Re: Nginx mail proxy

2015-03-21 Thread imwack
The SMTP backend is not mine, I use gmail or something else, what should i do? Just : "xclienton;" ? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,257510,257534#msg-257534 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/m

Re: Default value of gzip_proxied

2015-03-21 Thread Maxim Dounin
Hello! On Sun, Mar 22, 2015 at 04:20:12AM +0200, Gena Makhomed wrote: > On 22.03.2015 3:31, Maxim Dounin wrote: > > >- You assume that the behaviour in question is only needed for > > HTTP/1.0 clients. That's, again, not true, as using "Vary: > > Accept-Encoding" > > isn't a good idea eith

Re: Default value of gzip_proxied

2015-03-21 Thread Gena Makhomed
On 22.03.2015 3:31, Maxim Dounin wrote: - You assume that the behaviour in question is only needed for HTTP/1.0 clients. That's, again, not true, as using "Vary: Accept-Encoding" isn't a good idea either. As already mentioned, even if correctly supported it will cause cache data dupli

Re: Default value of gzip_proxied

2015-03-21 Thread Maxim Dounin
Hello! On Sat, Mar 21, 2015 at 04:05:05PM +0100, B.R. wrote: > Hello Maxim, > > So HTTP/1.0 is the reason of all that. > Now I also understand why there are those parameters allowing to compress > data that should not be cached: nginx as webserver tries to be smarter than > those dumb HTTP/1.0 p

Re: Intermittent SSL Handshake Errors

2015-03-21 Thread Maxim Dounin
Hello! On Sat, Mar 21, 2015 at 11:59:17AM -0400, tempspace wrote: > I should specify that I agree with what is happening. We have clients that > are falling back under normal conditions, and the latest libssl that > implemented fallback prevention for TLS is stopping. I have downgraded our > lib

Re: I need some urgent rewrites

2015-03-21 Thread Aleksandar Lazic
Hi. Only syntax checked. Please read for further investigation. http://nginx.org/en/docs/varindex.html http://nginx.org/r/location http://nginx.org/r/return https://regex101.com/ Am 21-03-2015 16:57, schrieb Milos: I need some urgent rewrites From: http://www.my-domain.de/kalorientabelle.php

Re: [ANN] Windows nginx 1.7.11.3 Gryphon

2015-03-21 Thread c0nw0nk
Also i just saw you added into the latest builds a PHP opcache config file. Check out my post here. http://www.apachelounge.com/viewtopic.php?p=29858#29858 You need to do that to configure Zend Opcache to shares it memory with php-cgi processes and if you use windows set a app pool id. Posted a

Re: [ANN] Windows nginx 1.7.11.3 Gryphon

2015-03-21 Thread c0nw0nk
I will leave it at 1 it works fine and i no longer encounter that strange timeout error. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,257453,257527#msg-257527 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/

Re: [ANN] Windows nginx 1.7.11.3 Gryphon

2015-03-21 Thread itpp2012
Don't use auto, set worker_processes to a value where high performance keeps cpu(s) around 50% max, this can be 2, 4, etc... Windows server 2012 is AFAIK the only version which can scale cpu's where the auto value has any use. Some cpu's can easily handle 2-4 workers per cpu, some only 1 per cpu,

Re: [ANN] Windows nginx 1.7.11.3 Gryphon

2015-03-21 Thread c0nw0nk
Hey itpp i am curious if you know the cause of a bug with your windows nginx builds. It is something to do with the worker processes. For some reason when i have "worker_processes auto;" i will occasionaly recieve a unknown web server error (usualy means a timeout) from cloudflare, but when i se

Re: Intermittent SSL Handshake Errors

2015-03-21 Thread tempspace
I should specify that I agree with what is happening. We have clients that are falling back under normal conditions, and the latest libssl that implemented fallback prevention for TLS is stopping. I have downgraded our libssl and I'm looking in my logs, and I see plenty of iOS 8 devices that auto-

I need some urgent rewrites

2015-03-21 Thread Milos
I need some urgent rewrites From: http://www.my-domain.de/kalorientabelle.php/unterkategorie/204-suppen To: http://www.my-domain.de/kalorientabelle/suppen.204/unterkategorie From: http://www.my-domain.de/kalorientabelle.php/unterkategorie/3-vollkornbrot To: http://www.my-domain.de/kalorientabell

Re: Intermittent SSL Handshake Errors

2015-03-21 Thread tempspace
Maxim, I have been playing with the ciphers as well, and it doesn't appear to be cipher related. It happens for every cipher I've tried. I tried with turning off the prefer on the server, and it uses the same cipher with the prefer on. I then turned prefer server ciphers back on, and tailed our acc

Re: Default value of gzip_proxied

2015-03-21 Thread B.R.
Hello Maxim, So HTTP/1.0 is the reason of all that. Now I also understand why there are those parameters allowing to compress data that should not be cached: nginx as webserver tries to be smarter than those dumb HTTP/1.0 proxies. I was wondering, though: are there real numbers to back this compa

Re: Intermittent SSL Handshake Errors

2015-03-21 Thread Maxim Dounin
Hello! On Fri, Mar 20, 2015 at 02:15:42PM -0400, tempspace wrote: > I had to start looking at this issue again now that yet another openssl > security issue. Now that I know I can go back to a working setup just by > downgrading SSL, I am able to gather more information. > > This morning, I upda

Re: Nginx mail proxy

2015-03-21 Thread Maxim Dounin
Hello! On Sat, Mar 21, 2015 at 12:37:40AM -0400, imwack wrote: > I want to use nginx as a mail proxy.I am new to nginx and need some help > with the configuration, I got some problems. > I want to use Foxmail ,use ngx proxy , this is my configuration. [...] > But this does not run,when i use te

Re: Default value of gzip_proxied

2015-03-21 Thread Maxim Dounin
Hello! On Fri, Mar 20, 2015 at 07:41:59PM +0100, B.R. wrote: > I recently bumped into some trouble with a client caching uncompressed data > without understanding where it came from. > > After long investigation on what appeared to be random, I narrowed it to > the gzip_proxied >

Re: what does fastcgi_keep_conn do?

2015-03-21 Thread B.R.
'Keep connection' does not mean what you think it means. That does not tie a client connection to a backend connection. To do that, you will need stuff like ip_hash or more advenced session mechanisms (which are sadly not availa