Dual Certificate (RSA and ECC) support

2016-02-05 Thread Jon Emord
Hello, I see that "Dual Certificate (RSA and ECC) support" is currently on the roadmap for nginx 1.9, but is not listed as in progress. Is this feature guaranteed to be in 1.9? Will this feature allow us to serve a SHA-256 and SHA-1 cert at the same time? Our platform is often used in developing

Re: proxy_cache_lock allow multiple requests to remote server in some cases

2016-02-05 Thread jeeeff
Maxim Dounin Wrote: --- > Hello! > > You can find the detailed response to your original message here: > > http://mailman.nginx.org/pipermail/nginx/2016-January/049734.html > > Unfortunately, forum interface is broken and is unable to show it

Re: proxy_cache_lock allow multiple requests to remote server in some cases

2016-02-05 Thread Maxim Dounin
Hello! On Fri, Feb 05, 2016 at 11:02:31AM -0500, jeeeff wrote: > Anyone else noticed the same behavior? > > I wasn't sure if that kind of behavior was correct, but as I said the lock > works properly and only one request get forwarded to the backend server when > there is no cached item in the c

Re: proxy_cache_lock allow multiple requests to remote server in some cases

2016-02-05 Thread jeeeff
Anyone else noticed the same behavior? I wasn't sure if that kind of behavior was correct, but as I said the lock works properly and only one request get forwarded to the backend server when there is no cached item in the cache (that is: the cache is empty), so to me the behavior should be the sa

Re: Strange upstream behaviour

2016-02-05 Thread abauer
Thank you, that would explain the message. Ill check why the upstream servers might not have been reachable. All the best, Armin Posted at Nginx Forum: https://forum.nginx.org/read.php?2,264368,264381#msg-264381 ___ nginx mailing list nginx@nginx.org

Re: Strange upstream behaviour

2016-02-05 Thread Maxim Dounin
Hello! On Fri, Feb 05, 2016 at 06:26:28AM -0500, abauer wrote: > We are using nginx as a loadbalancer in front of docker containers. Most of > the time this works without problems. But sometimes (~0.1% of the requests) > the requests are sent to the server group name instead of one of the members

Re: Option for geoIP blocking in Stream server section on nginx 1.9.x Version !

2016-02-05 Thread Maxim Dounin
Hello! On Fri, Feb 05, 2016 at 06:36:30AM -0500, kmg wrote: > Hi, > > I'm so happy that Stream feature is enabled from Nginx-1.9.x. Also I started > to use this feature in my Testing environment which is running smoothly. > > But One thing I got struggled , is to block IP based on GeoIP country

Re: Prevent reverse proxy from sending range headers to source server

2016-02-05 Thread Maxim Dounin
Hello! On Thu, Feb 04, 2016 at 08:38:15PM -0500, FSC wrote: > Hello everyone! > > I set up my reverse proxy to cache files stored at AWS S3. I want to > minimize the amount of traffic generated at AWS. > > Many of the files are mp4s. Clients make GET requests with the range set. A > video playe

Re: eventfd() failed (38: Function not implemented)

2016-02-05 Thread Maxim Dounin
Hello! On Thu, Feb 04, 2016 at 02:28:07PM -0500, sirwiz wrote: > I try to run Nginx, but i have error: eventfd() failed (38: Function not > implemented) > > I found this patch (https://forum.nginx.org/read.php?29,258676,258685#REPLY) > to 1.9.0, i cannot do diff so i do it manualy. > > So i fo

Re: compiling nginx from sources and including xslt sources

2016-02-05 Thread Maxim Dounin
Hello! On Thu, Feb 04, 2016 at 01:50:00PM -0500, orglee wrote: > Oh ok I'm dumb. :P > > Can I somehow specify those library paths to? I really would like to avoid > compiling them into directory structure of my current system. Refer to the library docs to find out how to compile them and insta

Option for geoIP blocking in Stream server section on nginx 1.9.x Version !

2016-02-05 Thread kmg
Hi, I'm so happy that Stream feature is enabled from Nginx-1.9.x. Also I started to use this feature in my Testing environment which is running smoothly. But One thing I got struggled , is to block IP based on GeoIP country as like Server block. Does GeoIP blocking feature available in Stream blo

Re: Prevent reverse proxy from sending range headers to source server

2016-02-05 Thread FSC
No idea how I missed that. Thank you very much! Also for people that might find this thread later: Adding the parameter "updating" to the directive "proxy_cache_use_stale" is important as well if you want to minimize the traffic the origin server generates. proxy_cache_use_stale updating; proxy

Strange upstream behaviour

2016-02-05 Thread abauer
Hello, We are using nginx as a loadbalancer in front of docker containers. Most of the time this works without problems. But sometimes (~0.1% of the requests) the requests are sent to the server group name instead of one of the members of the servergroup. upstream gateway { server 127.0.0.1:

RE: nginx: [emerg] bind() to 0.0.0.0:80 failed (13: Permission denied)

2016-02-05 Thread Lukas Tribus
> also stated "In Linux (and most other Unix based systems) ports below 1024 > need to be opened using the root user. So you need to start NGINX as root > which will open the port and then drop down to an unprivileged user for the > port." > > Is there a way to achieve this? Configure the user dir

Re: nginx: [emerg] bind() to 0.0.0.0:80 failed (13: Permission denied)

2016-02-05 Thread smsmaddy1981
@Daniel, You were true on the side-note, sudo prefixed command for NGinx actions will cause an serious threat. I missed the note... @Andrew also stated "In Linux (and most other Unix based systems) ports below 1024 need to be opened using the root user. So you need to start NGINX as root which wi

Re: Possible to have a limit_req "nodelay burst" option?

2016-02-05 Thread justpusher
I support this proposal. We need this functionality, too. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,238389,264364#msg-264364 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx