How to turn off gzip compression for SSL traffic

2013-08-16 Thread howard chen
Hi, As you know, due the breach attack (http://breachattack.com), HTTP compression is no longer safe (I assume nginx don't use SSL compression by default?), so we should disable it. Now, We are using config like the following: gzip on; .. server { listen 127.0.0.1:80 default

Re: Nginx reload problem

2013-08-16 Thread B.R.
Hello Maxim! :o) On Fri, Aug 16, 2013 at 11:16 PM, Maxim Dounin wrote: > Hello! > > On Fri, Aug 16, 2013 at 10:16:16PM -0400, B.R. wrote: > > > I guess it would be nice if the doc warned about directives that need a > > server restart to be reloaded. > > > > Everyone supposes (as it seems obvio

Re: Module development question - Variables

2013-08-16 Thread Maxim Dounin
Hello! On Thu, Aug 15, 2013 at 03:40:59PM +0200, Jan Algermissen wrote: > Hi, > > been trying to understand variables for a couple of hours - but I jut don't > get it. > > Can anyone explain, > > > 1) How and when the variable setter function is called? Something like this in a configurat

Re: Nginx reload problem

2013-08-16 Thread Maxim Dounin
Hello! On Fri, Aug 16, 2013 at 10:16:16PM -0400, B.R. wrote: > I guess it would be nice if the doc warned about directives that need a > server restart to be reloaded. > > Everyone supposes (as it seems obvious) that reloading Nginx is enough to > apply configuration changes. Reloading is enoug

Re: proxy_cache seems not working with X-Accel-Redirect

2013-08-16 Thread Maxim Dounin
Hello! On Fri, Aug 09, 2013 at 06:20:21AM -0400, gray wrote: > My config > > location ~ /cached/ { > proxy_pass http://apache; > proxy_cache cache; > proxy_cache_valid 2h; > proxy_cache_key "$host|$request_uri"; > > } > > locatio

Re: Nginx reload problem

2013-08-16 Thread B.R.
I guess it would be nice if the doc warned about directives that need a server restart to be reloaded. Everyone supposes (as it seems obvious) that reloading Nginx is enough to apply configuration changes. An interesting part of the question was the inquiry about the potential existence other dir

Re: Nginx reload problem

2013-08-16 Thread Maxim Dounin
Hello! On Thu, Aug 15, 2013 at 11:07:30PM +0800, li zJay wrote: > Hello: > > I found that some nginx config option doesn't take effect after > modification with reload, the following is a simple test case: > > nginx version: nginx/1.2.7 > nginx.conf: > > worker_proc

Re: cache based on file size

2013-08-16 Thread Maxim Dounin
Hello! On Mon, Aug 05, 2013 at 10:28:31PM +, Johns, Kevin wrote: > Hi, > > In looking over Nginx configuration for the proxy module, I do not see an > easy way to influence what is cached based on object size. I have two use > cases of interest: > 1. Store a small file in a particular zone

Re: Cookie/Session Expired - OWA SSL Reverse Proxy

2013-08-16 Thread spacecwoboy
Jonathan Matthews Wrote: --- > On 14 August 2013 18:20, spacecwoboy wrote: > > Hi. > > > > Trying to configure a reverse proxy to allow external access to an > outlook > > web access server. I am able to route traffic through the NGINX to > the O

Re: geoip filtering not working

2013-08-16 Thread AJ Weber
I have this working pretty well (ok, I think _very_well_ ) with GeoIP. I used a MAP in the main nginx.conf like this: map $geoip_country_code $allowed_country { default0; US 1; GB 1; CA 1; EU 1; } Then, in my de

Re: Creating One-way connections or Dont wait for upstream

2013-08-16 Thread Reinis Rozitis
The client side of the application does not care about the response from nginx. It would be acceptable to send a blank response or send no database at all and simple just close the connection. After or as the connection is closed I would like the data to work internal within nginx as normal se

Creating One-way connections or Dont wait for upstream

2013-08-16 Thread wojonstech
Hello, I am working on an application where http ( websocket, or any type of connection) connections will be one direction for inserting data into a database and queuing data. The client side of the application does not care about the response from nginx. It would be acceptable to send a blank res

Re: geoip filtering not working

2013-08-16 Thread Matt520
Hi, I was looking for the zip code from a given IP address few months back and now I've got the solution from IP2Location. You can try IP2Location module see if it helps in your issues and good luck. (http://ip2location.com/developers/nginx) Posted at Nginx Forum: http://forum.nginx.org/read.php?