Re: How to encrypt proxy cache

2017-04-03 Thread sachin.she...@gmail.com
Hi, The information is not publicly available, it is protected by authentication, we have an auth plugin which makes sure auth happens before the request is routed to this cache. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273311,273363#msg-273363 _

Binary upgrade with systemd

2017-04-03 Thread Marc Soda
Hello, I’m using nginx 1.10.3 custom built on Ubuntu 16.04. I’m also using the recommended systemd service file: [Unit] Description=The NGINX HTTP and reverse proxy server After=syslog.target network.target remote-fs.target nss-lookup.target [Service] Type=forking PIDFile=/run/nginx.pid ExecSt

Re: Nginx cookie map regex remove + character

2017-04-03 Thread Francis Daly
On Mon, Apr 03, 2017 at 10:12:04AM +0200, B.R. via nginx wrote: > On Sat, Apr 1, 2017 at 1:57 PM, Francis Daly wrote: > > > If you want to match "word character or plus", use something like [\w+]. > > > > ​Defining a pattern over a simple assertion is kinda strange​. '[' & ']' > are useless here

Re: fastcgi_pass and http upstream

2017-04-03 Thread Francis Daly
On Wed, Mar 22, 2017 at 08:47:00PM +0100, Vucomir Ianculov via nginx wrote: Hi there, > i have a situation where i have 2 Apache backed server and 2 php-fpm backed > server. i would like to setup up a upstream to include all 4 back-ends or > somehow to balance the requestion on all 4 back-ends

Re: fastcgi_pass and http upstream

2017-04-03 Thread Vucomir Ianculov via nginx
cab someone please help me with an example? - Original Message - From: "Vucomir Ianculov via nginx" To: "Yuriy Medvedev" Cc: "Vucomir Ianculov" , nginx@nginx.org Sent: Thursday, March 30, 2017 6:28:16 PM Subject: Re: fastcgi_pass and http upstream Hi i have search on the doc

Re: Nginx upstream server certificate verification

2017-04-03 Thread shivramg94
Thank Sergey, for you response. I have one more question. If I have multiple upstream server host names in the upstream server block, then how can I specify the specific upstream server host name to which the request is being proxied, in the proxy_ssl_name directive? Posted at Nginx Forum: https

Re: How to encrypt proxy cache

2017-04-03 Thread Dewangga Bachrul Alam
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello! On 04/03/2017 08:21 PM, sachin.she...@gmail.com wrote: > Hi, > > We are testing using nginx as a file cache in front of our app, > but the contents of the proxy cache directory are readable to any > body who has access to the machine. [..]

Re: How to encrypt proxy cache

2017-04-03 Thread Steve Wilson
On 03/04/2017 16:50, sachin.she...@gmail.com wrote: Thanks Maxim for the reply. We have evaluated disk based encryption etc, but that does not prevent sysadmins from viewing user data which is a problem for us. Do you think we could build something using lua and intercept read and wriite call

Re: Configuring a subnet in an upstream server

2017-04-03 Thread Dynastic Space
I used a poor example. The functionality I was interested in was adding a range of application servers, all part of the same domain. D On Mon, Apr 3, 2017 at 11:04 AM, B.R. via nginx wrote: > What would be the meaning of that? > > How do you route traffic to 192.168.0.0? Do you really want to s

Re: How to encrypt proxy cache

2017-04-03 Thread rainer
Am 2017-04-03 17:50, schrieb sachin.she...@gmail.com: Thanks Maxim for the reply. We have evaluated disk based encryption etc, but that does not prevent sysadmins from viewing user data which is a problem for us. Then you should put your servers someplace where you trust your the sysadmins.

Re: How to encrypt proxy cache

2017-04-03 Thread sachin.she...@gmail.com
Thanks Maxim for the reply. We have evaluated disk based encryption etc, but that does not prevent sysadmins from viewing user data which is a problem for us. Do you think we could build something using lua and intercept read and wriite call from cache? Posted at Nginx Forum: https://forum.ngin

Re: How to encrypt proxy cache

2017-04-03 Thread Maxim Dounin
Hello! On Mon, Apr 03, 2017 at 09:21:10AM -0400, sachin.she...@gmail.com wrote: > We are testing using nginx as a file cache in front of our app, but the > contents of the proxy cache directory are readable to any body who has > access to the machine. Is there a way to encrypt the files stored i

Re: How to encrypt proxy cache

2017-04-03 Thread rainer
Am 2017-04-03 15:21, schrieb sachin.she...@gmail.com: Hi, We are testing using nginx as a file cache in front of our app, but the contents of the proxy cache directory are readable to any body who has access to the machine. Is there a way to encrypt the files stored in the proxy cache folde

How to encrypt proxy cache

2017-04-03 Thread sachin.she...@gmail.com
Hi, We are testing using nginx as a file cache in front of our app, but the contents of the proxy cache directory are readable to any body who has access to the machine. Is there a way to encrypt the files stored in the proxy cache folder so that it' not exposed to the naked eye but nginx decrypt

Re: slice module got error when contents of upstream was updated

2017-04-03 Thread Roman Arutyunyan
Hi, On Mon, Apr 03, 2017 at 01:09:14AM -0400, t.nishiyori wrote: > Helle, > > I'm using nginx with slice module as a proxy. > > One day, I got an error log such like a "etag mismatch in slice response > while reading response header from upstream". > > The cause of this error was occurred when

Nginx redirect preserving source hostname

2017-04-03 Thread Игнатенко Максим
I have an NGINX as reverse proxy with PHP-fpm. Nginx is set up for serving www.somehost.com. I added another host www.anotherhost.com. Now I need to setup redirect in this way: If user type www.anotherhost.com then it redirects to www.somehost.com/someurl, but url in browser bar shouldn't chang

Re: Nginx cookie map regex remove + character

2017-04-03 Thread B.R. via nginx
On Sat, Apr 1, 2017 at 1:57 PM, Francis Daly wrote: > If you want to match "word character or plus", use something like [\w+]. > ​Defining a pattern over a simple assertion is kinda strange​. '[' & ']' are useless here, since you are not matching several symbols. Use (?\w+) and you should be all

Re: Configuring a subnet in an upstream server

2017-04-03 Thread B.R. via nginx
What would be the meaning of that? How do you route traffic to 192.168.0.0? Do you really want to send requests to 192.168.255.255? How would you handle requests sent to some servers (but not all) if some are not responsive? I suspect what you want to use is dynamic IP addresses for your backends