Re: sni hostname and request Host header mismatch

2018-10-10 Thread itpp2012
Via map and the default ? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,281564,281565#msg-281565 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

2019-01-10 Thread itpp2012
Try this; worker_processes 2; worker_rlimit_nofile 32767; thread_pool iopool threads=16 max_queue=32767; Posted at Nginx Forum: https://forum.nginx.org/read.php?2,282613,282640#msg-282640 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org

Re: SMTP proxy with "STARTTLS only" accepts unencrypted mail

2019-06-05 Thread itpp2012
You might be better of with nginx stream to offload (ssl/tls), all of it is then encrypted. stream { upstream backendsmtp { server 192.168.3.32:25; } server { listen 1234 ssl; ssl_certificate /nginx/crts/global1.cert; ssl_certificate_key /nginx/crts/global1.key; include /

Re: Proxy Caching ignore path

2019-08-06 Thread itpp2012
The first location match is the active one, add another location before this one to change its caching behavior. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,285128,285130#msg-285130 ___ nginx mailing list nginx@nginx.org http://mailman.ng

Re: Proxy Caching ignore path

2019-08-06 Thread itpp2012
Above not below. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,285128,285135#msg-285135 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Proxy stream pop3 110 to secure 995

2019-08-15 Thread itpp2012
Considering this example https://docs.nginx.com/nginx/admin-guide/security-controls/securing-tcp-traffic-upstream/ How would you stream plain unsecured pop3 traffic to a secure endpoint elsewhere ? (without the backend certificates) ea. stream { listen 110; proxy_ssl on; proxy_pass site.com:995; }

openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-18 Thread itpp2012
Logging getting swamped with: [crit] 1808#2740: *20747 SSL_read() failed (SSL: error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading) while keepalive Related to: https://github.com/openssl/openssl/issues/10880 and this commit: https://github.com/openssl/openssl/commit/db943f43a60d1

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-18 Thread itpp2012
After using 1.1.1e, see also the commit where an explicit entry has been added. nginx just reports back what openssl passes, if this was unexpected (none critical) nginx needs to be patched, if not this openssl workaround (10880) needs to be changed. Posted at Nginx Forum: https://forum.nginx.org

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-20 Thread itpp2012
Maxim Dounin Wrote: --- > On Fri, Mar 20, 2020 at 10:41:32AM +0300, Sergey Kandaurov wrote: > > > On 18 Mar 2020, at 14:17, itpp2012 wrote: > > > Question: does this need to resolved in openssl or nginx ? > > So

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-21 Thread itpp2012
Other not as often as the primary but all related to 1.1.1e: All [crit]: SSL_read() failed (SSL: error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading) while processing HTTP/2 connection SSL_read() failed (SSL: error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading) wh

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-22 Thread itpp2012
How about this as this catches all 3 while conditions: +++ src/event/ngx_event_openssl.c @@ -2318, c->ssl->no_wait_shutdown = 1; c->ssl->no_send_shutdown = 1; if (sslerr == SSL_ERROR_ZERO_RETURN || ERR_peek_error() == 0) { ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0,

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-23 Thread itpp2012
It doesn't and there are a few more for which this doesn't work either, it needs a lot more work and testing. I had a new concept patch but today decided to roll back to 1.1.1d and back port 1.1.1e (de) patches only. Only NGX_ERROR mitigates a truncation attack, not NGX_DONE (which is open for deba

Re: SSL_read() failed on Nginx built with new OpenSSL 1.1.1e

2020-03-26 Thread itpp2012
See https://forum.nginx.org/read.php?2,287377 Revert back to 1.1.1d Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287464,287466#msg-287466 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: NGINX on windows

2020-03-27 Thread itpp2012
Look at this version, per-compiled, high performance http://nginx-win.ecsds.eu/ Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287488,287489#msg-287489 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-04-02 Thread itpp2012
Thomas Stephen Lee Wrote: --- > Hi, > > does > > OpenSSL 1.1.1f. > > fix the issue ? Yes. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287377,287532#msg-287532 ___ nginx mailing list

Re: Print current running connections in nginx

2020-04-16 Thread itpp2012
Best sample code: https://github.com/vozlt/nginx-module-vts Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287673,287680#msg-287680 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: `if` or `include` for mode-specific `server` directives?

