Re: Getting forward secrecy enabled

2013-10-02 Thread justin
Yeah, anyway to get the official yum repo to support ECDHE when they compile. Seems like a basic thing they should already do already. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,243341,243398#msg-243398 ___ nginx mailing list nginx@nginx.

Re: High response time at high concurrent connections

2013-10-02 Thread Oscar Fernandez Sierra
Hello. Perhaps this page can be useful for you to choose tools for testing: http://www.softwareqatest.com/qatweb1.html#LOAD Greetings, Oscar On Wed, Oct 2, 2013 at 11:13 PM, laltin wrote: > But while benchmarking with ab I test the site with a browser and I > experience high response times.

Re: High response time at high concurrent connections

2013-10-02 Thread bryndole
It soulds like ab is succeeding in generating a load high enough to impact performance already. You need to figure out where the bottlenecks are. My message is intended as a helpful hint that you should not trust the stats from ab. You need to be measuring perf on the nginx and backend servers. S

Re: High response time at high concurrent connections

2013-10-02 Thread laltin
But while benchmarking with ab I test the site with a browser and I experience high response times. What do you recommend for testing? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,243246,243390#msg-243390 ___ nginx mailing list nginx@nginx.

Re: High response time at high concurrent connections

2013-10-02 Thread bryndole
At that level of concurrency you are only testing the throughput of ab and not nginx. Apache bench is a single process and is too slow to test anything other than a single Apache instance. In summary, ab is a piece of crap. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,243246,243389#

Re: root works, alias doesn't

2013-10-02 Thread Grant
>> That's true. Is alias or root preferred in this situation for performance? > > The "root" directive is better from any point of view. It is less complicated > and bugfree ("alias" has bugs, see https://trac.nginx.org/nginx/ticket/97 ). > > You should always prefer "root" over "alias" when it i

Re: ssl on different servers

2013-10-02 Thread Valentin V. Bartenev
On Wednesday 02 October 2013 05:18:22 you wrote: > Hi, > My domain.com is on ip: x.x.x.x > where I have a configuration like: > > server { >server_name sub.domain.com; >location / { > > proxy_pass http://y.y.y.y; > > proxy_set_header X-Real-IP $remote_addr; > proxy_set

Re: root works, alias doesn't

2013-10-02 Thread Valentin V. Bartenev
On Wednesday 02 October 2013 20:22:17 Grant wrote: [..] > > That's true. Is alias or root preferred in this situation for performance? > The "root" directive is better from any point of view. It is less complicated and bugfree ("alias" has bugs, see https://trac.nginx.org/nginx/ticket/97 ). Y

Re: root works, alias doesn't

2013-10-02 Thread Grant
>> >> It works if I specify the full path for the alias. What is the >> >> difference between alias and root? I have root specified outside of >> >> the server block and I thought I could use alias to avoid specifying >> >> the full path again. >> > >> > http://nginx.org/en/docs/http/ngx_http_cor

[ANN] Windows nginx 1.5.6.4 Butterfly

2013-10-02 Thread itpp2012
12:38 2-10-2013: nginx 1.5.6.4 Butterfly The Nginx 'Butterfly' release brings to Windows stable and unleashed power of Nginx, Lua, Streaming feature, Reverse DNS, SPDY, easy c250k in a non-blocking and event driven build which runs on Windows XP SP3 or higher, both 32 and 64 bit. Based on nginx

Re: gzip does not work if Content-Type contain semicolon?

2013-10-02 Thread Piotr Karbowski
Maxim, thanks for your time and willing to help. False bug report. After doing some tests I found out that if I check localhost it does gzip, but if I go thru full ip/domain it does not - I had $http_proxy variable set and the proxy server was not providing me gzipped content. Sorry about the

Re: Does Nginx have separate queuing mechanism for requests?

2013-10-02 Thread Maxim Dounin
Hello! On Wed, Oct 02, 2013 at 10:04:23AM -0400, amehzenin wrote: > Hello. > > Consider the following situation: you are deploying application that can > serve 1 req./sec. What would happen if I send 10 request in 1 second? I > wrote simple app to test that: > https://github.com/amezhenin/nginx_

Re: gzip does not work if Content-Type contain semicolon?

2013-10-02 Thread Maxim Dounin
Hello! On Wed, Oct 02, 2013 at 05:27:15PM +0200, Piotr Karbowski wrote: > Hi, > > On 10/02/2013 05:13 PM, Maxim Dounin wrote: > >Do you have gzip_types properly set? > > > >http://nginx.org/r/gzip_types > > > > I believe I do. I tried quite a lot of combinations, also, text/html > is default on

Re: gzip does not work if Content-Type contain semicolon?

