ruslan Ermilov
On Fri, Apr 14, 2017 at 09:41:36AM +0200, B.R. via nginx wrote: > Hello, > > Reading from upstream > > docs, on upstream pool exhaustion, every backend should be tried once, and > then if all fail the response should be crafte

Re: upstream - behavior on pool exhaustion

2017-04-17 Thread Ruslan Ermilov
roup name as such. Without the six attempts, if all of the servers are unreachable (either "down" or "unavailable" because they have failed previously) at the time the request starts, what do you expect to see in $upstream_*? > On Fri, Apr 14, 2017 at 10:21 AM, Ruslan Ermi

Re: upstream - behavior on pool exhaustion

2017-04-19 Thread Ruslan Ermilov
this should go to the error log. > At the very least, if the current way of working is kept, the grammar of > the content of the $upstream_* variables should be specified. > > Does not that seem reasonable? > --- > *B. R.* > > On Mon, Apr 17, 2017 at 6:09 PM, Ruslan Ermilov

Re: upstream - behavior on pool exhaustion

2017-04-20 Thread Ruslan Ermilov
On Wed, Apr 19, 2017 at 05:26:17PM +0200, B.R. via nginx wrote: > On Wed, Apr 19, 2017 at 10:51 AM, Ruslan Ermilov wrote: > > > And what about the next request when all of servers are either "down" > > or "unavailable"? > > > > To me, all t

Re: upstream - behavior on pool exhaustion

2017-04-25 Thread Ruslan Ermilov
On Sat, Apr 22, 2017 at 01:52:48AM +0200, B.R. via nginx wrote: > I do not know if your detailed explanation was aimed to me, or to the list > in general, but I got all that already as far as I am concerned. > > ​To me, when an attempt is made to an upstream group where no peer can be > selected,

Re: How can I set a maximum limit for gzip module?

2017-04-27 Thread Ruslan Ermilov
On Thu, Apr 27, 2017 at 01:27:28AM -0400, t.nishiyori wrote: > Hello, > > I'm using nginx-1.11.2 for proxy server with gzip-module. > > I hope to use such like a "gzip_max_length" directive in > ngx_http_gzip_module. > Because some upstream response's sizes exceeded the settings of > gzip_buffers

Re: $upstream_addr returning "-" only on requests with "del" in them

2017-04-27 Thread Ruslan Ermilov
On Wed, Apr 26, 2017 at 07:58:08PM -0400, ywarnier wrote: > Sometimes writing your thought helps... > Apparently something wasn't reporting correctly so far, but using the debug > level, I finally end up getting some information. I should mention that the > word that seems to provoke this issue is

Re: upstream - behavior on pool exhaustion

2017-05-18 Thread Ruslan Ermilov
Did you have a chance to try my patch yet? On Tue, Apr 25, 2017 at 05:44:37PM +0300, Ruslan Ermilov wrote: > On Sat, Apr 22, 2017 at 01:52:48AM +0200, B.R. via nginx wrote: > > I do not know if your detailed explanation was aimed to me, or to the list > > in general, but I got all

Re: Resolver not re-resolving new ip address of an AW ELB

2017-11-02 Thread Ruslan Ermilov
On Tue, Oct 31, 2017 at 01:26:45PM -0400, RKGood wrote: > Thank you for your replies. I think we have found the root cause. We have > found below: > > When you are using variables in a proxy_pass directive, nginx will use > runtime resolving except if : > the target server is declared as an IP

Re: Beginner question - TCP or Sockets ?

2017-11-02 Thread Ruslan Ermilov
On Thu, Nov 02, 2017 at 10:00:34AM -0400, FrenchFry wrote: > I'm new to Nginx and the technology in general. I have spent some time on > nginx.org. The one thing I'm not sure of is if I need to configure my web > server, which is Thin (ruby), with sockets or should TCP be enough. The > reason I

Re: confused about ngx_write_file

2017-11-20 Thread Ruslan Ermilov
ze_t) n == size) { > 230 return written; > 231 } > 232 > 233 size -= n; > 234 } > > > Thanks! > > Posted at Nginx Forum: > https://forum.nginx.org/read.php?2,277386,277386#msg-277386 > >

Re: HTTP/2 server push

2018-02-08 Thread Ruslan Ermilov
On Thu, Feb 08, 2018 at 08:45:50AM -0500, beatnut wrote: > Hi everyone, > According to the roadmap https://trac.nginx.org/nginx/roadmap server push > will show up in a few days. It's been committed today and will be available in the next release. > My question is : > How to mitigate problem when

Re: Nginx 1.13.9 HTTP/2 Server Push - non-compressed assets ?

