Re: set_real_ip_from --how to load IP list file ?

2015-11-08 Thread CJ Ess
He has a point - if your using multiple CDNs you can have many dozens of addresses for the real_ip module - it would be nice to be able to source them from a file. Also last I checked the real_ip module did a linear search through all the addresses configured, its not an issue yet but at some poin

Re: set_real_ip_from --how to load IP list file ?

2015-11-08 Thread Reinis Rozitis
I'm using CDN with my site. There are many IPs on network. set_real_ip_from only can add IP in one line. set_real_ip_from supports subnet masks, so you can more or less achieve the same as in apache. If you want an external file you can use include ( http://nginx.org/en/docs/ngx_core_module.ht

Certificate Transparency

2015-11-08 Thread Joó Ádám
Hi, Do we know if there’s any plan to support the signed certificate timestamp TLS extension in Nginx? (There’s apparently a third party module that implements the functionality: https://github.com/grahamedgecombe/nginx-ct) The TLS extension is the only method to implement Certificate Transparenc