2013-10-02 Thread Piotr Karbowski
Hi, On 10/02/2013 05:13 PM, Maxim Dounin wrote: Do you have gzip_types properly set? http://nginx.org/r/gzip_types I believe I do. I tried quite a lot of combinations, also, text/html is default on and cannot be removed if I understand it corrently so it should work just as-is. I tried add

Re: We're sorry, but something went wrong

2013-10-02 Thread Scott Ribe
On Oct 2, 2013, at 9:08 AM, Lasse Laursen wrote: > That sounds like a RoR app acting up and not the nginx server itself. Ah... Yes it is an error in RoR, but I had mistakenly thought that RoR was failing to return a result to nginx, and nginx was serving up that page. I see that in fact RoR's

Re: gzip does not work if Content-Type contain semicolon?

2013-10-02 Thread Maxim Dounin
Hello! On Wed, Oct 02, 2013 at 05:07:01PM +0200, Piotr Karbowski wrote: > Hi, > > I have some serious troubles getting gzip to compress text/html and > text/plain content. > > I've put a nginx as revproxy to Jenkins. Jenkins return headers like > "Content-Type: text/plain;charset=UTF-8" and "Co

Re: We're sorry, but something went wrong

2013-10-02 Thread Lasse Laursen
That sounds like a RoR app acting up and not the nginx server itself. L. On Oct 2, 2013, at 4:28 PM, Scott Ribe wrote: > So I'm in the early stages of rolling out a system to production, and a few > app errors are cropping up that didn't get caught in testing, and it occurs > to me: it would

gzip does not work if Content-Type contain semicolon?

2013-10-02 Thread Piotr Karbowski
Hi, I have some serious troubles getting gzip to compress text/html and text/plain content. I've put a nginx as revproxy to Jenkins. Jenkins return headers like "Content-Type: text/plain;charset=UTF-8" and "Content-Type: text/html;charset=UTF-8". Even with all fancy stuff like enabling gzip

We're sorry, but something went wrong

2013-10-02 Thread Scott Ribe
So I'm in the early stages of rolling out a system to production, and a few app errors are cropping up that didn't get caught in testing, and it occurs to me: it would be nice if the default "we're sorry, but something went wrong" error page could include a timestamp. -- Scott Ribe scott_r...@

Does Nginx have separate queuing mechanism for requests?

2013-10-02 Thread amehzenin
Hello. Consider the following situation: you are deploying application that can serve 1 req./sec. What would happen if I send 10 request in 1 second? I wrote simple app to test that: https://github.com/amezhenin/nginx_slow_upstream . This test shows that your requests will be served _in_exact_sa

Re: Solving a 500 error

2013-10-02 Thread itpp2012
Sounds familiar, edit files elsewhere and overwrite them for nginx's destination, any basic editor has macro support, just make a macro that does a copy after save. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,24,243371#msg-243371 ___ n

Re: Getting forward secrecy enabled

2013-10-02 Thread Vahan Yerkanian
On Oct 2, 2013, at 9:57 AM, justin wrote: > I don't compile nginx, I get it from the official CentOS repo: > > [nginx] > name=nginx repo > baseurl=http://nginx.org/packages/centos/6/$basearch/ > gpgcheck=0 > enabled=1 > That's your problem, that version doesn't support ECDHE. You'll need to c

Re: Solving a 500 error

2013-10-02 Thread Maxim Dounin
Hello! On Tue, Oct 01, 2013 at 05:52:32PM +0100, Ian Hobson wrote: > Hi All, > > I have an nginx install with the configuration below. > > The server is a linux VM running under Virtual Box on my windows > machine. The website / directory is made available as a sharename > using Samba, which I

Re: Getting forward secrecy enabled

2013-10-02 Thread Darren Pilgrim
I have: ssl_ciphers HIGH:!SSLv2:!MEDIUM:!LOW:!EXP:!RC4:!DSS:!aNULL:@STRENGTH; ssl_prefer_server_ciphers on; ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; Yields: https://www.ssllabs.com/ssltest/analyze.html?d=rush.bluerosetech.com nginx 1.4.2 compiled against OpenSSL 1.0.1e 11 Feb 2013 _

Re: ssl on different servers

2013-10-02 Thread Axel
Hi, it sounds as if you want to proxy your ssl request to another server and terminate it there?! You cannot do this. You need to establish a ssl connection first before you can use http/s. regards, Axel Am 02.10.2013 03:18, schrieb dossi: Hi, My domain.com is on ip: x.x.x.x where I have a

Re: ssl on different servers

2013-10-02 Thread dossi
What's not working, I suppose, is that the client browser go to https://sub.domain.com (on IP x.x.x.x) that it is forwarded to IP y.y.y.y Is there any link that explains how to configure that two nginxes (one on x.x.x.x and one on y.y.y.y) so that the https traffic "routes" from x.x.x.x to y.y.y.

Re: ssl on different servers

2013-10-02 Thread mex
did you tried to turn it off and on again? sorry, but from your description no one would be able to help you. regards, mex Posted at Nginx Forum: http://forum.nginx.org/read.php?2,243340,243353#msg-243353 ___ nginx mailing list nginx@nginx.org

Re: ssl on different servers

2013-10-02 Thread dossi
The problem is that if I point a browser to https://sub.domain.com it doesn't work. Cheers Dossi Posted at Nginx Forum: http://forum.nginx.org/read.php?2,243340,243352#msg-243352 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/