2018-02-14 Thread Ruslan Ermilov
On Sat, Feb 10, 2018 at 01:21:16PM -0500, George wrote: > Hi compiled Nginx 1.13.9 from master branch to try out HTTP/2 Server Push > but noticed the pushed assets loose their gzip compression and are served as > non-compressed assets ? Is that as intended ? I posted my findings at > https://commun

Re: Nginx 1.13.9 HTTP/2 Server Push - non-compressed assets ?

2018-02-14 Thread Ruslan Ermilov
On Wed, Feb 14, 2018 at 06:19:01PM -0500, George wrote: > thanks Ruslan for the update appreciate all your work and looking forward to > playing with HTTP/2 Push finally ! :) Start off right today: https://www.youtube.com/watch?v=wR1gF5Lhcq0 ___ nginx ma

Re: thread_pool in Windows

2018-03-07 Thread Ruslan Ermilov
On Tue, Mar 06, 2018 at 10:38:21PM -0500, Sergey Sandler wrote: > Thank you, Valentin. > > There is something I am missing. Please see the start of the error.log > below, > > 2018/03/04 14:05:50 [notice] 5144#9212: using the "select" event method > 2018/03/04 14:05:50 [notice] 5144#9212: using th

Re: Combining Basic Authentication with Access Restriction by IP Address and auth_basic off

2018-06-27 Thread Ruslan Ermilov
On Wed, Jun 27, 2018 at 03:08:50PM +0200, basti wrote: > Hello, > I have a config like: > > server { > > ... > # combine basic auth and ip whitelisting > # > https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/ > satisfy any; > allow ; > deny

Re: Wanted: suggestions on how to invert proxy_pass return codes

2013-03-06 Thread Ruslan Ermilov
On Tue, Mar 05, 2013 at 12:17:03AM +, Jonathan Matthews wrote: > A slight thinko crept in to my original mail; there's a small > difference (which does remove a minor complexity) as I've marked below > ... > > On 4 March 2013 23:58, Jonathan Matthews wrote: > [snip] > > --

Re: how work ip_hash and weight in nginx 1.2.7

2013-03-11 Thread Ruslan Ermilov
On Sat, Mar 09, 2013 at 04:56:56PM +1300, Steve Holdoway wrote: > On 09/03/13 16:51, moke110007 wrote: > > Nobody reply. > > Tested,iphash and weight,support balance. > > Over. > > > > > Last time I used it, weight wasn't supported on iphash so I just used > multiple entries to weight instead. Qu

Re: NGINX proxy websocket

2013-03-13 Thread Ruslan Ermilov
On Wed, Mar 13, 2013 at 10:59:38PM +, Hazrat Shah wrote: >I am using the Nginx v1.3.14 server proxy. I am sending the Websocket >HTTP connection request "CONNECT HostName:Port HTTP/1.1" packet to the >proxy from the client. It responds with an http-alt ack packet. How can >I

Re: map a null/missing variable?

2013-03-13 Thread Ruslan Ermilov
On Wed, Mar 13, 2013 at 02:19:50PM -0400, AJ Weber wrote: > OK, > > So I'm still working on my caching "issue", but this is a more general > question, so for the sake of indexing and helping others in the future > with (hopefully) a response... > > How do I use a map to map the lack of a variab

Re: Upstream least_conn behavior irregularity

2013-03-21 Thread Ruslan Ermilov
On Thu, Mar 21, 2013 at 01:45:14AM -0700, John Watson wrote: >Was investigating some issues today when we noticed that least_conn wasn't >behaving as expected. >upstream backend { >  least_conn; >  server unix:/tmp/sock-1.sock; >  server unix:/tmp/sock-2.sock; >  server

