Re: moving servers... https woes.

2014-03-24 Thread Steve Holdoway
Hi Lorne, Sadly not quite. The change in IP means that the eCommerce part of the site must be served through https:, but there seems to be a terrible lag - even though TTL has been set to 5 minutes for weeks - for customers in picking the change up. This means that the old IP address needs to han

Re: moving servers... https woes.

2014-03-24 Thread Lorne Wanamaker
Not quite sure if I understand right but you may be able to do this using maps. Something like: http://redant.com.au/ruby-on-rails-devops/manage-ssl-redirection-in-nginx-using-maps-and-save-the-universe/ Lorne On Mon, Mar 24, 2014 at 8:51 PM, Steve Holdoway wrote: > Is there any way of forward

moving servers... https woes.

2014-03-24 Thread Steve Holdoway
Is there any way of forwarding https to a new server while people's DNS and browsers drain down? I know it's easy enough to terminate it and forward http, but I need both the old and new sites ( ecommerce ) to work in https where relevant... I have a horrible feeling that you can't. Cheers, Ste

RE: nginx throws a 502 (invalid header) when downloading a file attachment if filename has a space character

2014-03-24 Thread Lukas Tribus
> Never mind there's nothing wrong with nginx here. > It was one of the response headers sent by an upstream server > (mainly Content-Description: 2013923 10H56M56S633_PV.doc�) including > this non-ascii char '?' which the nginx didn't like and hence flagged > it saying that it received an i

Re: nginx throws a 502 (invalid header) when downloading a file attachment if filename has a space character

2014-03-24 Thread Kunal Pariani
Never mind there's nothing wrong with nginx here. It was one of the response headers sent by an upstream server (mainly Content-Description: 2013923 10H56M56S633_PV.doc�) including this non-ascii char '?' which the nginx didn't like and hence flagged it saying that it received an invalid header. T

RE: nginx throws a 502 (invalid header) when downloading a file attachment if filename has a space character

2014-03-24 Thread Lukas Tribus
> hmm..thanks Lukas. > So its my backend server only which is causing this issue. >From the information provided in this thread, I can't tell. We would need the exact response header that makes nginx return the 502 response plus detailed informations about your setup (output of nginx -v and your

Re: nginx throws a 502 (invalid header) when downloading a file attachment if filename has a space character

2014-03-24 Thread Kunal Pariani
hmm..thanks Lukas. So its my backend server only which is causing this issue. Thanks -Kunal On Mon, Mar 24, 2014 at 12:43 PM, Lukas Tribus wrote: > FYI, nginx has not problems passing filenames with spaces along: > > > # curl -I http://direct-apache/content-disposition-header.php > HTTP/1.1 20

RE: nginx throws a 502 (invalid header) when downloading a file attachment if filename has a space character

2014-03-24 Thread Lukas Tribus
FYI, nginx has not problems passing filenames with spaces along: # curl -I http://direct-apache/content-disposition-header.php HTTP/1.1 200 OK Date: Mon, 24 Mar 2014 19:40:22 GMT Server: Apache/2.4.2 (Win32) OpenSSL/1.0.1c PHP/5.4.4 X-Powered-By: PHP/5.4.4 Cache-Control: no-store, no-cache Connec

Re: ngx_slab_alloc() failed: no memory in cache keys zone "zone-xyz"

2014-03-24 Thread nxspeed
> On Wednesday 27 March 2013 16:34:27 praveenkumar Muppala wrote: > > Hi, > > > > We have a nginx1.0.5 version installed in our system. We are getting > this > > error continuously in our nginx error log. ngx_slab_alloc() failed: > no > > memory in cache keys zone "zone-xyz". I have increased this

RE: nginx throws a 502 (invalid header) when downloading a file attachment if filename has a space character

2014-03-24 Thread Lukas Tribus
Hi, > I downloaded another file and the Content-Disposition header lists the > filename with space under quotes correctly "zcs error.docx" thereby > proving that its nginx which is not parsing it correctly. Correct me if > i am wrong. Is this specific response going through nginx or directly fro

Re: nginx throws a 502 (invalid header) when downloading a file attachment if filename has a space character

