Re: Nginx with Organization PROXY server

2015-07-15 Thread shay.per...@capriza.com
Thanks for the recommendation , I am using nginx as a reverse proxy on each one of my application server . the reason I am doing it is , my application server connect to a backend system which can be available on 2 domains , the nginx as a reverse proxy on my application system verify that if one

Re: Intermittent SSL Handshake Errors

2015-07-15 Thread Maxim Dounin
Hello! On Tue, Jul 14, 2015 at 09:58:52PM -0400, tempspace wrote: > Here's what we've learned so far: > > The issue is related to a new security feature that blocks TLS Fallback, > which is a client that connects with one version of TLS, then tries to > downgrade the connection and connect with

Re: Nginx with Organization PROXY server

2015-07-15 Thread CJ Ess
Try incorporating haproxy (http://www.haproxy.org/) or Apache Traffic Server (http://trafficserver.apache.org/) into your setup. I use NGINX to terminate SSL/SPDY then haproxy to direct the request to the appropriate backend server pool - Haproxy is very good at being a reverse proxy but has no for

Re: Storing $server_addr in a variable VS using it directly in location block

2015-07-15 Thread Valentin V. Bartenev
On Wednesday 15 July 2015 07:45:34 itpp2012 wrote: > Valentin V. Bartenev Wrote: > --- > > On Tuesday 14 July 2015 21:46:58 justink101 wrote: > > > According to the documentation getting the value of $server_addr to > > > set a > > > response head

Re: Storing $server_addr in a variable VS using it directly in location block

2015-07-15 Thread itpp2012
Valentin V. Bartenev Wrote: --- > On Tuesday 14 July 2015 21:46:58 justink101 wrote: > > According to the documentation getting the value of $server_addr to > set a > > response header makes a system call, and can impact performance > > negatively

Re: Storing $server_addr in a variable VS using it directly in location block

2015-07-15 Thread Valentin V. Bartenev
On Tuesday 14 July 2015 21:46:58 justink101 wrote: > According to the documentation getting the value of $server_addr to set a > response header makes a system call, and can impact performance > negativelyset $ip $server_addr; > > server { > location /health { > add_header

Re: Dropped https client connection doesn't drop backend proxy_pass connection

2015-07-15 Thread dgobaud
Hi! Thanks for replying. It appears the issue might actually be on the AWS side. AWS is looking into it. Think its an issue with the elastic load balancer. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,237386,260318#msg-260318 ___ nginx mail

Re: Lost connection after reading 2147479552 bytes with sendfile

2015-07-15 Thread Mathias Andre
Hi, Thanks for the detailed reply! * Maxim Dounin wrote: > The 2147479552 is a limit applied by default to allow sendfile() > to work with larger files on Linux up to 2.6.16 (see > src/os/unix/ngx_linux_sendfile_chain.c for some comments). You can see the > same limit on the first sendfi