Re: No HTTP version in request

2013-03-19 Thread Igor Sysoev
On Mar 20, 2013, at 5:47 , Matthieu Tourne wrote: > I just found an interesting behavior in Nginx while looking at a reqeust that > was causing an error in my code. > > For a request with no HTTP/xx version, Nginx will return no HTTP response > headers. > > From what I gathered, this is just N

Re: Dropped https client connection doesn't drop backend proxy_pass connection

2013-03-19 Thread Robert Mueller
> Valentin is already worked on this, and I believe he'll be able to > provide a little bit more generic patch. Ok, well I might just use ours for now, but won't develop it any further. Any idea on a time frame for this more official patch? Rob ___

Re: Strange $upstream_response_time latency spikes with reverse proxy

2013-03-19 Thread Jay Oster
Hi Andrei! On Tue, Mar 19, 2013 at 2:49 AM, Andrei Belov wrote: > Hello Jay, > > If I understand you right, issue can be repeated in the following cases: > > 1) client and server are on different EC2 instances, public IPs are used; > 2) client and server are on different EC2 instances, private I

Re: Strange $upstream_response_time latency spikes with reverse proxy

2013-03-19 Thread Jay Oster
Hi Maxim, On Tue, Mar 19, 2013 at 7:19 AM, Maxim Dounin wrote: > Hello! > > As far as I understand, tcp_max_syn_backlog configures global > cumulative limit for all listening sockets, while somaxconn limits > one listening socket backlog. If any of the two is too small - > you'll see SYN packet

Re: When does nginx return a Bad gateway (502)?

2013-03-19 Thread Nikolas Stevenson-Molnar
In my experience, Nginx returns 502 when the upstream server (Unicorn in your case) doesn't respond or terminates the connection unexpectedly. _Nik On 3/19/2013 1:29 PM, fastcatch wrote: > I have an application behind nginx (Rails on Unicorn if it matters) which > listens on a UNIX socket. > > It

When does nginx return a Bad gateway (502)?

2013-03-19 Thread fastcatch
I have an application behind nginx (Rails on Unicorn if it matters) which listens on a UNIX socket. It all works nice, especially when load is low. When there is some load on the server though (say 70%), I randomly(?) get a bunch of 502 responses -- usually in batches. Thus the question: when (u

Re: Need to proxypass to different servers.

2013-03-19 Thread Francis Daly
On Tue, Mar 19, 2013 at 07:42:25PM +0530, Geo P.C. wrote: Hi there, > location / { > proxy_pass http://192.168.0.1/; #app1 > } > > location /cms { > proxy_pass http://192.168.0.2/; # > } > 1. geotest.com à Working fine getting the contents of app1 server > 2.

Re: How to change cookie header in a filter?

2013-03-19 Thread Cool
Thanks Maxim, I got what you mean. Since I'm using fastCGI so I put something like this: fastcgi_param HTTP_COOKIE "$http_cookie; mycookie=$cookie_note"; (I populated cookie_note in my filter already, this was done for logging purpose thus it is just a reuse of existing facility) More proble

Re: Translating an F5 rule

2013-03-19 Thread WBrown
peter wrote on 03/19/2013 01:54:20 PM: > You might find that you get most traction with open resty ? its an > nginx bundle project that includes ngx_lua, > HttpHeadersMoreModule and a bunch of other mopdules that are great > for transforming requests > and implementing F5-like logic. I have bee

[ANNOUNCE] ngx_cache_purge-2.1

2013-03-19 Thread Piotr Sikora
Version 2.1 is now available at: http://labs.frickle.com/nginx_ngx_cache_purge/ GitHub repository is available at: https://github.com/FRiCKLE/ngx_cache_purge/ Changes: 2013-03-19VERSION 2.1 * When enabled, cache purge will now catch all requests with PURGE (or specified) method, even

Re: Translating an F5 rule

2013-03-19 Thread peter
You might find that you get most traction with open resty ­ its an nginx bundle project that includes ngx_lua, HttpHeadersMoreModule and a bunch of other mopdules that are great for transforming requests and implementing F5-like logic. I have been using it for six months and its saved me a bunch o

Re: proxy not listening to 443

2013-03-19 Thread senior.we...@gmail.com
Ok, Its getting better :-) Could get it to listen to 443 by using listen *:443 default_server ssl; listen *:80; (star double dot port) however server still says ERR_CONNECTION_REFUSED and in access log, nothing appears for https .. any help would be highly appreciated .. Posted at Nginx Fo

RE: Translating an F5 rule

2013-03-19 Thread WBrown
Peter Booth wrote on 03/19/2013 10:43:12 AM: > The code does the following: > > 1. remove an HTTP header named "SWSSLHDR" > 2. replaces it with SWSSLHDR: port, where the port is the local port of > the "current context's TCP connection", presumably the port that your F5 > virtual server is listen

Re: Translating an F5 rule

2013-03-19 Thread Jeffrey 'jf' Lim
On Tue, Mar 19, 2013 at 10:43 PM, Peter Booth wrote: > The code does the following: > > 1. remove an HTTP header named "SWSSLHDR" > 2. replaces it with SWSSLHDR: port, where the port is the local port of > the "current context's TCP connection", presumably the port that your F5 > virtual server is

