Re: How to deny access to a folder, but allow access to every subfolders (wildcard)

2015-01-08 Thread Raúl Galicia
El 2015-01-09 01:44, carlg escribió: Hi, I need to deny access to /members but allow access to every folders below. There may be a lot of folders, maybe a thousan, and each of those folders contain 5 other folders. So i need a wildcard. Here is what i tried : location ~ ^/members/([^/]+)

How to deny access to a folder, but allow access to every subfolders (wildcard)

2015-01-08 Thread carlg
Hi, I need to deny access to /members but allow access to every folders below. There may be a lot of folders, maybe a thousan, and each of those folders contain 5 other folders. So i need a wildcard. Here is what i tried : location ~ ^/members/([^/]+)/([^/?]+)$ { allow all; }#allo

Re: How to use Nginx to restrict access to everyfiles to 127.0.0.1, except the php files in /

2015-01-08 Thread carlg
Here is what i found to achieve this : i denied access to every php files : location ~ \.php$ { fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass unix:/var/run/php5-fpm.sock; fastcgi_index index.php; include fastcgi_params; allow 127.0.0.1;

Re: limit_conn module exclude also on Maxim Dunin recommended code

2015-01-08 Thread ASTRAPI
Thanks for the reply... Ok with the ip's but i can' figure out how to fix th other problem with exclude ip's for limit_conn_zone :( Posted at Nginx Forum: http://forum.nginx.org/read.php?2,255949,256005#msg-256005 ___ nginx mailing list nginx@nginx.or

Hash init

2015-01-08 Thread xdiaod
Hello, Maybe i am not in the right mailing list, please refer me to the good one if i am at the wrong one. I just want to understand the " for (size = start; size <= hinit->max_size; size++) " loop in the ngx_hash_init function. I do not understand what "size", "key"

Re: HTTPS Load Test

2015-01-08 Thread Das, Jagannath
Thanks Edward. What is the expected ratio of CPU Usage when HTTPS is enabled at Nginx ? How is the ratio affected when we enable persistent HTTP Support? Folks from nginx or who have already bench marked may help here and can point me to useful links on web. From: Edward Hibbert mailto:edw...@

nginx call external api

2015-01-08 Thread dadude
Hi @all, i need some help with the following situation: we use nginx as reverse proxy for microsoft exchange owa / active sync All working so far but since yesterday we have a new firewall (Palo Alto) which supports "User-ID", meaning that the remote IP is connect to the domain\username. That mean

Re: HTTPS Load Test

2015-01-08 Thread Edward Hibbert
Bombard is a useful wrapper round siege. I've had trouble using siege with more than a couple of thousand connections - crashes with buffer overflow. I've not tried to debug this yet but would be interested in other people's experiences. On Thu, Jan 8, 2015 at 10:16 AM, basti wrote: > You can

Re: HTTPS Load Test

2015-01-08 Thread basti
You can try "siege". In the past I have take the access log to create a list of urls to be used by siege. Regards, Basti On 08.01.2015 11:06, Das, Jagannath wrote: > Hi Folks, >I am trying to get some performance numbers on nginx by sending > HTTP and HTTPS requests. My aim is to check the

HTTPS Load Test

2015-01-08 Thread Das, Jagannath
Hi Folks, I am trying to get some performance numbers on nginx by sending HTTP and HTTPS requests. My aim is to check the ratio of CPU usage, connections/sec across HTTP and HTTPS requests. In the process, I need to verify certain certificates/keys needed for SSL . Are there any tools whic

Re: proxy_pass ignoring gai.conf/RFC3484

2015-01-08 Thread Ivan Vilata i Balaguer
Maxim Dounin (2015-01-05 07:17:45 +0300) wrote: > On Fri, Jan 02, 2015 at 04:13:40PM +0100, Ivan Vilata i Balaguer wrote: > > [...] > > > BUT if I configure NginX with ``proxy_pass > > http://internal_machine;``, it always insists in using the IPv4 > > address first, regardless of what ``gai.con