Re: Throughput with Loadbalancer

2015-09-28 Thread Lucas Rolff
You'll decrease your capacity to 1 gigabit, because you'll send it out via the load balancer again. Else you need to look for "DSR" (Direct Server Return), I'm not completely sure if nginx actually supports this. wolfgangpue 29 Sep 2015 08:21 Hi, I am not sure ho

Throughput with Loadbalancer

2015-09-28 Thread wolfgangpue
Hi, I am not sure how the load balancer affect the data throughput. For example: I have two nginx server with 1 Gps network connection. When I configure the first server as nginx load balancer and as upstream server and the second server only as upstream server. Is the second upstream server se

Re: Http2 not starting up

2015-09-28 Thread khav
Turn out maxcdn havent implemented http2 yet Posted at Nginx Forum: http://forum.nginx.org/read.php?2,261910,261911#msg-261911 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Http2 not starting up

2015-09-28 Thread khav
HTTP2 isn't working for me .I still use HTTP/1.1 is reponse headers but nginx don't show any error.I also restarted nginx with no change server { listen 443 http2 ; ssl on; ssl_certificate/etc/ssl/filterbypass.me.crt; #(or .pem) ssl_certificate_key/etc/ssl/filt

Re: Problems with HTTP/2

2015-09-28 Thread Aapo Talvensaari
On 29 September 2015 at 01:06, Aapo Talvensaari wrote: > On 29 September 2015 at 00:01, Valentin V. Bartenev wrote: >> What does ":" mean in the header() function? >> If it returns ":" as a header, then it's the cause of the error. >> > It just sets the status code. It is normal PHP 5.3 code. I

Re: Problems with HTTP/2

2015-09-28 Thread Aapo Talvensaari
On 29 September 2015 at 00:01, Valentin V. Bartenev wrote: > >On Monday 28 September 2015 20:59:23 Aapo Talvensaari wrote: > >> On 28 September 2015 at 19:44, Valentin V. Bartenev > wrote: > >> If Ajax request sends a PUT request with XmlHtttpRequest I do get: > >> net::ERR_SPDY_COMPRESSION_ERRO

Re: Problems with HTTP/2

2015-09-28 Thread Valentin V. Bartenev
On Monday 28 September 2015 20:59:23 Aapo Talvensaari wrote: > On 28 September 2015 at 19:44, Valentin V. Bartenev wrote: > > > On Wednesday 23 September 2015 06:28:37 Aapo Talvensaari wrote: > > >> I did get errors like: > > >> net::ERR_SPDY_COMPRESSION_ERROR > > > Could you provide a debug log

Re: Nginx HTTP/2 module (ALPN) TLS on RHEL 7.*

2015-09-28 Thread Andrew Hutchings
Hi, If you compiled with OpenSSL 1.0.2d then it should have ALPN, otherwise it will fallback to NPN. One way to test is with OpenSSL 1.0.2d: (echo | openssl s_client -alpn h2 -connect example.net:443) | grep ALPN This will respond with something like the following if it is supported: ALPN proto

Re: Nginx HTTP/2 module (ALPN) TLS on RHEL 7.*

2015-09-28 Thread rikske
Hello. I would like to add here that it is important to get an answer. Google is going to remove SPDY support in Chrome, early 2016. That is 3 months from now. Moreover, NPN support will also be dropped with ALPN as its successor. Since by far the majority of users, use Chrome and Chrome is autom

Re: Nginx HTTP/2 module (ALPN) TLS on RHEL 7.*

2015-09-28 Thread rikske
Hi, I don't know. Can't find anything about Nginx, OpenSSL ALPN and/or NPN in the logs. HTTP/2 seems to be running fine here according to my testing tools. But there is nothing about ALPN or NPN. The only thing i can find in there code is that the Nginx should warn the user in case, the enduser

Re: Problems with HTTP/2

2015-09-28 Thread Aapo Talvensaari
On 28 September 2015 at 19:44, Valentin V. Bartenev wrote: > On Wednesday 23 September 2015 06:28:37 Aapo Talvensaari wrote: > >> I did get errors like: > >> net::ERR_SPDY_COMPRESSION_ERROR > > Could you provide a debug log with problematic request? > I tried to debug this further. And now I'm c

Re: Nginx HTTP/2 module (ALPN) TLS on RHEL 7.*

2015-09-28 Thread Dewangga Bachrul Alam
Like this? nginx version: nginx/1.9.5 built by gcc 4.8.3 20140911 (Red Hat 4.8.3-9) (GCC) built with OpenSSL 1.0.2d-fips 9 Jul 2015 TLS SNI support enabled configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.l

Re: Problems with HTTP/2

2015-09-28 Thread Valentin V. Bartenev
On Wednesday 23 September 2015 06:28:37 Aapo Talvensaari wrote: > I tried the 1.9.5 release with http2 and it worked fine, but Ajax request > especially were problematic. > > I did get errors like: > net::ERR_SPDY_COMPRESSION_ERROR > > And the status code was 0. With the former spdy support I did

Re: nginx systemd reload service command skips configtest

2015-09-28 Thread Maxim Dounin
Hello! On Sat, Sep 26, 2015 at 05:03:15PM -0400, Per Hansson wrote: > Hi, the "nginx.service" file shipped with systemd rpm's both in nginx's > stable repository and epel for CentOS7 / RHEL7 do not perform a "configtest" > when "systemctl reload nginx" is issued. > So if there is an error in the

Re: nginScript - is it fuzzed?

