outbound emails are not sent via nginx smtp proxy

2014-04-16 Thread cybermass
All emails ending at the destination note the sender as the actual backend and not nginx proxy. How can I force smtp outbound through nginx? I tried smtp_bind_address = proxy.ip.addr in main.cf for postfix. And tried adding an SNAT rule in iptables to route through the proxy with no luck. Any advic

Re: Requests being blocked client-side

2014-04-16 Thread justink101
Lee we switched to using memcached for sessions and this helped, but still seeing blocking, though less time. If we open two tabs, in the first page fire an ajax request that takes 20+ seconds to run, then in the second tab refresh, the page blocks loading in the second tab, but now instead of wai

Re: Requests being blocked client-side

2014-04-16 Thread justink101
Hi Lee. Yes using PHP. Could we simply just call session_write_close() immediately after we open and verify the session details? I'd like to avoid adding another piece of infrastructure (redis) on every web server. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,249233,249352#msg-249352

Re: Nginx does not support Forward SSL proxy connection

2014-04-16 Thread Weibin Yao
OK, Thanks for your comment. We will fix that and welcome any suggestion. Nginx is almost a forward proxy, it's useful for some proxy users. Thank you. 2014-04-16 22:31 GMT+08:00 Maxim Dounin : > Hello! > > On Wed, Apr 16, 2014 at 09:44:04PM +0800, Weibin Yao wrote: > >> Tengine are ready to add

Re: ngx http limit req : burst=0 cannot support more than 1000 RPS

2014-04-16 Thread Shrirang
Thanks for quick confirmation Posted at Nginx Forum: http://forum.nginx.org/read.php?2,249346,249349#msg-249349 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: ngx http limit req : burst=0 cannot support more than 1000 RPS

2014-04-16 Thread Shrirang
Thanks a lot for quick confirmation Posted at Nginx Forum: http://forum.nginx.org/read.php?2,249347,249348#msg-249348 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: ngx http limit req : burst=0 cannot support more than 1000 RPS

2014-04-16 Thread Valentin V. Bartenev
On Wednesday 16 April 2014 10:30:24 Shrirang wrote: > I am using "ngx_http_limit_req" module. After going through the code I see > that if "burst = 0" (i.e. not specified) then maximum rate limiting that can > be offered is 1000 RPS only. I have seen this in my stress test too. > I didn't see this

Re: ngx http limit req : burst=0 cannot support more than 1000 RPS

2014-04-16 Thread Maxim Dounin
Hello! On Wed, Apr 16, 2014 at 10:30:24AM -0400, Shrirang wrote: > I am using "ngx_http_limit_req" module. After going through the code I see > that if "burst = 0" (i.e. not specified) then maximum rate limiting that can > be offered is 1000 RPS only. I have seen this in my stress test too. > I d

Re: Nginx does not support Forward SSL proxy connection

2014-04-16 Thread Maxim Dounin
Hello! On Wed, Apr 16, 2014 at 09:44:04PM +0800, Weibin Yao wrote: > Tengine are ready to add the support of forward proxy, you can have a > look at this pull request: https://github.com/alibaba/tengine/pull/335 Just a note: support for CONNECT method != forward proxy. It doesn't make other pa

ngx http limit req : burst=0 cannot support more than 1000 RPS

2014-04-16 Thread Shrirang
I am using "ngx_http_limit_req" module. After going through the code I see that if "burst = 0" (i.e. not specified) then maximum rate limiting that can be offered is 1000 RPS only. I have seen this in my stress test too. I didn't see this in any documentation. Want to clarify if this is really true

mediawiki fastcgi_cache not working

2014-04-16 Thread Anoop Alias
Hi, I have setup nginx with ngx_cache_purge to work with mediawiki nginx.conf ### fastcgi_cache_path /etc/nginx/cache levels=1:2 keys_zone=MYAPP:100m inactive=60m; fastcgi_cache_key "$scheme$host$request_uri"; ### vhost.conf ### set $no_cache ""; if ($request_method !~ ^(GET|HEAD

Re: Nginx does not support Forward SSL proxy connection

2014-04-16 Thread Weibin Yao
Tengine are ready to add the support of forward proxy, you can have a look at this pull request: https://github.com/alibaba/tengine/pull/335 Thanks. 2014-04-16 17:41 GMT+08:00 Maxim Dounin : > Hello! > > On Wed, Apr 16, 2014 at 04:51:04AM -0400, sai1511 wrote: > >> I'm trying to setup Forward SSL

Re: openssl 1.0.1 and tls1.1 and up

2014-04-16 Thread Nemesiz
I found where the problems was. I thought ssl options can be different in virtual host. Default server settings was not overwritten. server { include conf/default-settings; root /var/www; server_name ""; ssl on; ssl_certificate ssl/nmz_ssl.crt; ssl

Re: openssl 1.0.1 and tls1.1 and up

2014-04-16 Thread Valentin V. Bartenev
Check that you have run the same nginx, that you are trying to configure. $ ps -fC nginx wbr, Valentin V. Bartenev ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: openssl 1.0.1 and tls1.1 and up

2014-04-16 Thread Nemesiz
I recompiled with default openssl lib (1.0.1e-3ubuntu1.2) Default install path: # nginx -V nginx version: nginx/1.5.13 built by gcc 4.8.1 (Ubuntu/Linaro 4.8.1-10ubuntu9) TLS SNI support enabled configure arguments: --prefix=/usr/local/nginx/1.5.13 --conf-path=/etc/nginx/nginx.conf --error-log-pa