Re: Dropped https client connection doesn't drop backend proxy_pass connection

2013-03-19 Thread Maxim Dounin
Hello! On Tue, Mar 19, 2013 at 03:45:10PM +1100, Robert Mueller wrote: > > > > When an https client drops it's connection, the upstream http proxy > > > connection is not dropped. If nginx can't detect an https client > > > disconnect properly, that must mean it's leaking connection information

Re: Websocket proxying based on Sec-Websocket-Protocol

2013-03-19 Thread gvag
Thanks a lot for the answer. George Posted at Nginx Forum: http://forum.nginx.org/read.php?2,237539,237559#msg-237559 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

RE: Translating an F5 rule

2013-03-19 Thread Peter Booth
The code does the following: 1. remove an HTTP header named "SWSSLHDR" 2. replaces it with SWSSLHDR: port, where the port is the local port of the "current context's TCP connection", presumably the port that your F5 virtual server is listening on. This is presumably to separate SSL and non SSL t

Re: Need to proxypass to different servers.

2013-03-19 Thread Andreas Weber
Hi, Im not expert but i think you must specify /cms BEFORE / because "/" will match everything best regards andreas Threepwood: Ha-ha! Taste cold steel, feeble cannon restraint rope! 2013/3/19 Geo P.C. > Thanks for your reply. Please see this: > > > In Proxy server we have the setup as fol

Re: Strange $upstream_response_time latency spikes with reverse proxy

2013-03-19 Thread Maxim Dounin
Hello! On Mon, Mar 18, 2013 at 02:19:26PM -0700, Jay Oster wrote: > On Sun, Mar 17, 2013 at 4:42 AM, Maxim Dounin wrote: > > > On "these hosts"? Note that listen queue aka backlog size is > > configured in _applications_ which call listen(). At a host level > > you may only configure somaxcon

Translating an F5 rule

2013-03-19 Thread WBrown
I am configuring Nginx to sit in front of several IIS web servers to do load balancing and SSL signing. THe IIS application is supplied by an outside vendor. I have the load balancing and SSL signing working, with one exception. The login page doesn't work. :( When the vendor hosts this ap

Re: Need to proxypass to different servers.

2013-03-19 Thread Geo P.C.
Thanks for your reply. Please see this: In Proxy server we have the setup as follows: server { listen 80; server_name geotest.com; proxy_buffering on; proxy_redirect off; proxy_set_header Host $host; p

Re: Websocket proxying based on Sec-Websocket-Protocol

2013-03-19 Thread Maxim Dounin
Hello! On Tue, Mar 19, 2013 at 06:32:04AM -0400, gvag wrote: > Hi guys, > > I am trying to find if it is possible to proxy a websocket request based on > the Sec-Websocket-Protocol. More specific, is there a way to check the > Sec-Websocket-Protocol (http://tools.ietf.org/html/rfc6455#section-11

Re: How to change cookie header in a filter?

2013-03-19 Thread Maxim Dounin
Hello! On Mon, Mar 18, 2013 at 04:24:05PM -0700, Cool wrote: > Hi, > > What's the right way to change incoming cookie header so that upstream > can get it just like it's from user's original request header? For > example, user's browser sends: > > Cookie: PHPSESSID=34406134e25e5e07727f5de6d5ff7

proxy not listening to 443

2013-03-19 Thread senior.we...@gmail.com
Hello! We are running some applications servers (grails) and using nginx as reverse proxy before that for caching and load balancing purposes. everything is working as expected, but now that we received our ssl certificate, i am failing to route the ssl requests over nginx (i did understand that

Websocket proxying based on Sec-Websocket-Protocol

2013-03-19 Thread gvag
Hi guys, I am trying to find if it is possible to proxy a websocket request based on the Sec-Websocket-Protocol. More specific, is there a way to check the Sec-Websocket-Protocol (http://tools.ietf.org/html/rfc6455#section-11.3.4) header and proxy to the appropriate host/port according to this hea

Re: Strange $upstream_response_time latency spikes with reverse proxy

2013-03-19 Thread Andrei Belov
Hello Jay, On Mar 19, 2013, at 2:09 , Jay Oster wrote: > Hi again! > > On Sun, Mar 17, 2013 at 2:17 AM, Jason Oster wrote: > Hello Andrew, > > On Mar 16, 2013, at 8:05 AM, Andrew Alexeev wrote: >> Jay, >> >> You mean you keep seeing SYN-ACK loss through loopback? > > That appears to be the

Re: Need to proxypass to different servers.

2013-03-19 Thread Francis Daly
On Tue, Mar 19, 2013 at 09:25:09AM +0530, Geo P.C. wrote: Hi there, > We have 3 servers with Nginx as webserver. The setup is as follows: > So in proxy server we need to setup as while accessing geotest.com and all > its subdirectories like geotest.com/* it should go to app server 1 except > whi

Re: securing access to a folder - 404 error

2013-03-19 Thread Francis Daly
On Mon, Mar 18, 2013 at 08:10:47PM -0400, mottwsc wrote: Hi there, > I have found that this now > works as it should to protect the /secure folder when trying to view html > files, but it does not when viewing php files in the /secure folder (it just > bypasses authentication and displays the fil

how can i avoid google index my site properly jail directory only allow html extension.

2013-03-19 Thread lifeisjustabout
Hello I have small pdf search site searches pdf over internet when somebody search URL look like www.mypdfsearchwebsite.com/pdf/nginx.html with (html extension) google index this address with html and without html version so there are duplicate record on google index each search lies without htm