Re: It's believed that SPDY is a huge DDoS vector by itself

2014-01-28 Thread B.R.
OK, thanks for your lights on this. They chose to work with SPDY, right, but are their ideas being followed-up to SPDY? Or will their protocol stay on a parallel path? The problem would then be that SPDY is backed by a major networking actor which name start with a G... SPDY simply can't be the b

Re: It's believed that SPDY is a huge DDoS vector by itself

2014-01-28 Thread Piotr Sikora
Hey, > Some other projects drafted towards HTTP/2.0 are made with efficiency in > mind. > One of them is called HTTPbis and has been first drated mid-2012 by 4 > interesting guys: Willy Tarreau (HAProxy), Poul‐Henning Kamp (Varnish), > Adrien de Croy (WinGate) and Amos Jeffries (Squid). > Look at

Re: It's believed that SPDY is a huge DDoS vector by itself

2014-01-28 Thread B.R.
I think what you both request is interesting. However, I would like to push the analysis further. Is seems SPDY design is flawed because it enables flexibility and offer new features compared to HTTP without taking into account the very basis of a protocol: being efficient by allowing quick and in

Re: Launching Excel in a production web server on a Mac

2014-01-28 Thread Scott Ribe
On Jan 28, 2014, at 4:01 PM, Anth Anth wrote: > I knew heading into this that this scenario was a longshot to work. My > question is is this even remotely possible? If not, does anyone have > any alternate suggestions? I don't see any reason why it wouldn't work, but you have to get your users

Re: PEM_read_bio_X509 - Installing Cert.

2014-01-28 Thread david
Fixed it. Whitespace - Arrgh. Thanks sorry for the noise. On 1/28/14 6:07 PM, david wrote: I am running into a strange problem. If I cat domain.crt >> bundle.crt ssl_certificate bundle.crt; ssl_certificate_key domain.key; and I try to start nginx I get the following error message. nginx: [e

Re: Launching Excel in a production web server on a Mac

2014-01-28 Thread Anth Anth
Fair enough, but I was looking for more of a high level guidance rather than solving my problem specifically. I guess my question is in general is it possible for Rails code running in nginx (running as root) to spawn an application like Excel? I'm not familiar enough with OS X's userspace mo

Re: PEM_read_bio_X509 - Installing Cert.

2014-01-28 Thread david
I forgot to mention that when I try to access the site via a browser if I just to the domain.crt then it pops up a dialog because its just an unsigned cert. Thanks in advance for any pointers. On 1/28/14 6:07 PM, david wrote: I am running into a strange problem. If I cat domain.crt >> bundl

Re: Launching Excel in a production web server on a Mac

2014-01-28 Thread Jonathan Matthews
To say that you've not given us sufficient information to help you debug your problem would perhaps be biggest understatement I've yet seen in 2014. Seriously, chap - "I can't open my spreadsheet in nginx" ... are you /really/ expecting anyone to be able to help from that minimal (if not totally n

PEM_read_bio_X509 - Installing Cert.

2014-01-28 Thread david
I am running into a strange problem. If I cat domain.crt >> bundle.crt ssl_certificate bundle.crt; ssl_certificate_key domain.key; and I try to start nginx I get the following error message. nginx: [emerg] PEM_read_bio_X509("bundle.crt") failed (SSL:) If I dont use the bundle I just use the d

Launching Excel in a production web server on a Mac

2014-01-28 Thread Anth Anth
I have written some code that will open Excel, edit a spreadsheet, then save and print the sheet. This code needs to run on a production web server in a Rails app. When I run it using Webrick (running under my user) everything is great. When I try it on the production server (nginx running as ro

Re: It's believed that SPDY is a huge DDoS vector by itself

2014-01-28 Thread SplitIce
I would like to second this. On Tue, Jan 28, 2014 at 11:03 PM, JackB wrote: > The subject is a quote of Maxim Dounin in a discussion found here: > http://forum.nginx.org/read.php?29,246885,246902#msg-246902 > > It would be nice to have a detailed list of SPDY functionality that could > be > use

Re: [Lua] "Hello, world!" from Lua file?

2014-01-28 Thread Yichun Zhang (agentzh)
Hello! On Tue, Jan 28, 2014 at 3:51 AM, Shohreh wrote: > > Thanks for the tip, it works. Is there a tutorial besides the following page > about how to write Lua scripts through ngx_lua? > http://wiki.nginx.org/HttpLuaModule > You can find a lot of resources on the openresty.org website: http

It's believed that SPDY is a huge DDoS vector by itself

2014-01-28 Thread JackB
The subject is a quote of Maxim Dounin in a discussion found here: http://forum.nginx.org/read.php?29,246885,246902#msg-246902 It would be nice to have a detailed list of SPDY functionality that could be used as a DDoS vector. And it would be even better, to have an nginx configuration example to

Configuration not working

2014-01-28 Thread Maxmilhas
Hello, I am running Nginx 1.3.0 on CentOS. It serves several domains. Yesterday we tried to change the allowed URIs to access one folder specific to one domain. After the config file change we tried the "nginx -s reload", without apparent success or errors. After this I rebooted the server, b

Re: [Lua] "Hello, world!" from Lua file?

2014-01-28 Thread Shohreh
Yichun Zhang (agentzh) Wrote: --- > Alternatively one can set the Content-Type response header directly in Lua (which is more flexible): > > content_by_lua ' > ngx.header["Content-Type"] = "text/plain" > ngx.say("hello world")

Re: X-Frame-Options: Nginx includes header twice

2014-01-28 Thread Jonathan Matthews
On 28 January 2014 11:04, Some Developer wrote: > If I could set arbitary headers in > Django then I could do it all there I know nothing about Django, but this would seem to be what you're asking for: https://docs.djangoproject.com/en/1.6/ref/request-response/#setting-header-fields J

Re: AW: nginx seems to proxy only http GET

2014-01-28 Thread Maxim Dounin
Hello! On Tue, Jan 28, 2014 at 09:08:30AM +, Matthias Richter wrote: > I was able to sort it out. My config was missing proxy_http_version 1.1; . The HTTP/1.1 isn't required for nginx to proxy POST and other methods. On the other hand, it's likely that your backend requires HTTP/1.1 to ha

Re: X-Frame-Options: Nginx includes header twice

2014-01-28 Thread Some Developer
On 27/01/2014 09:50, Jonathan Matthews wrote: On 27 January 2014 02:49, Some Developer wrote: Seems a bit strange to me that an application framework sets HTTP headers. Surely this should be left to the HTTP server? What are other peoples opinions on this? There are many instances where the a

Re: AW: nginx seems to proxy only http GET

2014-01-28 Thread Matthias Richter
I was able to sort it out. My config was missing proxy_http_version 1.1; . On 27.01.2014 20:07, Matthias Richter wrote: > that is strange because I cannot see any requests in the backend log file. > curl requests from command line pop up there though. > > so curl -X(DELETE|PUT|POST) localhost:

Re: Implementing CONNECT in nginx

2014-01-28 Thread Thomas Glanzmann
Hello Nickos, antoher way would be the SNI to distinguish. It would be nice to have SNI proxy support in NGINX. However there is a third party proxy which probably already does the job: https://github.com/dlundquist/sniproxy I'll test it later after I bisected the problem with anyconnect. Cheers