alternative to fail2ban as complement to nginx

2014-07-03 Thread aflexzor
Hello guys, Iam using several mechanisms to rate limit abusers...but I would like to ban those that do it repeatedly. Anybody use anything better than fail2ban ? Iam worried that it will hog down the server if it gets a big amount of logs. Alex ___ ng

limit_conn_zone applied to Proxy_Pass (outgoing requests)

2014-07-03 Thread aflexzor
Hello! I have an nginx reverse proxy it has a series of filters against DDoS attacks. As a last resort I need to make sure that I NEVER send more than x concurrent requests to the backend server (Proxy_pass) Is it possible to apply limit_conn_zone for outgoing requests? If so could i have an exa

Forward proxy preserving the domain

2014-07-03 Thread dandv
Basically, I want to set up a proxy running on example.mydomain.com that will take any URI, retrieve `example.com$request_uri`, and pass it on to the client, preserving my example.mydomain.com domain for the client. So far I have this config: server { server_name example.mydomain.com; locatio

Re: nginx caching headers

2014-07-03 Thread Maxim Dounin
Hello! On Wed, Jul 02, 2014 at 11:26:54PM -0400, eiji-gravion wrote: > Are there any specific reasons why nginx has both ETags and the Last > Modified headers being sent? From my understanding, this is a bit redundant > for most situations. This is required to support both clients using Last-Mod

Re: URI escaping for X-Accel-Redirect and proxy_pass in 1.4.7 and 1.6.0

2014-07-03 Thread gwilym
Jonathan Matthews Wrote: --- > On 17 June 2014 07:49, gwilym wrote: > > The workaround is to _double_ encode so as to send back > > "image%2520with%2520spaces.jpg" to Nginx but we can't roll this out > until > > Nginx 1.6 because it breaks 1.4...