2020-05-16 Thread itpp2012
https://blog.devcloud.hosting/configuring-nginx-for-quickly-switching-to-maintenance-mode-e4136cf497f3 https://forum.openresty.us/d/4770-c84503afcecd42ad08f3ec457c0948b7 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288057,288058#msg-288058 __

Re: Switch between upstream server

2020-05-28 Thread itpp2012
Sam Henaghan Wrote: --- > Please stop emailing me and delete anything or any information you > have about me or even accounts please this wasn’t me whatever has been > made so please delete You have joined a public mailing list with the email ad

Re: Load Balancing TCP directive mail {}

2020-06-07 Thread itpp2012
andersonsserra Wrote: --- > nginx: [emerg] "stream" directive is not allowed here in /etc/nginx/email/balanceador.conf:1 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288282,288291#msg-288291

Re: HLS stream issue

2020-06-17 Thread itpp2012
Drop "Cannot load M3U8: Crossdomain access denied" in Google, plenty of solutions. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288371,288374#msg-288374 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx last version on windows

2020-09-03 Thread itpp2012
I will have a look to see if this can be included in our next version. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,289290,289295#msg-289295 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx last version on windows

2020-09-03 Thread itpp2012
There's no point in trying, that module's code is full of errors and too many hacks. Your better of with Lua which is embedded in our version, see https://www.gakhov.com/articles/implementing-api-based-fileserver-with-nginx-and-lua.html Posted at Nginx Forum: https://forum.nginx.org/read.php?2,2

Re: Adding nginx_vts_module to existing nginx on Windows 10 platform!

2020-10-25 Thread itpp2012
Please note that Nginx 1.11.11.1 Lion (nearly 4 years old) is not a nginx product, either compile your own (and spend time to fix bugs) or upgrade to nginx 1.19.3.1 Unicorn. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,289793,289796#msg-289796 ___

Re: v1.19.5 OOPS: "Main process exited, code=dumped, status=11/SEGV" ?

2020-12-05 Thread itpp2012
Known perl issue, google: "segfault at 10 error 4 in libperl.so" Posted at Nginx Forum: https://forum.nginx.org/read.php?2,290159,290160#msg-290160 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Dashboard

2020-12-13 Thread itpp2012
This may work for you; https://github.com/vozlt/nginx-module-vts Posted at Nginx Forum: https://forum.nginx.org/read.php?2,290190,290203#msg-290203 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: upgrading binary failed - execve - too long argument list

2021-05-10 Thread itpp2012
You've been busy with this for 2 weeks... It's very easy, 1. kill all nginx processes 2. replace binary 3. start nginx 4. post some vague notice about being offline for 10 seconds and apologize 5. move on with life. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,291370,291474#msg-291

[News] Igor Sysoev leaving nginx

2022-01-26 Thread itpp2012
@Igor Sysoev, thanks for all your work and a wonderful product, we all hope you enjoy whatever you do next. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,293469,293469#msg-293469 ___ nginx mailing list -- nginx@nginx.org To unsubscribe send

Re: Build Issue with NGINX for Windows

2022-12-08 Thread itpp2012
https://stackoverflow.com/questions/54695248/building-openssl-for-windows-x64 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,295998,296006#msg-296006 ___ nginx mailing list -- nginx@nginx.org To unsubscribe send an email to nginx-le...@nginx

Re: Enable HTTP2 in one of several name-based servers

2016-06-23 Thread itpp2012
Valentin V. Bartenev Wrote: --- > > Is it possible to enable http2 in only one of several name-based > servers? > > > [..] > > No, it's not possible. Would it be a big (api) change to add a server block session flag? ngx_http_v2_init(ngx_event

Re: Enable HTTP2 in one of several name-based servers

2016-06-23 Thread itpp2012
Valentin V. Bartenev Wrote: > What effect do you expect? Since clients are able to request > different hosts > using single HTTP/2 connection, closing the connection in one server > block > will break everything. I'm just venting an (untested) idea, some other way to tell the client to revert b