Re: Upstream least_conn behavior irregularity

2013-03-21 Thread Ruslan Ermilov
Thanks! > > On Thu, Mar 21, 2013 at 4:47 AM, Ruslan Ermilov <[2]r...@nginx.com> > wrote: > >On Thu, Mar 21, 2013 at 01:45:14AM -0700, John Watson wrote: >>    Was investigating some issues today when we noticed that >least_conn

Re: max virtualhosts

2013-03-23 Thread Ruslan Ermilov
On Sat, Mar 23, 2013 at 02:50:08PM +0400, Igor Sysoev wrote: > On Mar 23, 2013, at 14:14 , Larry wrote: > > > I was wondering, for the sake of curiosity, how many server blocks (virtual > > hosts) nginx can afford ? > > > > To the extreme : will 1000 server blocks will decrease nginx performances

Re: can i change time format in access log?

2013-03-25 Thread Ruslan Ermilov
On Mon, Mar 25, 2013 at 10:29:22PM -0400, appchemist wrote: > I want to customize time format in access log, because of calculating time. > There are two kind of time format in log_format. > one is $time_local. (21/Mar/2013:18:47:32 +0900) > another one is $time_iso8601. (2013-03-26T10:27:40+09:00)

Re: can i change time format in access log?

2013-03-25 Thread Ruslan Ermilov
On Tue, Mar 26, 2013 at 02:22:39AM -0400, appchemist wrote: > I have one more question about access log. > there is a +0900 in 21/Mar/2013:18:47:32 +0900, 2013-03-26T10:27:40+09:00 > > what does +0900 mean? It's the the as "+09:00" to the right. :) http://en.wikipedia.org/wiki/ISO_8601#Time_off

Re: Error when proxying websocket connection over unix socket

2013-03-27 Thread Ruslan Ermilov
On Wed, Mar 27, 2013 at 01:21:06PM -0400, David.Neumann wrote: > Hello everybody, > > I found that if you try to proxy a websocket connection over a unix socket > you get an error. > This is due to the fact that nginx tries to set TCP_NODELAY for the unix > socket in > ngx_http_upstream_upgrade >

Re: configure --prefix with "~"

2013-04-11 Thread Ruslan Ermilov
On Wed, Apr 10, 2013 at 11:47:24PM -0400, mengqy wrote: > nginx 1.3.15, ubuntu 12.04, bash: > > $ ./configure --prefix=~/tools/webserver/install ... > $ make && make install > > --> a dir named '~' is created within current dir, but `~` should be > interpreted as `$HOME` instead, right? > > Than

Re: Howto set geoip_country for IPv4 and IPv6 databases?

2013-04-30 Thread Ruslan Ermilov
On Tue, Apr 30, 2013 at 06:14:54AM -0400, Rancor wrote: > Hi, > > i'm trying to get this to work with the current NginX package 1.4.0 from > dotdeb.org (using --with-ipv6) on a debian squeeze system. When downloading > the GeoIP ipv6 binary from: > > http://dev.maxmind.com/geoip/geolite > > and

Re: Howto set geoip_country for IPv4 and IPv6 databases?

2013-04-30 Thread Ruslan Ermilov
On Tue, Apr 30, 2013 at 09:03:20AM -0400, Rancor wrote: > Hey, > > thanks for your reply. The packages of dotdeb.org are build with IPv6 > support. When i'm using: > > nginx -V > > the output contains: > > --with-ipv6 > > Additional netstat -npl shows this output: > > tcp6 0 0 :::8

Re: Choosing source-address for upstream connections

2013-05-17 Thread Ruslan Ermilov
On Fri, May 17, 2013 at 02:57:00PM +0200, Bruno Prémont wrote: > Is there a way to tell nginx to use a specific address when talking to > an upstream? > > I would like to do something like: > > upstream bla { > server [D0C::1234]:8080 src [D0C::beaf]; > server 1.2.3.4:8080 src 1.2.3.5

Re: nginx, solaris, eventport

2013-07-03 Thread Ruslan Ermilov
On Thu, Jul 04, 2013 at 02:13:38AM -0400, drook wrote: > Hi. > > I'm using nginx on Solaris for years. For years I've been experiencing > errors when eventport is on (with /dev/poll everything is fine, but I'm > kinda perfectionist and I want to use native solaris features). > > I realize that sc

