Re: resolver directive doesn't fallback to the system DNS resolver

2015-01-12 Thread Kunal Pariani
Thanks Yichun Zhang.. - Original Message - From: "Yichun Zhang (agentzh)" To: nginx@nginx.org Sent: Monday, January 12, 2015 2:19:08 PM Subject: Re: resolver directive doesn't fallback to the system DNS resolver Hello! On Mon, Jan 12, 2015 at 1:48 PM, Kunal Pariani wrote: > Is there alr

Re: resolver directive doesn't fallback to the system DNS resolver

2015-01-12 Thread Yichun Zhang (agentzh)
Hello! On Mon, Jan 12, 2015 at 1:48 PM, Kunal Pariani wrote: > Is there already a patch for this ? AFAIK, the Tengine fork has a patch for this. > I am not completely sure of how to make the nginx resolver (in > ngx_resolver.c) fallback to libresolv automatically and if this not trivial > enou

auth_request vs auth_pam_service_name

2015-01-12 Thread nginxuser100
Hi, I am a newbie at nginx and looking at its authentication capabilities. It appears that when using auth_request, every client request would still require an invokation to the auth_request fastcgi or proxy_pass server. Looking at auth_pam, I am not clear on how it works: 1. How does nginx pass t

Re: resolver directive doesn't fallback to the system DNS resolver

2015-01-12 Thread Kunal Pariani
Is there already a patch for this ? I am not completely sure of how to make the nginx resolver (in ngx_resolver.c) fallback to libresolv automatically and if this not trivial enough, i just might read the resolvers from /etc/resolv.conf and provide it to the 'resolver' directive. Any suggestions

Re: Bug re: openssl-1.0.1

2015-01-12 Thread Peter Fraser
You were absolutely correct. It is working now. I changed three things. I firstly forced TLS 1.0 then changed the directive ssl_protocols to proxy_ssl_protocols as you suggested. Finally, I restricted to Cipher list as you also mentioned. I had thought that I would leave all that out and tie things

Re: A build of nginx with static-linked OpenSSL fails on Mac

2015-01-12 Thread cubicdaiya
Hello. Maxim Dounin Wrote: --- > > Though the rough patch below fixes failure, is there a better > solution > > expect dynamic-linking OpenSSL? > > Defining KERNEL_BITS=64 in the environment will convince recent > enough OpenSSL to build 64-bit

Re: Adding timer in nginx.c main

2015-01-12 Thread Maxim Dounin
Hello! On Mon, Jan 12, 2015 at 11:34:12AM -0500, Nikhita wrote: > Hi, > > I am adding a timer in nginx's main loop. > > if (counter == -1) { > ngx_log_error(NGX_LOG_EMERG, cycle->log, 0, "counter is null adding > imer"); > /* Registring Timer */ > ngx_ipc_event.d

RE: Bug re: openssl-1.0.1

2015-01-12 Thread Lukas Tribus
> I did an ssldump and this is the conversation between both servers: This ssldump seems incomplete, there is no response. Please post the full ssldump. The bug is probably neither in openssl nor in nginx, but in the origin server (but we don't have the full handshake here). Since nginx 1.5.6,

Re: Bug re: openssl-1.0.1

2015-01-12 Thread Peter Fraser
I did an ssldump and this is the conversation between both servers: New TCP connection #1: nginx.domain.net(46318) <-> backend.domain.net((443) TCP: nginx.domain.net((46318) -> backend.domain.net((443) Seq 54751863.(307) ACK 350741031 PUSH 1 1 1421082336.3009 (0.0012) C>SV3.1(302) Handshake

Adding timer in nginx.c main

2015-01-12 Thread Nikhita
Hi, I am adding a timer in nginx's main loop. if (counter == -1) { ngx_log_error(NGX_LOG_EMERG, cycle->log, 0, "counter is null adding imer"); /* Registring Timer */ ngx_ipc_event.data = &dumb; ngx_ipc_event.handler = ngx_ipc_event_handler; ngx_ipc_

Re: Bug re: openssl-1.0.1

2015-01-12 Thread Peter Fraser
Sorry for taking so long to reply. I am running FreeBSD 10.1 RELEASE and it is Openssl version is OpenSSL 1.0.1j and I installed it from the ports tree (source). Regards On Tue, Jan 6, 2015 at 4:56 PM, Lukas Tribus wrote: > > Hi. Thanks for replying. > > I read it in two places. Here are the li

Re: A build of nginx with static-linked OpenSSL fails on Mac

2015-01-12 Thread Maxim Dounin
Hello! On Fri, Jan 09, 2015 at 05:45:39AM -0500, cubicdaiya wrote: > Hello. > > A build of nginx with static-linked OpenSSL seems to fail on Mac. > > $ uname -ar > Darwin host 14.0.0 Darwin Kernel Version 14.0.0: Fri Sep 19 00:26:44 PDT > 2014; root:xnu-2782.1.97~2/RELEASE_X86_64 x86_64 > $

Re: Upstream Keepalive connection close

2015-01-12 Thread Maxim Dounin
Hello! On Tue, Jan 06, 2015 at 06:06:18AM -0500, Gona wrote: > I have Nginx server configured with couple of backend servers with keepalive > connections enabled. > > I am trying to understand what will be the Nginx's behaviour in case the > connection is closed by an upstream server legitimatel

Re: Nginx behind a reverse proxy sending 499

2015-01-12 Thread Maxim Dounin
Hello! On Sun, Jan 11, 2015 at 01:37:31AM -0500, ppwm wrote: > To debug the issue further, I wrote a simple Java based HTTP client. This > client would open a socket to the nginx server, write the request line (GET > / HTTP/1.1), write the host header, write the Connection:close header and > comm

Re: resolver does not re-resolve upstream servers after initial cache

2015-01-12 Thread Maxim Dounin
Hello! On Thu, Jan 08, 2015 at 05:13:42AM +0100, Miroslav S. wrote: > any update? This is now available as a commercial feature in nginx+, see the "resolve" parameter here: http://nginx.org/en/docs/http/ngx_http_upstream_module.html#server -- Maxim Dounin http://nginx.org/ _