Re: Differing ocsp responses

2016-06-29 Thread itpp2012
CJ Ess Wrote: --- > Ok, that explains it then. Does the cache survive reloads? Or does it > need > to requery? See also https://forum.nginx.org/read.php?2,249249,249249#msg-249249 "When Nginx starts for the first time, and there's no cached OCSP

Re: Issue with HTTP/2 and async file upload from Safari on iOS

2016-07-08 Thread itpp2012
You can manually apply the patches and recompile. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,267385,268205#msg-268205 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Hierarchy of malformed requests and blocked IPs

2016-07-30 Thread itpp2012
A 400 doesn't reach location blocks. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268629,268638#msg-268638 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Hierarchy of malformed requests and blocked IPs

2016-07-30 Thread itpp2012
See https://forum.nginx.org/read.php?2,267651 at this level nginx is not an advanced all layer firewall/ids/dds tool. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268629,268646#msg-268646 ___ nginx mailing list nginx@nginx.org http://mailm

Re: transferring site from apache....

2016-08-02 Thread itpp2012
Sounds like this add-on: https://github.com/alibaba/nginx-http-concat Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268683,268699#msg-268699 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: 413 Request Entity Too Large

2016-08-11 Thread itpp2012
The 413 is coming from your backend. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268922,268923#msg-268923 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: proxy_cache:Why Receive >Transmit?

2016-08-14 Thread itpp2012
When compressing (nginx) an already compressed stream (backend) that stream usually gets bigger. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268938,268941#msg-268941 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/

pcre.org down?

2016-09-02 Thread itpp2012
Anyone any idea what happened to www.pcre.org ? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269359,269359#msg-269359 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: curl -I says X-Cache-Status: MISS

2016-09-06 Thread itpp2012
Brent Clark Wrote: --- > Vary: User-Agent See https://forum.nginx.org/read.php?2,262943,262943#msg-262943 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269389,269391#msg-269391 ___ nginx

Re: pcre.org down?

2016-09-08 Thread itpp2012
Still down and so are many mirrors (broken or empty updates) Found one still working at https://fourdots.com/mirror/exim/exim-ftp/pcre/ Or get a copy here http://nginx-win.ecsds.eu/download/pcre-8.40-r1664-10-8-2016-svn-src.zip Both cross-platform sources. Posted at Nginx Forum: https://forum.

Re: add_header Set-Cookie The difference between Max-Age and Expires

2016-09-09 Thread itpp2012
In Lua it's as easy as: https://github.com/openresty/lua-nginx-module/issues/19#issuecomment-19966018 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269438,269439#msg-269439 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mai

Re: add_header Set-Cookie The difference between Max-Age and Expires

2016-09-09 Thread itpp2012
Good, keep in mind that "ngx.time()" can be expensive, it would be advisable to use a global var to store time and update this var once every hour. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269438,269444#msg-269444 ___ nginx mailing lis

Re: Keeping your Nginx limit_* Anti-DDoS behind CloudFlare's servers

2016-09-13 Thread itpp2012
c0nw0nk Wrote: > Yes I can't test it at the moment unfortunately with the realip module > due to the fact i use "itpp2012" Nginx builds > http://nginx-win.ecsds.eu/ They do not come compiled with the realip > module (for now ?) Of course this module is compiled in. Po

Re: Keeping your Nginx limit_* Anti-DDoS behind CloudFlare's servers

2016-09-13 Thread itpp2012
c0nw0nk Wrote: --- > I take it the module is a part of the Nginx.exe build and not > Nginx_basic.exe If its part of stock its also part of the basic version. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269502,269553#msg-269553 __

Re: Keeping your Nginx limit_* Anti-DDoS behind CloudFlare's servers

2016-09-14 Thread itpp2012
A simple test from here: http://hg.nginx.org/nginx-tests/rev/4e6d21192037 passes and works as it should even with the basic version, also have a look at: http://serverfault.com/questions/409155/x-real-ip-header-empty-with-nginx-behind-a-load-balancer Posted at Nginx Forum: https://forum.nginx.or

typical value(s) for stream/limit_conn

2016-09-19 Thread itpp2012
Plenty of guidelines for http limit_conn but hardly any for stream, what would be a typical value in which cases? Has anyone done some log/connection analysis to determine what would be typical use? Atm. I'd say '5', but this is more a feeling then science. Posted at Nginx Forum: https://forum.ng