Re: connect() to 127.0.0.1:80 failed (99: Cannot assign requested address

2013-07-15 Thread Ruslan Ermilov
On Sun, Jul 14, 2013 at 12:53:27AM +0200, Atul B. wrote: > I dont think another nginx is already running as when I stopped my nginx > instance, i cannot see niginx running using the mentioned command... > The log error that i am getting is when I try to run any php file in my > browser. > However

Re: stub_status always give me 0 Reading when upgraded to 1.4.1

2013-07-17 Thread Ruslan Ermilov
On Wed, Jul 17, 2013 at 06:48:53PM +0800, Tsz Ming WONG wrote: >Hi, >On Wed, Jul 17, 2013 at 6:29 PM, Maxim Dounin <[1]mdou...@mdounin.ru> >wrote: > > stub_status > >Thanks for the explanation. >But given that this is a busy server, sound abnormal if it always return a >

Re: listen directive

2013-07-25 Thread Ruslan Ermilov
On Thu, Jul 25, 2013 at 04:34:53AM -0400, drook wrote: > Thanks a lot, this is much clearer. Actually, 'absent "listen", or "listen" > without both a port and address, assume > the default values for the missing parts' explains everything, and I think > the manual would be more clear mentioning thi

Re: Poor performance when loading huge number of server section

2013-08-09 Thread Ruslan Ermilov
On Fri, Aug 09, 2013 at 01:41:49PM +0800, Anb wrote: > Hi there, > I got a problem when using nginx as a reverse proxy. Configurations > using per server policy to set upstream host. Nginx spends significant > time loading config files as while as virtual server inscreased to a > large number. He

Re: upstream max_fails disable

2013-08-13 Thread Ruslan Ermilov
On Thu, Aug 08, 2013 at 10:45:14AM +0100, Richard Kearsley wrote: > Hi > I'm using the upstream module - with sole purpose to enable keepalives > to my backend > I don't want to use any of the other features, I only have 1 server in > the upstream {} > Does that mean max_fails is still being used

Re: IPv6 range specification for allow/deny

2013-08-15 Thread Ruslan Ermilov
On Thu, Aug 15, 2013 at 11:51:33AM +, Jens Rantil wrote: > Hi, > > I'd like to limit a range of IPv6 space to a "server" context using "allow" > and "deny". I haven't been able to find any information on how to do this in > the documentation, nor on the web. The only example I've found[1] is

Re: Multiple DNS servers in resolver directive

2013-10-14 Thread Ruslan Ermilov
On Tue, Oct 15, 2013 at 02:03:10AM -0400, justin wrote: > The documentation is not clear. Can I provide two IP addresses in the > resolver config directive? > > Example: > > resolver 208.67.222.222 208.67.220.220; Please use official docs, not Wiki: http://nginx.org/r/resolver __

Re: nginx and GeoLite2

2013-10-22 Thread Ruslan Ermilov
On Mon, Oct 21, 2013 at 09:53:42PM +0400, Maxim Dounin wrote: > On Mon, Oct 21, 2013 at 07:51:23PM +0300, wishmaster wrote: > > > > > Hi, > > > > --- Original message --- > > From: "Maxim Dounin" > > Date: 21 October 2013, 16:13:01 > > > > > > > Hello! > > > > > > On Mon, Oct 21, 2013 at 1

Re: nginx http proxy support for backend server health checks / status monitoring url

2013-10-31 Thread Ruslan Ermilov
On Thu, Oct 31, 2013 at 02:26:41PM +0200, Pasi Kärkkäinen wrote: > Hello, > > I'm using nginx as a http proxy / loadbalancer for an application which > which has the following setup on the backend servers: > > - https/403 provides the application at: > - https://hostname-of-backend/app/ >

Re: new ngx_resolver changes breaks modules

2013-12-14 Thread Ruslan Ermilov
On Sat, Dec 14, 2013 at 01:11:45PM -0500, itpp2012 wrote: > While back porting ngx_resolver changes by Ruslan Ermilov I get these > errors: > > error C2039: 'type' : is not a member of 'ngx_resolver_ctx_s' > error C2440: '=' : cannot convert fr

Re: ngx_conf_t args count

2013-12-15 Thread Ruslan Ermilov
On Sun, Dec 15, 2013 at 04:31:08PM -0500, Jeffrey Walton wrote: > From Miller's http://www.evanmiller.org/nginx-modules-guide.html, section 5.2: > > ngx_http_upstream_hash(ngx_conf_t *cf, ngx_command_t *cmd, void *conf) > { > ngx_http_upstream_srv_conf_t *uscf; > ngx_http_script_compile_

Re: Force linking to static archives during make?