Re: openssl 1.0.1 and tls1.1 and up

2014-04-16 Thread kyprizel
I think the problem is your nginx uses libssl version from your OS (0.9.8/1.0.0). On Wed, Apr 16, 2014 at 4:08 PM, B.R. wrote: > Rather than posting raw outputs, try to understand the piece orf advice > Maxim gave to you. > > I suspect those SSL-validation websites test websites... which corres

Re: openssl 1.0.1 and tls1.1 and up

2014-04-16 Thread B.R.
Rather than posting raw outputs, try to understand the piece orf advice Maxim gave to you. I suspect those SSL-validation websites test websites... which correspond to a certain standard port. I see a problem, don't you ? --- *B. R.* ___ nginx mailing li

Re: bug in spdy - 499 response code on long running requests

2014-04-16 Thread nanne
agree Posted at Nginx Forum: http://forum.nginx.org/read.php?2,240278,249336#msg-249336 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: bug in spdy - 499 response code on long running requests

2014-04-16 Thread Valentin V. Bartenev
On Wednesday 16 April 2014 06:23:13 nanne wrote: > Thanks for the update on this! I'll check it out, though I believe we will > have to keep the current 1.4.7 stable for now. > > Sadly I am not able to provide a debug log on the production machine. I can > provide one from a test-environment of co

Re: server_names scaling

2014-04-16 Thread SplitIce
Thank you, that makes sense and a bit of testing reveals that is correct. On Wed, Apr 16, 2014 at 8:59 PM, Maxim Dounin wrote: > Hello! > > On Wed, Apr 16, 2014 at 08:38:10PM +1000, SplitIce wrote: > > > Hi all, > > > > I have spent the day troubleshooting why one server in our network > reload

Re: openssl 1.0.1 and tls1.1 and up

2014-04-16 Thread Nemesiz
Maxim Dounin Wrote: --- > It looks like you are testing something different, not nginx you > are trying to configure. Check what is actually listening on the > ip:port you are testing. testssl.sh: --> Testing HTTP Header response HSTS

Re: server_names scaling

2014-04-16 Thread Maxim Dounin
Hello! On Wed, Apr 16, 2014 at 08:38:10PM +1000, SplitIce wrote: > Hi all, > > I have spent the day troubleshooting why one server in our network reloaded > / tested configuration extremely slowly. > > We have found that server_names scales very poorly, once a certain point is > reached (approx

Re: openssl 1.0.1 and tls1.1 and up

2014-04-16 Thread Maxim Dounin
Hello! On Wed, Apr 16, 2014 at 06:35:43AM -0400, Nemesiz wrote: > Strange things are happening. > > nginx: > ssl_protocols TLSv1 TLSv1.1 TLSv1.2; > > Results: > > ssllabs.com: > TLS 1.2 No > TLS 1.1 No > TLS 1.0 Yes > SSL 3 Yes > SSL 2 No > > testssl.sh

server_names scaling

2014-04-16 Thread SplitIce
Hi all, I have spent the day troubleshooting why one server in our network reloaded / tested configuration extremely slowly. We have found that server_names scales very poorly, once a certain point is reached (approx 5.5k entries globally, 5k entries for a single host) performance drops from a <0

Re: openssl 1.0.1 and tls1.1 and up

2014-04-16 Thread Nemesiz
Strange things are happening. nginx: ssl_protocols TLSv1 TLSv1.1 TLSv1.2; Results: ssllabs.com: TLS 1.2 No TLS 1.1 No TLS 1.0 Yes SSL 3 Yes SSL 2 No testssl.sh: SSLv2 NOT offered (ok) SSLv3 offered TLSv1 offered (ok) TLSv1.1 not offered TLSv1.2

Re: bug in spdy - 499 response code on long running requests

2014-04-16 Thread nanne
Thanks for the update on this! I'll check it out, though I believe we will have to keep the current 1.4.7 stable for now. Sadly I am not able to provide a debug log on the production machine. I can provide one from a test-environment of course, but it seems beyond me to recreate the issues there :

Re: Nginx does not support Forward SSL proxy connection

2014-04-16 Thread Maxim Dounin
Hello! On Wed, Apr 16, 2014 at 04:51:04AM -0400, sai1511 wrote: > I'm trying to setup Forward SSL Proxy through nginx. However I came across > this post,http://forum.nginx.org/read.php?2,15124,15256#msg-15256. Is this > still not supported or you just don't have this on your list ? No changes si

Re: Requests being blocked client-side

2014-04-16 Thread Lee Valentine
Hi On 16 April 2014 09:58, justink101 wrote: > Maxim. > > Even after disabling SPDY and restarting nginx, still seeing the same > behavior with requests blocking if another single request is outstanding in > another tab. Are you using php by any chance? I had a problem showing these exact sa

Re: Requests being blocked client-side

2014-04-16 Thread justink101
Maxim. Even after disabling SPDY and restarting nginx, still seeing the same behavior with requests blocking if another single request is outstanding in another tab. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,249233,249324#msg-249324 ___

Nginx does not support Forward SSL proxy connection

2014-04-16 Thread sai1511
Hi, I'm trying to setup Forward SSL Proxy through nginx. However I came across this post,http://forum.nginx.org/read.php?2,15124,15256#msg-15256. Is this still not supported or you just don't have this on your list ? Thank You Sai Posted at Nginx Forum: http://forum.nginx.org/read.php?2,249323,