2014-03-24 Thread Kunal Pariani
I downloaded another file and the Content-Disposition header lists the filename with space under quotes correctly "zcs error.docx" thereby proving that its nginx which is not parsing it correctly. Correct me if i am wrong. 1. Cache-Control: no-store, no-cache 2. Connection: keep-alive

Re: Can't upload big files via nginx as reverse proxy

2014-03-24 Thread fcaoliveira
Hi, everybody. Any solutions to this issue? Thx Posted at Nginx Forum: http://forum.nginx.org/read.php?2,227175,248638#msg-248638 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

RE: nginx throws a 502 (invalid header) when downloading a file attachment if filename has a space character

2014-03-24 Thread Lukas Tribus
Hi Kunal, > I used the web browser but didn't see this Content-disposition header > in the response. Only saw these response headers. We need to see the Content-disposition, everything else makes no sense. Are you trying against the nginx frontend or your backend? If it is nginx you're connecti

Re: nginx throws a 502 (invalid header) when downloading a file attachment if filename has a space character

2014-03-24 Thread Kunal Pariani
I used the web browser but didn't see this Content-disposition header in the response. Only saw these response headers. 1. Response Headersview source 1. Connection: keep-alive 2. Content-Length: 1159 3. Content-Type: text/html 4. Date: Mon, 24 M

AAAA record for nginx.org ?

2014-03-24 Thread Nick Thomas
Hi there, I recently had cause to (try to) install Nginx from the Debian repositories hosted at http://nginx.org (i.e., http://nginx.org/packages/mainline/debian/dists/wheezy/ ) on a set of machines which have IPv6-only connectivity. This fails because nginx.org lacks any records. Is there a

Re: 403 after changing root, but permissions look correct

2014-03-24 Thread Adam Pearlman
Turns out this was my fault. I was using "sudo service nginx start" instead of just "sudo nginx." On Sun, Mar 23, 2014 at 5:35 PM, Steve Holdoway wrote: > Having just had a similar problem with migrating a MySQL database, I > suggest that you check whether SELinux/Apparmor is running. > > Why pr

Re: Pass path to thttpd for CGI

2014-03-24 Thread Doc
On Mon, Mar 24, 2014 at 8:28 AM, Francis Daly wrote: On Sat, Mar 22, 2014 at 05:18:19PM -0400, Doc wrote: Hi there, I can get /music/download to be handled by CGI in thttpd but I don't know how to handle the changing song titles cause everything I've tried fails. I don't see any nginx p

Re: Full pathname not sent

2014-03-24 Thread Doc
On Mon, Mar 24, 2014 at 8:13 AM, Francis Daly wrote: On Sun, Mar 23, 2014 at 12:03:25PM -0400, Doc wrote: Hi there, This might be more of a regex problem on my part than nginx. Yes, it is. I do a rewrite to pass the full pathname to thttpd like this: location ~ /radio/download/.*\.mp3

Re: nginx reverse proxy

2014-03-24 Thread Francis Daly
On Sat, Mar 22, 2014 at 01:34:09PM +0530, chima s wrote: Hi there, > I have configured nginx as reverse proxy for jboss. All the system are > hosted in Amazon cloud and using AWS ELB for both nginx and jboss > > WEB ELB <---> nginx reverse proxy <---> APP ELB <---> Jboss7. > > When i access abc

Re: Pass path to thttpd for CGI

2014-03-24 Thread Francis Daly
On Sat, Mar 22, 2014 at 05:18:19PM -0400, Doc wrote: Hi there, > I can get /music/download to be handled by CGI in > thttpd but I don't know how to handle the changing song titles cause > everything I've tried fails. I don't see any nginx problems here. Can you request the download of thttpd

Re: Hotlinking protection not working on firefox 28.0 !!