2013-12-18 Thread Ruslan Ermilov
On Tue, Dec 17, 2013 at 04:16:55PM -0500, Jeffrey Walton wrote: > This should be my last build question. > > $ ./auto/configure --with-http_ssl_module ... > --with-cc-opt="-I/usr/local/ssl/include" > --with-ld-opt="-L/usr/local/ssl/lib /usr/local/ssl/lib/libssl.a > /usr/local/ssl/lib/libcrypto.a -

Re: nginx misbehaviour in conjunction with non-ASCII characters

2013-12-19 Thread Ruslan Ermilov
On Wed, Dec 18, 2013 at 06:27:31PM -0500, ako673de wrote: > Found a bug in implementation of MOVE and COPY (webdav) methods. It happens > if destination header contains non-ASCII characters (that need to be escaped > with "%"). > > An example: > > Rename (=MOVE) file "/TheCore.ogm" to "/The_Core.

Re: nginx-1.5.8

2013-12-19 Thread Ruslan Ermilov
On Thu, Dec 19, 2013 at 04:59:34AM -0500, athalas wrote: > Where would we find documentation on the "fastopen" parameter? It's in the works. ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx-1.5.8

2013-12-21 Thread Ruslan Ermilov
On Fri, Dec 20, 2013 at 10:06:59PM +0100, Alex wrote: > On 2013-12-20 21:19, Maxim Konovalov wrote: > > On 12/19/13 1:59 PM, athalas wrote: > >> Where would we find documentation on the "fastopen" parameter? > >> > > http://nginx.org/r/listen > > In the documentation above it's pointed out that th

Re: Using 127.0.0.1 in resolver

2013-12-21 Thread Ruslan Ermilov
On Fri, Dec 20, 2013 at 04:12:45PM -0800, Darren Pilgrim wrote: > On 12/20/2013 3:20 PM, justin wrote: > > Using: > > > > resolver 127.0.0.1 valid=300s; > > > > Does not work. I assume this would simply uses the DNS servers listed in > > /etc/resolv.conf? Thanks. > > The resolver directive tells N

Re: geoip_country_code header is deleted when I set another custom header

2014-01-10 Thread Ruslan Ermilov
On Fri, Jan 10, 2014 at 04:40:00AM -0500, MarcPapers wrote: [...] > location / { > proxy_pass http://xx; > access_log /var/log/nginx/xx.access.log menosbasico; > proxy_set_header ismobiletraffic $mobile_flag; > } > > ## END DEFAULT FILE ## >

Re: monitoring cache statistics

2014-01-10 Thread Ruslan Ermilov
On Fri, Jan 10, 2014 at 03:50:05AM -0500, bodomic wrote: > Hi people! > > Just a small note - this patch does not work with nginx-1.4.4 :) > I think it's ok after 4.5 years, maybe there is a working version around? There's the http://nginx.org/en/docs/http/ngx_http_status_module.html module that

Re: "ssl_session_cache" not working on windows Version

2014-01-20 Thread Ruslan Ermilov
On Mon, Jan 20, 2014 at 12:18:53PM +0100, basti wrote: > Hello, > I have an nginx in front of an Windows IIS to delete some headers send > my IIS from proprietary application. > Now I try to use the following parameter on nginx running on windows: > > # SSL session cache > #ssl_session_cache share

Re: Logging $ssl_session_id can crash Nginx 1.5.9 worker

2014-01-22 Thread Ruslan Ermilov
On Wed, Jan 22, 2014 at 02:02:51PM -0500, mnordhoff wrote: > I run the nginx.org mainline packages on Ubuntu 12.04, 32- and 64-bit. I use > a wacky custom log format, and after 1.5.9 was released today, I enabled > logging the $ssl_session_id variable. I later ran an SSL Labs SSL Server > Test, [0]

Re: Logging $ssl_session_id can crash Nginx 1.5.9 worker

2014-01-23 Thread Ruslan Ermilov
On Thu, Jan 23, 2014 at 01:48:58AM +0400, Maxim Dounin wrote: > On Thu, Jan 23, 2014 at 12:06:55AM +0400, Ruslan Ermilov wrote: > > > On Wed, Jan 22, 2014 at 02:02:51PM -0500, mnordhoff wrote: > > > I run the nginx.org mainline packages on Ubuntu 12.04, 32- and 64-bit. I &g

Re: Setting a header inside an if block

2014-02-06 Thread Ruslan Ermilov
On Wed, Feb 05, 2014 at 05:12:55PM -0500, justink101 wrote: > I don't have the auth_request module? All I need to do, is set the > WWW-Authenticate header. So you only want to ensure that the basic authentication was attempted, but don't want to check the credentials on the nginx side? Here's how

Re: upstream_response_time

2014-02-11 Thread Ruslan Ermilov
On Mon, Feb 10, 2014 at 02:17:30PM -0800, Jeroen Ooms wrote: > I am using > > add_header x-responsetime $upstream_response_time; > > to report response times of the back-end to the client. I was > expecting to see the back-end response time (e.g. 0.500 for half a > second), however the header

Re: memory pool allocation

2014-04-10 Thread Ruslan Ermilov
On Wed, Apr 09, 2014 at 08:31:29AM -0400, nginxsantos wrote: > Suppose, I am allocating a pool of greater than 4k(page size). Say for > example I am calling the function ngx_create_pool with 8096. > But, this function will set the max as 4095 even if it has allocated 8K. Not > sure, why is it being

Re: using $upstream* variables inside map directive

2014-05-07 Thread Ruslan Ermilov
On Wed, May 07, 2014 at 01:38:04AM -0400, Kirill K. wrote: > Hello, > I'm trying to avoid caching of small responses from upstreams using map: > map $upstream_http_content_length $dontcache { > default 0; > ~^\d\d$ 1; > ~^\d$ 1; > } > > Unfortunatelly, nginx seems to ignore $upstream* variables at

Re: using $upstream* variables inside map directive

2014-05-07 Thread Ruslan Ermilov
On Wed, May 07, 2014 at 08:53:56AM -0400, Kirill K. wrote: > Thanks, Ruslan, > Thing is, I tried to "debug" whether $dontcache is being set at all by > exposing it via response headers (along with content-length), and it shows > that $upstream_response_length is ignored by map completely, i.e. no m

Re: Using Domain Names in proxy_pass directive

2014-05-23 Thread Ruslan Ermilov
On Fri, May 23, 2014 at 07:39:36AM -0400, Shobhit Mishra wrote: > Hi > > I am using nginx as reverse proxy with FQDN for the backend server . > > My configuration for the location block looks like this :- > > location / { > > set $ustreamsbc sbc.example.com ; > proxy_pass HTTPS://$ustrea

Re: Proposal minor patch on ngx_http_upstream.c

2014-06-02 Thread Ruslan Ermilov
r, > } > > ev->error = 1; > - > -} else { /* n == 0 */ > -err = 0; > } > > ev->eof = 1; > > -- > 1.7.10.4 > > Posted at Nginx Forum: > http://forum.nginx.org/read.php?2,250570,250570#msg

Re: Sticky equivalent

2014-06-18 Thread Ruslan Ermilov
On Wed, Jun 18, 2014 at 12:24:32PM +0200, Stefanita Rares Dumitrescu wrote: > Hi guys, > > I am running nginx 1.4 right now on a bunch of front end servers, i am > running freebsd, and have nginx with sticky patch compiled from ports. > > I can't upgrade to 1.6 or later, because the sticky port

Re: Sticky equivalent

2014-06-18 Thread Ruslan Ermilov
server 10.0.0.2; server 10.0.0.3; } You can use any expression as the "key", e.g. hash $cookie_uid consistent; It all depends on your needs actually. > On Wed, Jun 18, 2014 at 7:59 AM, Ruslan Ermilov wrote: > > On Wed, Jun 18, 2014 at 12:24:32PM +0200, Stefanita Ra

Re: Sticky equivalent

2014-06-18 Thread Ruslan Ermilov
On Wed, Jun 18, 2014 at 08:46:04PM +0200, Stefanita Rares Dumitrescu wrote: > Oh god 1350$ Consistent hash is free of charge, it's in open source version. > On 18/06/2014 16:49, Ruslan Ermilov wrote: > > On Wed, Jun 18, 2014 at 11:22:24AM -0300, Fabiano Furtado Pessoa

Re: proxied requests hang when DNS response has wrong ident

2014-07-15 Thread Ruslan Ermilov
e to > re-produce with 1.7.3. The relevant parts of the config are: > > resolver 10.65.255.4; > > location / { > proxy_pass http://$host.internal$request_uri; > } Проблема валидна. Патч какой-то такой: # HG changeset patch # User Ruslan Ermilov # Date 1405424486 -14

Re: DNS problem

2014-08-18 Thread Ruslan Ermilov
On Sun, Aug 17, 2014 at 02:37:46PM +0800, ywsample wrote: > I know nginx 1.7.4 fixes a bug about DNS resolver, but i do not quite > understand why this would lead to a request hang, Because there is a > timeout handling, at a specified time if there is no response the timeout > callback will be cal

Re: proxied request hang when DNS server down

2014-08-20 Thread Ruslan Ermilov
relate to it; > > PS:base on nginx-1.7.4 Please try the attached patch. If you would like an attribution in a commit log, please tell me your real name. # HG changeset patch # User Ruslan Ermilov # Date 1408448606 -14400 # Tue Aug 19 15:43:26 2014 +0400 # Node ID f70b61673e6d536831527f

Re: invalidate a certain key in my cache

2014-10-31 Thread Ruslan Ermilov
NGINX+ also offers http://nginx.org/r/proxy_cache_purge On Fri, Oct 31, 2014 at 12:50:50PM +0200, Roland RoLaNd wrote: > thank you, that's exactly what i want > > Date: Fri, 31 Oct 2014 03:44:08 -0700 > > From: rpapro...@fearnothingproductions.net > > To: nginx@nginx.org > > Subject: Re: invalid

Re: nginx with proxy_cache_use_stale not returning from cache when connection refused

2014-12-11 Thread Ruslan Ermilov
On Wed, Dec 10, 2014 at 11:45:26AM -0500, new299 wrote: > Hi, > > I'm using nginx as a reverse proxy, but I can't get nginx to serve requests > from its cache when the upstream server is refusing connections. I > understood that "proxy_cache_use_stale error" should allow me to do this, > but it do

Re: NGINX Worker process stuck, CPU usage at 100%

2015-03-07 Thread Ruslan Ermilov
On Fri, Mar 06, 2015 at 09:59:47PM +, Kazlman, David wrote: > I've migrated my server over from lighttpd to NGINX(memory leaks were causing > cache issues which invoked OOM Killer in Linux). It seems that after a while > of running(about 30 minutes) with NGINX and processing requests just fi

Re: 答复: nginx plus with ssl on TCP load balance not work

2015-06-11 Thread Ruslan Ermilov
On Thu, Jun 11, 2015 at 09:03:55AM -, smith wrote: > With info level log enabled. > > Found these: > > 80's log: > 2015/06/11 08:48:18 [info] 12719#0: *449 client 10.0.0.1:1494 connected to > 0.0.0.0:80 > 2015/06/11 08:48:18 [info] 12719#0: *449 proxy 172.31.5.228:17019 connected > to 10.0

Re: ipv6 on nginx.org

2015-10-20 Thread Ruslan Ermilov
On Tue, Oct 20, 2015 at 10:20:43AM +0200, Daniel Krämer wrote: > Hi List, > > i know, this list is about the webserver itself. > But i have some Problems with the website nginx.org and ipv6 > and I really need it to read webserver docs. > > What's the Problem? It just does not work on two very di

Re: Upgrading Executable on the Fly - wrong docs?

2013-02-19 Thread Ruslan Ermilov
On Tue, Feb 12, 2013 at 03:01:39PM -0500, piotr.dobrogost wrote: > Ruslan, thanks for quick reply. > > I have some trouble comparing the new wording with the previous one as it > looks like your change went live at http://nginx.org/en/docs/control.html so > I do not have the old one to compare any