Re: Basic authentication

2017-01-13 Thread lacibaci
Thanks, i found it just above. It looks like this: location ~* \.php { fastcgi_pass unix:/run/php-fpm/php56-fpm.sock; } I would like to keep existing behavior (no user/passwd needed) except when clients try to execute php in /private... directory. Something like this: location ~* /private*\.

Re: Basic authentication

2017-01-13 Thread Jim Ohlstein
Hello, On 01/13/2017 04:42 PM, lacibaci wrote: I have a location that I would like to protect: location /private { satisfy any; allow 192.168.1.0/24; deny all; auth_basic "Protected"; auth_basic_user_file conf/htpasswd; } This works for /private /private/ and /

Basic authentication

2017-01-13 Thread lacibaci
I have a location that I would like to protect: location /private { satisfy any; allow 192.168.1.0/24; deny all; auth_basic "Protected"; auth_basic_user_file conf/htpasswd; } This works for /private /private/ and /private/somefile.html However, when I request (GE

Re: SSL Offloading in UDP load

2017-01-13 Thread Maxim Konovalov
On 1/13/17 12:51 PM, nginxsantos wrote: > Thanks Maxim. > I am looking for a scenario to load balance the LWM2M server (my backend > servers would be LWM2M Servers). I am thinking of using the Nginx UDP > loadbalancer for this. Now, if you look at the LW2M stack, it has DTLS over > UDP. So, I was t

Re: Weird proxy_ssl_protocol ordering

2017-01-13 Thread bclod
Maxim, Thanks for the detailed reply! In the organization I work for I see most legacy backends support TLSv1 or support both TLSv1.1/1.2. Since every backend that supports TLSv1.1 also supports TLSv1.2 (from my org so far) I thought I was doing a small favor by leaving TLSv1.1 out of the scope.

Re: Weird proxy_ssl_protocol ordering

2017-01-13 Thread Maxim Dounin
Hello! On Fri, Jan 13, 2017 at 12:33:16PM -0500, bclod wrote: > Hello All, > > I found some strange behavior while troubleshooting a connectivity issue > today. Below was the scenario. > > * Upstream Backend configured to allow TLSv1.1 and TLSv1.2 > * Client (nginx) configured with proxy_ssl_p

Re: COAP Reverse Proxy

2017-01-13 Thread Aleksandar Lazic
Hi. Am 13-01-2017 09:55, schrieb nginxsantos: Hi, Anyone has any information of using Nginx as a Reverse Proxy for COAP. Looks like Nginx does not support this. But, does any third party module support this? With COAP you mean this? https://en.wikipedia.org/wiki/Constrained_Application_Pro

Weird proxy_ssl_protocol ordering

2017-01-13 Thread bclod
Hello All, I found some strange behavior while troubleshooting a connectivity issue today. Below was the scenario. * Upstream Backend configured to allow TLSv1.1 and TLSv1.2 * Client (nginx) configured with proxy_ssl_protocols TLSv1 TLSv1.2 No matter the ordering of nginx proxy_ssl_protocols TL

Re: Set ssl_session_tickets each virtual host is unable?

2017-01-13 Thread Maxim Dounin
Hello! On Thu, Jan 12, 2017 at 07:30:23PM -0500, malloc813 wrote: > Maxim Dounin Wrote: > --- > > Hello! > > > > On Thu, Jan 12, 2017 at 11:57:58AM -0500, malloc813 wrote: > > > > > Hi, I tested nginx configuration and got one problem. > > > F

COAP Reverse Proxy

2017-01-13 Thread nginxsantos
Hi, Anyone has any information of using Nginx as a Reverse Proxy for COAP. Looks like Nginx does not support this. But, does any third party module support this? Thanks, Santos Posted at Nginx Forum: https://forum.nginx.org/read.php?2,271980,271980#msg-271980 __

Re: SSL Offloading in UDP load

2017-01-13 Thread nginxsantos
Thanks Maxim. I am looking for a scenario to load balance the LWM2M server (my backend servers would be LWM2M Servers). I am thinking of using the Nginx UDP loadbalancer for this. Now, if you look at the LW2M stack, it has DTLS over UDP. So, I was thinking if I could offload the DTLS traffic here.