Re: typical value(s) for stream/limit_conn

2016-09-20 Thread itpp2012
5 wasn't really enough, 12 seems a better value. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269663,269701#msg-269701 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: typical value(s) for stream/limit_conn

2016-09-20 Thread itpp2012
Francis Daly Wrote: --- > On Tue, Sep 20, 2016 at 09:27:40PM +0100, Francis Daly wrote: > > > "stream" is "arbitrary tcp connections". There is no "typical", I > think. > > "stream" is also "arbitrary udp datagrams" too, of course. Which > proba

Re: access_log format $remote_user anonymous question

2016-09-21 Thread itpp2012
http://nginx.org/en/docs/http/ngx_http_core_module.html#variables $remote_user user name supplied with the Basic authentication Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269734,269738#msg-269738 ___ nginx mailing list nginx@nginx.o

Re: access_log format $remote_user anonymous question

2016-09-21 Thread itpp2012
Its just an attempt to gain access, ignore it, we get 1000's a day. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269734,269741#msg-269741 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Recommended limit_req and limit_conn for location ~ \.php$ {}

2016-09-27 Thread itpp2012
General rule of thumb is set it as low as possible, as soon as 503's are getting your users upset or resources are getting blocked, then double the values, keep an eye on the logs, double it one more time when required, done. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269862,269866

Re: Inquiry regarding support for OpenSSL 1.0.2i

2016-09-28 Thread itpp2012
Try this one http://nginx-win.ecsds.eu/ with 1.0.2j Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269889,269898#msg-269898 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx Proxy KeepAlive and FastCGI KeepAlive

2016-09-30 Thread itpp2012
A backend is a pool (upstream) for which work is distributed to, the pool size has no bearing to keepalive. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,269997,27#msg-27 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.o

Re: URL is not pointing to https on iframe

2016-10-12 Thread itpp2012
geopcgeo Wrote: --- > fine on https. But please let me know whats the issue? Is it on Iframe > or > on Nginx. Can anyone please help us? This needs to be fixed in the iframe (or whatever you use to generate this iframe). Posted at Nginx Forum:

Re: Using Nginx as proxy content are "striped"

2016-10-20 Thread itpp2012
proxy_pass http://192.168.1.100:38080; (remove the trailing slash) Posted at Nginx Forum: https://forum.nginx.org/read.php?2,270422,270423#msg-270423 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx 1.11.5 'duplicate' map_hash_bucket_size error when geoip_country block used?

2016-10-22 Thread itpp2012
Syntax: map_hash_bucket_size size; Default:map_hash_bucket_size 32|64|128; Context:http The err message is valid but may be misleading due to the places you used, a dup msg does not indicate the valid context area. Posted at Nginx Forum: https://forum.nginx.org/read.php?2

Re: Hacker log

2016-10-22 Thread itpp2012
The idea is nice but pointless, if you maintain this list over 6 months you most likely will end up blocking just about everyone. Stick to common sense with your config, lock down nginx and the backends, define proper flood and overflow settings for nginx to deal with, anything beyond the scope of

Re: Rewrite Vary header before stored in proxy_cache

2016-10-24 Thread itpp2012
Lucas Rolff Wrote: --- > > When using purge as availalbe in nginx-plus > (http://nginx.org/r/proxy_cache_purge), it takes care of removing all > cached variants, much like it does for wildcard purge requests. > Ahh cool! Nice one - maybe we'll be

Re: Help with securing "route" cookie

2016-11-22 Thread itpp2012
The 'secure' option is not working? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,271052,271119#msg-271119 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Help with securing "route" cookie

2016-11-22 Thread itpp2012
Some workarounds: http://serverfault.com/questions/496749/in-nginx-reverse-proxy-how-to-set-the-secure-flag-for-cookies https://maximilian-boehm.com/hp2134/NGINX-as-Proxy-Rewrite-Set-Cookie-to-Secure-and-HttpOnly.htm Posted at Nginx Forum: https://forum.nginx.org/read.php?2,271052,271120#msg-271

Re: AW: AW: AW: AW: SNI and certs.

