reading cookie

2016-04-11 Thread Pankaj Chaudhary
Hi, My name is Pankaj and i am new to this list. I would like to know how i can set cookie value and get cookie value. Please let me know is any module already written to do this. Regards, Pankaj ___ nginx mailing list nginx@nginx.org http://mailman.ng

RE: opinions about Session tickets

2016-04-11 Thread Arnaud Van der Vorst
Good morning, @Andreas Thank you for sharing these documents. I had already read the one from Tim Taubert and had the same concern about using TLS/SSL Tickets. Is it a good thing or not? -Original Message- From: nginx [mailto:nginx-boun...@nginx.org] On Behalf Of A. Schulze Sent: lundi 11

RE: TLS/SSL Cache Automatic Purge

2016-04-11 Thread Arnaud Van der Vorst
Hi, @B.R. Not really… The only information for ssl_session_timout is “Specifies a time during which a client may reuse the session parameters stored in a cache.” It does not say anything about purging the TLS/SSL Cache which is my concern here. I have read that invalidating a TLS/SSL Sessi

Nginx hack day project

2016-04-11 Thread CJ Ess
I was trying to think of a hack day project, and one idea was to implement a blob server similar to Facebook's haystack. Facebook did their server with the evhttpd library, I was thinking of making it an nginx module. In order to make it work I'd need to have nginx send a range of bytes from a larg

Re: TLS/SSL Cache Automatic Purge

2016-04-11 Thread B.R.
Hello, @Maxim Just to be perfectly clear: does that mean that session tickets are supported for any version of nginx (including http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_timeout> have all your answers. --- *B. R.* On Mon, Apr 11, 2016 at 3:31 PM, Maxim Dounin wrote: > H

Re: Does "include" use the "configuration prefix" or the "path prefix"?

2016-04-11 Thread hroku003
THank you very much for confirmation. Is this documented anywhere? I looked at various places: http://nginx.org/en/docs/ngx_core_module.html#include http://nginx.org/en/docs/switches.html https://www.nginx.com/resources/wiki/start/topics/tutorials/installoptions/ and I could not find it. (I also

Re: Does "include" use the "configuration prefix" or the "path prefix"?

2016-04-11 Thread Maxim Dounin
Hello! On Mon, Apr 11, 2016 at 06:52:25PM +, hroku...@yahoo.com wrote: > I've read the documentation and it implies the "path prefix" > would be used for the "include" directive. > > Example: "include mime.types" > > However, in practice, the "configuration prefix" is always used > even

Does "include" use the "configuration prefix" or the "path prefix"?

2016-04-11 Thread hroku003
I've read the documentation and it implies the "path prefix" would be used for the "include" directive. Example: "include mime.types" However, in practice, the "configuration prefix" is always used even if the file is found within the "path prefix". Is this the correct behaviour? Here are sa

Re: Bug in 1.9.14 or something else?

2016-04-11 Thread Maxim Dounin
Hello! On Sun, Apr 10, 2016 at 04:18:05AM -0400, jshare wrote: > If I disable http/2, I can login - good call! > > I enabled the debug.log to compare the output with http/2 enabled and > disabled, but when I compare the two side by side, nothing jumps out at me. > Aside from the time and a few n

opinions about Session tickets

2016-04-11 Thread A. Schulze
Maxim Dounin: In nginx 1.5.9 the "ssl_session_tickets" directive was added, which makes it possible to disable session tickets when needed. I found these two opinions. They suggest to disable session tickets. - https://www.farsightsecurity.com/Blog/20151202-thall-hardening-dh-and-ecc/ -

Re: upstream member liveness

2016-04-11 Thread Valentin V. Bartenev
On Monday 11 April 2016 07:20:56 drookie wrote: > I'm asking about the balancer behaviour, not the backends. > I've answered about the balancer. wbr, Valentin V. Bartenev ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listin

Re: TLS/SSL Cache Automatic Purge

2016-04-11 Thread Maxim Dounin
Hello! On Mon, Apr 11, 2016 at 01:23:02PM +0200, B.R. wrote: [...] > On a side-note, by default nginx does not store session parameters as it > prefers tickets > , > supported since v1.5.9, over sessions ID. Session tic

RE: TLS/SSL Cache Automatic Purge

2016-04-11 Thread Arnaud Van der Vorst
Hi B.R., Thank you very much for your answer and sorry for the US media political like message ;-) So, if I understand correctly, using ssl_session_timeout makes sure that after the specified amount of time, the TLS/SSL Sessions will be removed/purged from the TLS/SSL Shared Cache? Is that

Re: TLS/SSL Cache Automatic Purge

2016-04-11 Thread B.R.
Sounds like US media political messages: 'I am Arnaud, and I approve this message'. That said, welcome! You will have to write your own module if you want to manually delete TLS sessions parameters instead of letting them expire after 10 minutes. You could also emulate this daily purge by keeping

Re: upstream member liveness

2016-04-11 Thread drookie
I'm asking about the balancer behaviour, not the backends. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,266077,266080#msg-266080 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

disable caching for single virtual host

2016-04-11 Thread absolutely_f...@libero.it
Hi,I am using nginx as reverse proxy cache with Apache. Basically I use this configuration: https://www.djm.org.uk/wordpress-nginx-reverse-proxy-caching-setup/ I need to exclude a specific virtual from nginx's cache. So I added "shop" upstream with this configuration: upstream backend {ip

Re: upstream member liveness

2016-04-11 Thread Валентин Бартенев
On Monday 11 April 2016 07:01:01 drookie wrote: > What is the scope of the upstream member liveness: is it per upstream group, > or per vhost ? > It's per upstream group. > If the question is unclear, consider I have 3 nginx - one balancer and two > backends, and the following config part on th

upstream member liveness

2016-04-11 Thread drookie
What is the scope of the upstream member liveness: is it per upstream group, or per vhost ? If the question is unclear, consider I have 3 nginx - one balancer and two backends, and the following config part on the nginx balancer: upstream backends { server 192.168.0.1; server 192.168.0.2

Re: 1.9.14 - Issues with disabled request buffering and HTTP/2

2016-04-11 Thread Валентин Бартенев
On Monday 11 April 2016 05:19:17 n.dom wrote: > Hello, > > we have an issue with the newest nginx version 1.9.14. I am not sure if this > is a possible bug or a configuration problem. > > We use nginx with disabled request buffering (proxy_request_buffering off) > > We are currently using nginx

Re: Error 404 if url contains "star"

2016-04-11 Thread B.R.
The only way to know would have been to have a look at the processes table before killing everyone and restarting. If you nginx through the package management of your distribution and service scripts to manage nginx processus, there is little-to-no chance you got multiplt nginx masters running. It

1.9.14 - Issues with disabled request buffering and HTTP/2

2016-04-11 Thread n.dom
Hello, we have an issue with the newest nginx version 1.9.14. I am not sure if this is a possible bug or a configuration problem. We use nginx with disabled request buffering (proxy_request_buffering off) We are currently using nginx 1.9.12 with HTTP/2 enabled. In this setup we don't have any is

TLS/SSL Cache Automatic Purge

2016-04-11 Thread Arnaud Van der Vorst
Hi, My name is Arnaud and I am new to the list. I would like to know if NGINX is using any automatic purge mechanism for its TLS/SSL Cache configured using the following directives: ssl_session_timeout 10m; ssl_session_cache shared:SSL:10m; I understand that a daily purge of TLS/SSL C