proxy doesn't cache

2013-05-09 Thread Stefan Xenon
Hi! I want to use nginx as a caching proxy in front of an OCSP responder. The OCSP requests are transmitted via HTTP POST. Hence, I configured nginx as follows: proxy_cache_path /tmp/nginx/cache levels=1:2 keys_zone=my-cache:8m max_size=1000m inactive=600m; server { server_name localhost; lo

Re: Disable automatic urlencoding with proxy_pass

2013-05-09 Thread Matthieu Tourne
On Thu, May 9, 2013 at 2:37 AM, lupin wrote: > Hi, > > Any way to disable urlencode on nginx with proxy_pass? Following is my > config and as suggested on google I already removed the "/" URI part of > of this "proxy_pass http://127.0.0.1:8090;"; > > Any idea how to proceed with this? > > I th

Re: Disable automatic urlencoding with proxy_pass

2013-05-09 Thread Francis Daly
On Thu, May 09, 2013 at 05:37:26AM -0400, lupin wrote: Hi there, > Any way to disable urlencode on nginx with proxy_pass? Following is my > config and as suggested on google I already removed the "/" URI part of > of this "proxy_pass http://127.0.0.1:8090;"; Why do you think that urlencode is

Re: HTTP Basic Auth question

2013-05-09 Thread Francis Daly
On Thu, May 09, 2013 at 12:55:22PM -0700, Russ Lavoy wrote: Hi there, > I have tried the following configuration which does not seem to work at all. > > proxy_hide_header Authorization; > > proxy_set_header Authorization "$remote_user";| What did you do; what did you see; what did you expect t

Re: Websocket proxy

2013-05-09 Thread Alder Network
Thanks for the recipe. Just tried and now I am not able to get regular HTTP working on port 80. Has anybody ever got nginx websocket proxy working? Thanks, - Alder On Thu, May 9, 2013 at 11:19 AM, António P. P. Almeida wrote: > At the http level: > > map $http_upgrade $connection_upgr

Re: Proxying based on protocol (e.g. "ws"/"wss")?

2013-05-09 Thread Steve Holdoway
The scheme is available as... $scheme On Thu, 2013-05-09 at 14:45 -0400, Daniel Griscom wrote: > ... bump? > > (thanks, > Dan) > > > At 9:32 AM -0400 5/8/13, Daniel Griscom wrote: > >I'm an nginx newbie, and need use use it as a front end for a > >website that also handles websocket connection

Re: HTTP Basic Auth question

2013-05-09 Thread Russ Lavoy
Hello, Sorry for the long delay.   I have tried the following configuration which does not seem to work at all. proxy_hide_header Authorization; proxy_set_header Authorization "$remote_user";| I can still sniff the traffic on lo and get the base64 user:pass.  The interesting thing is I do not

Re: Proxying based on protocol (e.g. "ws"/"wss")?

2013-05-09 Thread Daniel Griscom
... bump? (thanks, Dan) At 9:32 AM -0400 5/8/13, Daniel Griscom wrote: I'm an nginx newbie, and need use use it as a front end for a website that also handles websocket connections. I have the configuration set up so that requests to a specific URI match a location section, which then proxie

Re: Websocket proxy

2013-05-09 Thread António P . P . Almeida
At the http level: map $http_upgrade $connection_upgrade { default upgrade; '' close; } map $connection_upgrade $proxy_upstream_port { upgrade 81; close 80; } Then at the location do: location / { proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade;

Re: Location support for multiple URLs

2013-05-09 Thread António P . P . Almeida
You can do that. At the http level set a map directive like: map $arg_act$arg_ID $no_cache { default 1; ~*detail[[:alnum:]]+ 0; # assuming the ID is alphanumeric } Then add: fastcgi_cache_bypass $no_cache; fastcgi_no_cache $no_cache; to your FastCGI cache configuration. As per the he

Disable automatic urlencoding with proxy_pass

2013-05-09 Thread lupin
Hi, Any way to disable urlencode on nginx with proxy_pass? Following is my config and as suggested on google I already removed the "/" URI part of of this "proxy_pass http://127.0.0.1:8090;"; Any idea how to proceed with this? server { ### server port and name ### listen

How to read all client chain certificates from fastcgi request.

2013-05-09 Thread sravanakk
Hi, I configured my nginx with openssl as below: server { listen 443; server_name localhost; ssl on; ssl_certificate ssl_certificate_key ssl_client_certificate ssl_verify_client on; ssl_verify_dep