2016-11-30 Thread itpp2012
Lukas Tribus Wrote: --- > As I said, the best way would be to drop the TLS handshake, but nginx > doesn't support this afaik. If you mind the overhead, ssl_preread_server_name could be used for this. Posted at Nginx Forum: https://forum.nginx.o

Re: need help reverse-proxy config

2017-01-09 Thread itpp2012
stream { limit_conn_zone $binary_remote_addr zone=straddr:10m; upstream backendsmtp { server smtp1.local:25; server smtp2.local:25; } server { listen 2025 ssl; error_log /logging/stream_local_smtp.log debug; ssl_certificate /nginx/crts/sdom.cert; ssl_certificate_k

Re: MySQL Access w/ Nginx

2017-03-02 Thread itpp2012
With Lua you will find many examples how to interact (non-blocking) with mysql, Lua also contains a load balancer which can be adapted to loadbalance sql instances. See also https://www.google.nl/#q=nginx+lua+mysql Posted at Nginx Forum: https://forum.nginx.org/read.php?2,272718,272719#msg-27271

Re: Tomcat EOFException when nginx is Reverse Proxy for WebSockets

2017-03-21 Thread itpp2012
Looks like this issue: http://stackoverflow.com/questions/30619703/java-io-eofexception-when-downloading-files-from-remote-server-to-android-phone Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273064,273066#msg-273066 ___ nginx mailing list

Re: How to Edit/Delete own posted reply or topic

2017-04-12 Thread itpp2012
You can if you use the web portal at https://forum.nginx.org/ Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273547,273556#msg-273556 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: unable to log upstream_bytes_sent

2017-05-01 Thread itpp2012
Its part of stream {} http://mailman.nginx.org/pipermail/nginx-devel/2016-September/008752.html Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273859,274018#msg-274018 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/l

Re: Can you migrate a web app available via '/' to a proxied sub-URI without modifying the web app?

2017-05-09 Thread itpp2012
location /flask-demo/ { root /var/www/passenger-python-flask-demo; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Host $host; rewrite/flask-demo/([^/]+) /$1 break;

Re: Can you migrate a web app available via '/' to a proxied sub-URI without modifying the web app?

2017-05-09 Thread itpp2012
Francis Daly Wrote: --- > It cannot work in stock nginx just using nginx.conf normal directives. You can with (many) proper rewrites but this does require a very close eye on the logfiles until you have rewritten all the 40x's, and for the sake o

Re: Can you migrate a web app available via '/' to a proxied sub-URI without modifying the web app?

2017-05-09 Thread itpp2012
Francis Daly Wrote: --- > nginx gets a request for /static/styles.css. > > I'm not aware of a rewrite which will let you decide which of > web-app-1 > and web-app-2 is the correct one to proxy_pass this request to this > time. Both web apps use t

Re: nginx reverser proxy tomcat with tomcat not working

2017-05-22 Thread itpp2012
AjaySawant Wrote: --- > doesn't open as tomcat is running on 192.168.2.6 and not localhost. [...] > proxy_pass http://localhost:8080/auth_app/; Maybe you made a typo in your config. Posted at Nginx Forum: https://forum.

Re: Same cached objects, but different body_bytes_sent

2017-06-01 Thread itpp2012
Does Curl do the same thing from 2 different locations? looks like typical client behavior with partial matching (range request). Posted at Nginx Forum: https://forum.nginx.org/read.php?2,274589,274592#msg-274592 ___ nginx mailing list nginx@nginx.org

Re: Same cached objects, but different body_bytes_sent

2017-06-02 Thread itpp2012
I can imagine a client only asking for the first 2xx bytes (where a 206 reply is not required) to compare against its local cache. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,274589,274622#msg-274622 ___ nginx mailing list nginx@nginx.org

Re: Nginx allowed characters inside full URL / URI and ARGS

2017-07-15 Thread itpp2012
Use my simple map/waf example (nginx-simple-WAF.conf) and some cleaver regex's. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275500,275511#msg-275511 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: A Nginx Upstream DDoS Blackhole how does it work ?

