Re: Intermittent SSL Handshake Errors

2015-07-14 Thread tempspace
Here's what we've learned so far: The issue is related to a new security feature that blocks TLS Fallback, which is a client that connects with one version of TLS, then tries to downgrade the connection and connect with a lower TLS version.. It was a feature made in light of the Poodle SSL vulnera

Storing $server_addr in a variable VS using it directly in location block

2015-07-14 Thread justink101
According to the documentation getting the value of $server_addr to set a response header makes a system call, and can impact performance negativelyset $ip $server_addr; server { location /health { add_header Backend $server_addr; return 200; } } Wo

Re: nginx for Postgres servers

2015-07-14 Thread Roman Arutyunyan
Hello Tom, If you want to proxy PostgreSQL connections with nginx, you can use the stream (tcp) proxy for this. Obviously, it will not keep a persistent connection to the database server, but will open a new connection for each client. http://nginx.org/en/docs/stream/ngx_stream_core_module.html

Re: nginx for Postgres servers

2015-07-14 Thread Miguel Clara
You mean something like: https://github.com/FRiCKLE/ngx_postgres ? On July 14, 2015 9:47:01 PM GMT+01:00, Tom Ekberg wrote: >I know nginx is designed to handle web and mail servers. Does it make >sense to use to handle multiple (in our case 2) PostgreSQL database >servers? > >Tom Ekberg >Senior

nginx for Postgres servers

2015-07-14 Thread Tom Ekberg
I know nginx is designed to handle web and mail servers. Does it make sense to use to handle multiple (in our case 2) PostgreSQL database servers? Tom Ekberg Senior Computer Specialist, Lab Medicine University of Washington Medical Center 1959 NE Pacific St, MS 357110 Seattle WA 98195 work: (206

Re: Nginx with Organization PROXY server

2015-07-14 Thread Maxim Dounin
Hello! On Tue, Jul 14, 2015 at 03:30:11PM -0400, shay.per...@capriza.com wrote: > Any plan for supporting it ? No. -- Maxim Dounin http://nginx.org/ ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx with Organization PROXY server

2015-07-14 Thread shay.per...@capriza.com
Any plan for supporting it ? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,260278,260296#msg-260296 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx with Organization PROXY server

2015-07-14 Thread Maxim Dounin
Hello! On Tue, Jul 14, 2015 at 04:49:46PM +0300, Shay Peretz wrote: > Hello , > > on a linux box I define to move the traffic through some Centralize > proxy server ( Organization one ) > in order to configure the proxy from the command line I ran : > export HTTP_PROXY="http://:" > > On the sa

Re: performance testing

2015-07-14 Thread Crystal Pellitier
What is performance testing?what is the importance of it?Can a functional tester can do performance testing? -- Posted via http://www.ruby-forum.com/. ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Dropped https client connection doesn't drop backend proxy_pass connection

2015-07-14 Thread Maxim Dounin
Hello! On Tue, Jul 14, 2015 at 12:43:53PM -0400, dgobaud wrote: > I also just tested regular http and it is having the same problem. First of all, please clarify what's the problem you are seeing. That is, please provide details/stats/logs that show the problem. -- Maxim Dounin http://nginx.

Re: nginx-1.9.3

2015-07-14 Thread Kevin Worthington
Hello Nginx users, Now available: Nginx 1.9.3 for Windows http://goo.gl/qn44F5 (32-bit and 64-bit versions) These versions are to support legacy users who are already using Cygwin based builds of Nginx. Officially supported native Windows binaries are at nginx.org. Announcements are also availab

nginx-1.9.3

2015-07-14 Thread Maxim Dounin
Changes with nginx 1.9.3 14 Jul 2015 *) Change: duplicate "http", "mail", and "stream" blocks are now disallowed. *) Feature: connection limiting in the stream module. *) Feature: data rate limiting in the stream module. *) Bugfix:

Re: Dropped https client connection doesn't drop backend proxy_pass connection

2015-07-14 Thread dgobaud
I also just tested regular http and it is having the same problem. dgobaud Wrote: --- > Don't think so - config is below and the relevant url is > /dashboard_stream > > upstream my_app { > server unix:///var/run/puma/my_app.sock; >

Re: Dropped https client connection doesn't drop backend proxy_pass connection

2015-07-14 Thread dgobaud
Don't think so - config is below and the relevant url is /dashboard_stream upstream my_app { server unix:///var/run/puma/my_app.sock; } server { listen 80; server_name _ localhost; # need to listen to localhost for worker tier if ($http_x_forward

Re: Problem Nginx with SSL Settings active in IIS 7.5

2015-07-14 Thread elianmarks
The correct link - http://blogs.technet.com/b/nettracer/archive/2013/12/30/how-it-works-on-the-wire-iis-http-client-certificate-authentication.aspx Posted at Nginx Forum: http://forum.nginx.org/read.php?2,260279,260280#msg-260280 ___ nginx mailing list

Problem Nginx with SSL Settings active in IIS 7.5

2015-07-14 Thread elianmarks
I've got the following problem with nginx working with IIS, when enabled the client certificate in the SSL Settings solicitation IIS, it performs two SSL handshake, a first without requesting the certificate after this first handshake is done another handshake requesting the certificate. The operat

Nginx with Organization PROXY server

2015-07-14 Thread Shay Peretz
Hello , on a linux box I define to move the traffic through some Centralize proxy server ( Organization one ) in order to configure the proxy from the command line I ran : export HTTP_PROXY="http://:" On the same box I have nginx which serve as a reverse proxy and all the local application sendi

Re: Dropped https client connection doesn't drop backend proxy_pass connection

2015-07-14 Thread Valentin V. Bartenev
On Monday 13 July 2015 12:02:44 dgobaud wrote: > Any update on this? Seeing this problem with nginx leaving connections open > on AWS Beanstalk using nginx to proxy to puma/ruby on rails. [..] Do you have cache or proxy store configured? wbr, Valentin V. Bartenev __