Re: Serving files from a slow NFS storage

2014-12-29 Thread erankor2
Thank you all for your replies. Since all 3 replies suggest some form of caching I'll respond to them together here - The nginx servers that I mentioned in my post do not serve client requests directly, the clients always hit the CDN first (we use mostly Akamai), and the CDN then pulls from these

Re: http module handler, chain buffer and output_filter

2014-12-29 Thread xdiaod
Does something is trying to free the buffers directly before freeing the pool in the output filter? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,255866,255867#msg-255867 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailma

http module handler, chain buffer and output_filter

2014-12-29 Thread xdiaod
Hey, i wonder why the server is freezing when i do a request to it and i do not define the "NO_PROBLEM" macro in the code. In my ngx_html_chain_buffers_init i do a ngx_pcalloc because i thought that the server was freezing because of some memory missing alignment(it was firstly static). I am just t

Workaround

2014-12-29 Thread stwissel
This workaround seems to do the trick for the time being: if ($request_method = HEAD) { add_header Content-Length 0; add_header Content-Type text/plain; a

Re: Serving files from a slow NFS storage

2014-12-29 Thread Steve Holdoway
On Mon, 2014-12-29 at 15:52 -0500, erankor2 wrote: > Hi all, > > In our production environment, we have several nginx servers running on > Ubuntu that serve files from a very large (several PBs) NFS mounted storage. > > Usually the storage responds pretty fast, but occasionally it can be very > s

Re: Exclude ip's from Nginx limit_req zone

2014-12-29 Thread ASTRAPI
Anyone please? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,255697,255857#msg-255857 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Serving files from a slow NFS storage

2014-12-29 Thread Scott Larson
Without knowing everything in the mix my first thought would be the NFS head node is being tapped out and can't keep up. Generally you'd solve this with some type of caching, either at a CDN level or you could look at the SlowFS module. I've not checked to see if it still compiles against the

Re: HTTP HEAD timeout

2014-12-29 Thread stwissel
Hi Edho, I know -X HEAD is a hack, but it seems that is the way CouchDB might operate (haven't got a reply back from them). Worked before using an Apache HTTP reverse-proxy, but I like nginx much better. So what options do I have to make nginx behave the same for -X HEAD as it does for --head? P

Re: Serving files from a slow NFS storage

2014-12-29 Thread itpp2012
http://www.debianhelp.co.uk/nfs.htm https://blog.yrden.de/2013/10/13/setting-up-nfs-cache-on-debian.html Or setup a debian VM which mounts your storage and where nginx connects to. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,255847,255850#msg-255850

proper directive to pass requests

2014-12-29 Thread Peter Fraser
Hi All I'm building my configuration slowly. Thanks for all the help so far. My current obstacle is this: As it is now, external users will access an internal IIS web server by using http://my.domain.com. The firewall points to the web server and the web server automatically redirects to https://

Serving files from a slow NFS storage

2014-12-29 Thread erankor2
Hi all, In our production environment, we have several nginx servers running on Ubuntu that serve files from a very large (several PBs) NFS mounted storage. Usually the storage responds pretty fast, but occasionally it can be very slow. Since we are using aio, when a file read operation runs slow

Re: HTTP HEAD timeout

2014-12-29 Thread Edho Arief
not sure about your original problem but `curl -X HEAD` isn't a proper http request: ``` This option only changes the actual word used in the HTTP request, it does not alter the way curl behaves. So for example if you want to make a proper HEAD request, using -X HEAD will not suffice. You need to

HTTP HEAD timeout

2014-12-29 Thread stwissel
I'm using nginx 1.7.7 as a reverse proxy in front of a Apache CouchDB. Access via browser to CouchDB data works like a charm. However I have trouble with replication (which runs via HTTPs). This is what I found out: CouchDB would issue a HTTP HEAD first and then perform GET/POST as per its algoryt

Re: Use of Certs

2014-12-29 Thread B.R.
On Mon, Dec 29, 2014 at 8:49 PM, itpp2012 wrote: > nginx will act as an endpoint for ssl so any cert needs to be at nginx's > end. > ​That assumption was not part of the initial statement, which was however saying that the backend server acted as the endpoint. You could then guess that nginx act

RE: nginx Digest, Vol 62, Issue 43

2014-12-29 Thread Julio Cesar dos Santos
ed by the file app.php also contains the >>>> subdirectory in >>>> it, so the others apps send 404 for all the URL. I tried to fix that by >>>> changing "REQUEST_URI" parameter, but with that the app.php generate >>>> wrong >>>> UR

Re: Use of Certs

2014-12-29 Thread itpp2012
nginx will act as an endpoint for ssl so any cert needs to be at nginx's end. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,255840,255842#msg-255842 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Use of Certs

2014-12-29 Thread Scott Larson
If you're using nginx as a reverse proxy you'll want a cert set up on that node. Without it, worst case is your link between the proxy and the IIS server is secure but your link between the remote client and the proxy will be insecure defeating the whole purpose. Best case is an error will be