2015-09-28 Thread Jacek Wielemborek
W dniu 28.09.2015 o 17:26, Alt pisze: > Hello, > > Markus Linnala has found at least two bugs with afl-fuzz: > http://forum.nginx.org/read.php?29,261583 > http://forum.nginx.org/read.php?29,261582 > > nginScript is very new, I'm sure you can help to test it if you know how to > use afl-fuzz. > >

Re: nginScript - is it fuzzed?

2015-09-28 Thread Alt
Hello, Markus Linnala has found at least two bugs with afl-fuzz: http://forum.nginx.org/read.php?29,261583 http://forum.nginx.org/read.php?29,261582 nginScript is very new, I'm sure you can help to test it if you know how to use afl-fuzz. Best Regards, Olivier Posted at Nginx Forum: http://for

Re: Nginx HTTP/2 module (ALPN) TLS on RHEL 7.*

2015-09-28 Thread rikske
Hi, So what you're saying. Nginx HTTP/2 module won't work on RHEL 7.1 with (ALPN) TLS, until you are using OpenSSL version 1.0.2 on RHEL 7.1 in any manner whatsoever? Can anyone confirm this? Thanks, Regards, Rik Ske > Hello! > > On 09/28/2015 08:40 PM, rik...@deds.nl wrote: >> Dear, >> >> D

Re: Preload Files Module for Nginx

2015-09-28 Thread Frederik Nosi
Hi, On 09/27/2015 05:14 PM, Christ-Jan Wijtmans wrote: Doesnt linux cache files in RAM already? Not before you've readed them at least once. Live long and prosper, Christ-Jan Wijtmans https://github.com/cjwijtmans http://facebook.com/cj.wijtmans http://twitter.com/cjwijtmans On Thu, Sep 2

Re: Keepalive timeout

2015-09-28 Thread Frederik Nosi
Hi, On 09/26/2015 07:38 PM, Frank Liu wrote: Hi, If I have set the client facing keep alive timeout to 30s, but nginx takes longer to respond a given request due to slow backend in a reverse proxy setup, will nginx drop the client keep alive connection since its been idle for too long, or wil

Re: Nginx HTTP/2 module (ALPN) TLS on RHEL 7.*

2015-09-28 Thread Dewangga Bachrul Alam
Hello! On 09/28/2015 08:40 PM, rik...@deds.nl wrote: > Dear, > > Does the Nginx HTTP/2 module work on RHEL 7.1 with (ALPN) TLS? > > It seems like the HTTP/2 module is enabled by default in your RHEL 7.1 > based rpm and srpm. > > Your Nginx website writes about: > > "Note that accepting HTTP/2

Re: Setting headers

2015-09-28 Thread Maxim Dounin
Hello! On Fri, Sep 25, 2015 at 04:20:41PM +0200, Joó Ádám wrote: > Something that long bothered me, and perhaps has already been > discussed, but I haven’t found anything on it: why is there no way to > set arbitrary headers without using an extension module? I know that > the `add_header` direct

Re: nginScript - is it fuzzed?

2015-09-28 Thread Jacek Wielemborek
W dniu 28.09.2015 o 16:29, Jacek Wielemborek pisze: > [1] https://lolware.net/2015/04/28/nginx-fuzzing.html Oh crap, sorry, actually I misread the article and it looks like nothing was found. Still, running the new language through a fuzzer sounsd worthwhile - if anyone is interested in this task,

nginScript - is it fuzzed?

2015-09-28 Thread Jacek Wielemborek
Hello, I just read this blog post: https://www.nginx.com/blog/launching-nginscript-and-looking-ahead Given that afl-fuzz was already successful in finding security bugs in Nginx [1], I figured I'd ask whether nginScript was or is planned to be fuzzed as well. Quick Google search didn't find seem

http digest + proxy doesn't work on /something?x=3?

2015-09-28 Thread Jacek Wielemborek
List, It took me a while to actually find this mailing list; I have a question regarding HTTP digest nginx module in combination with proxy_pass. I tried the attached configuration file in combination with nginx-1.6.3 and kept getting asked for password infinitely when I try to accept any resource

Nginx HTTP/2 module (ALPN) TLS on RHEL 7.*

2015-09-28 Thread rikske
Dear, Does the Nginx HTTP/2 module work on RHEL 7.1 with (ALPN) TLS? It seems like the HTTP/2 module is enabled by default in your RHEL 7.1 based rpm and srpm. Your Nginx website writes about: "Note that accepting HTTP/2 connections over TLS requires the “Application-Layer Protocol Negotiation”