Re: ssllabs A+ rating

Hi, On Fri, Nov 4, 2016 at 3:57 PM, Alex Samad wrote: > Hi > > Agree on the blindly following. But its good to know how to get there > I also try this > https://cryptoreport.websecurity.symantec.com/checker/ > > question > > tls/ssl compression is it worth it ? I have gzip setup, but I am guess

Re: ssllabs A+ rating

Hi Agree on the blindly following. But its good to know how to get there I also try this https://cryptoreport.websecurity.symantec.com/checker/ question tls/ssl compression is it worth it ? I have gzip setup, but I am guess tls/ssl compression is over the top. and know I have to read up about h

Re: ssllabs A+ rating

https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html is a pretty decent write-up. IME, you need to present an HSTS header, otherwise an A+ is never awarded even with the strictest cipher suite and largest keys and DH primes. To be frank though, achieving an A+ is not a very very worth

ssllabs A+ rating

Hi Any one got a write up on how to get a A+ from this site. I can get a A and I have to support tls1.0 which might be dragging me down ! ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

RE: 502 Bad Gateway nginx/1.2.1

> If you do not need nginx anymore why you do not uninstall it? I don't think the OP is running nginx (at least Server headers say it's apache). It looks like though that the error could be coming from an external resource. While inspecting the html source it seems generated by php (rather tha

Re: 502 Bad Gateway nginx/1.2.1

Hello, what does 'netstat -tulpen | grep 80' say? (run this as root to see procress) what does 'ps ax | grep apache' say? If you do not need nginx anymore why you do not uninstall it? Best Regards; On 04.11.2016 11:02, bertuka wrote: > Hello, > since a couple of days I am getting this error mes

Re: exclude error_page on geoip

Thank you very much. It is working :) On Thu, Nov 3, 2016 at 9:18 PM, Maxim Dounin wrote: > Hello! > > On Thu, Nov 03, 2016 at 02:05:55PM +0800, Tseveendorj Ochirlantuu wrote: > > > Hello, > > > > I need to use geoip module for allow specific region access to my > website. > > But blocked users

502 Bad Gateway nginx/1.2.1

Hello, since a couple of days I am getting this error message all over my website: 502 Bad Gateway nginx/1.2.1 The thing is that my server uses apache... I have tried solutions I have found in google: erasing cache files on navigator and pc. and doesn't work. I have talked to my server administra

Re: RE: Blocking tens of thousands of IP's

Hi Eric, see my reply https://forum.nginx.org/read.php?2,270680,270757#msg-270757 we do a similar thing but keep a counter within nginx (lua_shared_dict FTW) and export this stuff via /badass - location. although its not realtime we have a delay of 5 sec which is enough for us cheers,

Re: Blocking tens of thousands of IP's

Lucas Rolff Wrote: --- > You could very well do a small ipset together with iptables, it's > fast, > and you don't have to reload for every subnet / ip you add. we had the very same issue, 40k IPs to block daily and we came up with ipset add / d

Set header $upstream_response_time with proxy_cache directive

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello! I have problem how to debugs current response time to upstream, my configuration is looks likes : ... upstream upstream_distribution { server full-fqdn.tld; } # common configuration location ~ \.(jpe?g|png|gif|webp)$ {

Trouble using nginx tcp proxy

Hi all, I'm having some trouble using NGINX as a TCP proxy connecting to a customer's servers over an IPSec VPN. My setup:- 1 EC2 instance with NGINX plus configured as TCP proxy- 1 EC2 instance in same VPC running Openswan VPN- IPSec VPN with customer that is configured to only respond to requests