2014-03-24 Thread Francis Daly
On Mon, Mar 24, 2014 at 12:14:20PM +0500, shahzaib shahzaib wrote: Hi there, > hotlinking protection works fine with chrome and gives 403 > forbidden error but somehow it is not working for firefox clients and plays > the forbidden video without restrictions. Following is the config : U

Re: Full pathname not sent

2014-03-24 Thread Francis Daly
On Sun, Mar 23, 2014 at 12:03:25PM -0400, Doc wrote: Hi there, > This might be more of a regex problem on my part than nginx. Yes, it is. > I do a > rewrite to pass the full pathname to thttpd like this: > > location ~ /radio/download/.*\.mp3$ { > rewrite ^ /test/$1; > } What value do yo

Re: ssl cache pooling ? (kind of)

2014-03-24 Thread Maxim Dounin
Hello! On Mon, Mar 24, 2014 at 07:20:21AM -0400, Larry wrote: > I will try to code something. > > Should I put it back here if successful or not ? If you'll produce something you will want to submit into nginx, see http://nginx.org/en/docs/contributing_changes.html for recommended approach.

Re: SSL session cache lifetime vs session ticket lifetime

2014-03-24 Thread kyprizel
Any suggestions to the name? On Mon, Mar 24, 2014 at 3:56 PM, Maxim Dounin wrote: > Hello! > > On Mon, Mar 24, 2014 at 02:59:57PM +0400, kyprizel wrote: > > > something like this? > > Yes, something like. But initialized and with a better name. > > > > > > > On Tue, Mar 18, 2014 at 8:00 PM, Ma

Re: SSL session cache lifetime vs session ticket lifetime

2014-03-24 Thread Maxim Dounin
Hello! On Mon, Mar 24, 2014 at 02:59:57PM +0400, kyprizel wrote: > something like this? Yes, something like. But initialized and with a better name. > > > On Tue, Mar 18, 2014 at 8:00 PM, Maxim Dounin wrote: > > > Hello! > > > > On Tue, Mar 18, 2014 at 03:42:33PM +0400, kyprizel wrote: > >

Re: Proper display of a "server overloaded" page

2014-03-24 Thread Maxim Dounin
Hello! On Mon, Mar 24, 2014 at 06:20:03AM +, Riedel Sven wrote: > Hi, > I want to set up a small static HTML Page that informs visitors that our > site is currently under load if an appserver cannot handle the request > within N seconds. > > What would be the proper way to do this? Just set

Re: ssl cache pooling ? (kind of)

2014-03-24 Thread Larry
I will try to code something. Should I put it back here if successful or not ? Anyway, thanks for your knowledge Maxim. Larry Posted at Nginx Forum: http://forum.nginx.org/read.php?2,248588,248610#msg-248610 ___ nginx mailing list nginx@nginx.org ht

Re: ssl cache pooling ? (kind of)

2014-03-24 Thread Larry
Thanks Maxim, I will investigate it and get my results here. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,248588,248614#msg-248614 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: SSL session cache lifetime vs session ticket lifetime

2014-03-24 Thread kyprizel
something like this? On Tue, Mar 18, 2014 at 8:00 PM, Maxim Dounin wrote: > Hello! > > On Tue, Mar 18, 2014 at 03:42:33PM +0400, kyprizel wrote: > > > What will be the best way to do it? > > Probably a flag in ngx_slab_pool_t will be good enough. > > > > > > > On Tue, Mar 18, 2014 at 3:33 PM, M

RE: nginx throws a 502 (invalid header) when downloading a file attachment if filename has a space character

2014-03-24 Thread Lukas Tribus
Hi, > What debugs should i enable & how to see these response headers ? I do  > see this error though.  Just use curl for example and request it directly from your backend: curl -k -I "https://127.0.1.1:8443/service/home/~/?auth=co&loc=en_GB&id=259&part=3"; So you can check the actual respons

Re: nginx throws a 502 (invalid header) when downloading a file attachment if filename has a space character

2014-03-24 Thread Nuno Magalhães
On Mon, Mar 24, 2014 at 2:11 AM, Kunal Pariani wrote: > So can this be that the upstream is sending the right header (because it > works fine when there is no space in the filename) but nginx is parsing it > incorrectly ? Use the web developer tools in your browser to see the header and/or try en

Hotlinking protection not working on firefox 28.0 !!

2014-03-24 Thread shahzaib shahzaib
Hello, hotlinking protection works fine with chrome and gives 403 forbidden error but somehow it is not working for firefox clients and plays the forbidden video without restrictions. Following is the config : server { listen 80; server_name lwx006.domain.com lwx006.ge