2017-07-27 Thread itpp2012
See the 'upstream_EBLB_with_IWCP.txt' document and the pdf documentation, the primary control (ie. signaling) should be (initiated) triggered by your edge controllers or router. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275671,275688#msg-275688 ___

Re: Building Nginx from source for Windows

2017-08-02 Thread itpp2012
Use this one, portable, tried, tested, production ready http://nginx-win.ecsds.eu/ 2: yes 3: yes already included. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275804,275808#msg-275808 ___ nginx mailing list nginx@nginx.org http://mailman

Re: location settings for Django Uwsgi Nginx Configuration for production

2017-09-15 Thread itpp2012
Have a look in the nginx error logfile where it expects the file to be. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,276402,276403#msg-276403 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: location settings for Django Uwsgi Nginx Configuration for production

2017-09-15 Thread itpp2012
A 404 is logged unless logging has been disabled, ask the hosting company where logs are, check nginx.conf what/where is logged. . Posted at Nginx Forum: https://forum.nginx.org/read.php?2,276402,276407#msg-276407 ___ nginx mailing list nginx@nginx.org

Re: Migrating from Varnish

2017-11-23 Thread itpp2012
Andrei Wrote: --- > I'm aware of the paid version, but I don't have a budget for it yet, > and > quite frankly this should be a core feature for any caching service. > Are > there no viable options for the community release? It's a rather https:

Re: Migrating from Varnish

2017-11-23 Thread itpp2012
Andrei Wrote: --- > Thanks for the tip. Have you ran into any issues as Maxim mentioned? > Not yet. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,277462,277487#msg-277487 ___ nginx maili

Re: Nginx error log parser

2018-01-10 Thread itpp2012
Aziz Rozyev Wrote: --- > Hi Mohit, > > check the second reply. I’m not sure that there is a conventional > pretty printing > tools for nginx error log. Look at awstats. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278065,278080#ms

Re: fsync()-in webdav PUT

2018-02-28 Thread itpp2012
Not waiting for fsync to complete makes calling fsync pointless, waiting for fsync is blocking, thread based or otherwise. The only midway solution is to implement fsync as a cgi, ea. a none-blocking (background)fc call in combination with an OS resource lock. Posted at Nginx Forum: https://forum

Re: failover to the next upstream server if one of the servers is slow

2018-06-22 Thread itpp2012
You may have to resort to Lua (openresty) and periodically perform via a sub request a query which should indicate how fast an upstream is and decide weather to take it offline (which also can be done with Lua). Posted at Nginx Forum: https://forum.nginx.org/read.php?2,280259,280260#msg-280260 _

Re: failover to the next upstream server if one of the servers is slow

2018-06-23 Thread itpp2012
Can't tell atm. if a timeout forces a node to become offline but 60s is still along time to wait (and decide) without actually knowing if a node is overloaded (it might be just busy which does not always mean overloaded). There are tools for fi. edge routers which polls a status page to decide to

Re: nginx on Windows

2018-07-10 Thread itpp2012
Have a look here http://nginx-win.ecsds.eu/ Posted at Nginx Forum: https://forum.nginx.org/read.php?2,280470,280474#msg-280474 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: redirect based on file content

2018-07-16 Thread itpp2012
This can be done with Lua but each disk access is a blocking call to nginx, your design should include caching of such calls (access disk once every 100 calls or after 60 seconds). Posted at Nginx Forum: https://forum.nginx.org/read.php?2,280529,280533#msg-280533

Re: Avoiding Nginx restart when rsyncing cache across machines

2018-09-13 Thread itpp2012
It is fairly simple to hack nginx and use Lua to reload the cache timed or via a request. The code is already there, its just a matter of calling it again. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,281179,281225#msg-281225 ___ nginx mai

Re: Nginx urgent query

2018-09-20 Thread itpp2012
Devika Awasthi Wrote: --- > Many Thanks Maxim, > > But we did try to achieve the functionality by using - > nginx=1.10.3-r1, we > couldn't get request based session stickiness. > Basically we want the requests with identical query params to hit t

Re: nginx-1.4.0

2013-04-27 Thread itpp2012
Hello Maxim, Can you tell us the status with the branches ? Is 1.3 now the new stable ? (what is then the status of 1.2 ?) Is 1.4 development ? Should all 1.2 users upgrade to 1.3 ? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,238606,238681#msg-238681 __