Use of Certs

2014-12-29 Thread Peter Fraser
Hi All I am very new to nginx and am currently doing a lot of reading but would just love to have a nudge in the right direction I want to set up nginx as a reverse proxy for about three IIS servers behind a firewall. One of them is a public web server that handles secure logins. It is configured

Re: How to setup

2014-12-29 Thread itpp2012
Peter Fraser Wrote: --- > proxy. Is it possible to have an nginx host behind a firewall with one > network card that forwards requests to more than one IIS web server > behind > the firewall also Yes. > , or do I need to make the nginx host inli

How to setup

2014-12-29 Thread Peter Fraser
Hi All I am very new to Nginx and am very interested in setting it up as a reverse proxy. Is it possible to have an nginx host behind a firewall with one network card that forwards requests to more than one IIS web server behind the firewall also, or do I need to make the nginx host inline with two

Re: How Nginx behaves with "proxy_bind" and DNS resolver with non matching ip versions between bind ip and resolved ip?

2014-12-29 Thread Maxim Dounin
Hello! On Mon, Dec 29, 2014 at 02:36:55AM -0500, shmulik wrote: > Hello, > I'm working with the proxy module, and with a dns resolver configured. The > traffic i'm using is both ipv4 and ipv6. > > I'm trying to understand Nginx behavior when using "proxy_bind" directive > and when the resolver r

Header SSL client certificate

2014-12-29 Thread Equipe R&S Netplus
Hello, I use nginx as a reverse-proxy. I would like to set a header, more precisely a header that contain the SSL client certificate. However, the variable '$ssl_client_cert' add some character that I don't want (like tab characters) << proxy_set_headerX-SSL-CLI-CERT $ssl_client_cer

Re: nginx removes double slashes

2014-12-29 Thread Maxim Dounin
Hello! On Mon, Dec 29, 2014 at 01:04:06PM +0200, Gregory Edigarov wrote: > Hello everybody, > > perhaps I am doing something wrong: > > location /njs/ { > rewrite /njs/(.*)$ /$1 break; > proxy_redirect off; > proxy_set_header Host $http_ho

Re: Having multiple Symfony2 apps on same domain

2014-12-29 Thread B.R.
Glad I helped ! :o) --- *B. R.* On Mon, Dec 29, 2014 at 3:52 PM, Naji Astier wrote: > Thanks you for your answer, you helped me to make it working. ;) > This is my final configuration : > > server { listen 80; > server_name mydomain; > root /server/www; location @rewrit

Re: nginx removes double slashes

2014-12-29 Thread B.R.
The proxy_pass documentation is a bit unclear to me, but I it is a fact that double slashes are replaced by single ones as the result of the normalization of the URI. However, I do not get the following parts: "If proxy_pass is

Re: Having multiple Symfony2 apps on same domain

2014-12-29 Thread Naji Astier
Thanks you for your answer, you helped me to make it working. ;) This is my final configuration : server { listen 80; server_name mydomain; root /server/www; location @rewriteMainApp { rewrite ^(.*)$ /app.php/$1 last; } location @rewri

Fwd: Delivery Status Notification (Failure)

2014-12-29 Thread Rahul Choudhary
Hi, I was trying to perform some load test to check performance degradation while switching to https from http, but not really able to conclude anything here. yeah, i have checked the details at http://nginx.org/en/docs/http/configuring_https_servers.html for performance tuning. Could please help

nginx performance degradation over ssl

2014-12-29 Thread rcrahul01
Hi, I was trying to perform some load test to check performance degradation while switching to https from http, but not really able to conclude anything here. yeah, i have checked the details at http://nginx.org/en/docs/http/configuring_https_servers.html for performance tuning. Could please help

Re: nginx removes double slashes

2014-12-29 Thread Gregory Edigarov
On 12/29/2014 01:04 PM, Gregory Edigarov wrote: Hello everybody, perhaps I am doing something wrong: location /njs/ { rewrite /njs/(.*)$ /$1 break; proxy_redirect off; proxy_set_header Host $http_host; proxy_set_header X-R

nginx removes double slashes

2014-12-29 Thread Gregory Edigarov
Hello everybody, perhaps I am doing something wrong: location /njs/ { rewrite /njs/(.*)$ /$1 break; proxy_redirect off; proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_hea

Re: RE: 1.7.9 does not compile anymore with libressl

2014-12-29 Thread weheartwebsites
thanks for that! Confirmed this is not an nginx issue but libressl 2.1.2. See also: https://github.com/libressl-portable/portable/issues/50 Posted at Nginx Forum: http://forum.nginx.org/read.php?2,255815,255820#msg-255820 ___ nginx mailing list nginx@n

RE: 1.7.9 does not compile anymore with libressl

2014-12-29 Thread Lukas Tribus
> I am trying to compile nginx 1.7.9 with libressl 2.1.2 the same way I did > with 1.7.7 but get the following error: > > src/http/ngx_http_request.c: In function ‘ngx_http_ssl_handshake_handler’: > src/http/ngx_http_request.c:775:9: error: implicit declaration of function > ‘SSL_get0_alpn_selected