Re: How to turn off gzip compression for SSL traffic

2013-08-18 Thread itpp2012
Igor Sysoev Wrote: --- > Yes, modern nginx versions do not use SSL compression. [...] > You have to split the dual mode server section into two server server > sections and set "gzip off" > SSL-enabled on. There is no way to disable gzip in dual m

Re: How to turn off gzip compression for SSL traffic

2013-08-18 Thread itpp2012
I think we could all benefit from a nginx recommendation on using gzip with single and dual mode server sections regarding a hardening approach against breach. Maxim? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,241953,241993#msg-241993 ___

Re: 504 Gateway Time-out when calling curl_exec() in PHP with SSL peer verification (CURLOPT_SSL_VERIFYPEER) off

2013-08-24 Thread itpp2012
set PHP_FCGI_CHILDREN=0 set PHP_FCGI_MAX_REQUESTS=1 Posted at Nginx Forum: http://forum.nginx.org/read.php?2,242154,242181#msg-242181 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Transforming nginx for Windows

2013-09-01 Thread itpp2012
Working on getting real high performance with nginx under windows I am rewriting code and already got around the fd_setsize issue following http://stackoverflow.com/questions/7976388/increasing-limit-of-fd-setsize-and-select/18530636 which is documented as http://support.microsoft.com/kb/111855 I

Re: Transforming nginx for Windows

2013-09-02 Thread itpp2012
Found them, tnx, no adjustment needed here, it's dealing with the much larger FD table without problems. Got up to 12k concurrent connections today one worker one cpu at around 40% utilization, can't get beyond that yet due to the test tool not being able to go beyond 12k :) If anyone wants to tes

Re: Transforming nginx for Windows

2013-09-04 Thread itpp2012
If you want to test along pushing the max concurrent limit here's my experimental version: nginx 1.4.2 experimental b01.zip http://www.sendspace.com/file/zc4ak8 MD5:812ea5e77b39a11468291d9cb9b87503 SHA1: a2fb9e89fb272a3b3ee6162667f88e662c591ba6 Got to 20k concurrent connections today, anyone

Re: Transforming nginx for Windows

2013-09-10 Thread itpp2012
10:27 10-9-2013: B02 build Based on nginx 1.4.2 with; pcre-8.32 zlib-1.2.8 openssl-1.0.1e + Compiled with: FD_SETSIZE = 16384 (original Windows source files modified) + Now capable to handle C250K ! (with optimization registry file) + Added Windows optimization registry file, check your curr

Re: Transforming nginx for Windows

2013-09-11 Thread itpp2012
nginxorg Wrote: --- > Just checking if you have any patches against nginx-1.4 or nginx-1.5 > to share? > > Thanks! When the outstanding issues have been resolved all code will flow back into the community, my target is a Windows nginx version th

Re: Transforming nginx for Windows

2013-09-23 Thread itpp2012
Lua compiled in! Transforming nginx for Windows: http://forum.nginx.org/read.php?2,242426 https://groups.google.com/forum/#!forum/openresty-en (Lua nginx compiled for nginx windows) Builds can be found here: http://nginx-win.ecsds.eu/ 10:37 23-9-2013: nginx 1.5.6.1 Alice Based on nginx 1.

Re: Transforming nginx for Windows

2013-09-25 Thread itpp2012
13:46 25-9-2013: nginx 1.5.6.3 Alice Based on nginx 1.5.6 (25-9-2013) with; + Bug fixes in lua-nginx-module(master 25-9-2013) and ngx_devel_kit(master 25-9-2013) by agentzh + Both debug and non-debug versions, the non-debug version is production use ready ! * vcredist_x86 is required, get it here

Re: Transforming nginx for Windows

2013-09-25 Thread itpp2012
> First of all, thank you for the work on Windows! :) We're getting there slowly! :) I've got 2 workers working, just need to figure out why :) > It'll be great if you can try running ngx_lua (and other nginx > modules') test suite against your Windows build on Windows. The test > scaffold is wr

Re: Overhead when enabling debug?

2013-09-27 Thread itpp2012
>From what I've seen here there is a small <5% overhead when compiled with debug and 5-10% while debug logging is active. I want my 5% :) so I make 2 versions. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,243201,243202#msg-243202 ___ nginx

  1   2   3   4   5   >