Re: slice module got error when contents of upstream was updated

2017-04-04 Thread t.nishiyori
Hi Roman, The slice module is awesome for caching my large content effectively. But my contents are updated in any times. I decide to implement some external tools for this error to hear your answer. Such like a monitoring error logs and purge unnecessary cache. Thank you. Posted at Nginx Forum:

Re: Memory issue

2017-04-04 Thread JohnCarne
Uprgraded to last nginx version : memory still increase it seems Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273274,273411#msg-273411 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Limit number of connections to server

2017-04-04 Thread Payam Chychi
You can also use ulimit but simple iptable/ipfw/pf will do the job On Tue, Apr 4, 2017 at 3:13 PM wrote: > You would probably want to also limit the number of connections per IP > address, else one IP could lock up the entire site. > > > Original Message > From: Valentin V. Bartenev > Sent: T

Re: Limit number of connections to server

2017-04-04 Thread lists
You would probably want to also limit the number of connections per IP address, else one IP could lock up the entire site.   Original Message   From: Valentin V. Bartenev Sent: Tuesday, April 4, 2017 1:58 PM To: nginx@nginx.org Reply To: nginx@nginx.org Subject: Re: Limit number of connections t

Re: Nginx redirect preserving source hostname

2017-04-04 Thread Francis Daly
On Mon, Apr 03, 2017 at 02:17:19PM +0600, Игнатенко Максим wrote: Hi there, > I have an NGINX as reverse proxy with PHP-fpm. Nginx is set up for > serving www.somehost.com. I added another host www.anotherhost.com. > Now I need to setup redirect in this way: If user type > www.anotherhost.com the

Re: Limit number of connections to server

2017-04-04 Thread Valentin V. Bartenev
On Tuesday 04 April 2017 17:22:58 Kamil Gorlo wrote: > Hi, > > is there a way to limit total number of open connections per listening port > in Nginx? I know that there is limit_conn module but as far as I understand > it only works on "request" layer, which means connections are counted only > wh

Re: No referrer header on leacher's site !!

2017-04-04 Thread Francis Daly
On Tue, Apr 04, 2017 at 04:39:23PM +0500, shahzaib mushtaq wrote: Hi there, > Thanks for quick response. Well its reverse, he's putting our HTTPS video > link on his HTTP website. Could that create issue as well? If yes, what's > the fix of it. nginx does not know (or care) what the linking site

Re: No referrer header on leacher's site !!

2017-04-04 Thread Richard Stanway
With the controls sites have over the referrer header, it's not very effective as an access control mechanism. You can use something like http://nginx.org/en/docs/http/ngx_http_secure_link_module.html instead. On Tue, Apr 4, 2017 at 1:39 PM, shahzaib mushtaq wrote: > Hi, > > Thanks for quick resp

Limit number of connections to server

2017-04-04 Thread Kamil Gorlo
Hi, is there a way to limit total number of open connections per listening port in Nginx? I know that there is limit_conn module but as far as I understand it only works on "request" layer, which means connections are counted only when request headers have been already read. I have problem when n

Re: [nginx-announce] nginx-1.11.13

2017-04-04 Thread Kevin Worthington
Hello Nginx users, Now available: Nginx 1.11.13 for Windows https://kevinworthington.com/nginxwin3 (32-bit and 64-bit versions) These versions are to support legacy users who are already using Cygwin based builds of Nginx. Officially supported native Windows binaries are at nginx.org. Announ

nginx-1.11.13

2017-04-04 Thread Maxim Dounin
Changes with nginx 1.11.13 04 Apr 2017 *) Feature: the "http_429" parameter of the "proxy_next_upstream", "fastcgi_next_upstream", "scgi_next_upstream", and "uwsgi_next_upstream" directives. Thanks to Piotr Sikora. *) Bugfix: in m

Re: Nginx map module regex in file

2017-04-04 Thread Maxim Dounin
Hello! On Tue, Apr 04, 2017 at 01:01:19PM +0530, Jagannath Naidu wrote: > I am trying to redirect some urls to a different document path. My > configuration file is as follows > > > /etc/nginx/conf.d/site.conf > *map_hash_max_size 2048;* > *map_hash_buc

Re: Binary upgrade with systemd

2017-04-04 Thread Marc Soda
It seems that it’s working as designed. I thought the old master would exit automatically. But it sticks around in case you want to fail back. Thanks and sorry for the noise. > On Apr 4, 2017, at 7:41 AM, Marc Soda wrote: > > I sent WINCH to the old master. In this case 32277. > > After s

Re: Binary upgrade with systemd

2017-04-04 Thread Lucas Rolff
According to the documentation: http://nginx.org/en/docs/control.html#upgrade You'd have to send the QUIT signal to finish off upgrading (replacing) the binary during runtime. Marc Soda wrote: I sent WINCH to the old master. In this case 32277. After sending WINCH, I can send QUIT to the o

Re: Binary upgrade with systemd

2017-04-04 Thread Marc Soda
I sent WINCH to the old master. In this case 32277. After sending WINCH, I can send QUIT to the old master and it exits. Everything looks fine at that point. But it seems a little odd to have to do this. > On Apr 4, 2017, at 4:43 AM, Lucas Rolff wrote: > > Hello Marc, > > For which PID do

Re: No referrer header on leacher's site !!

2017-04-04 Thread shahzaib mushtaq
Hi, Thanks for quick response. Well its reverse, he's putting our HTTPS video link on his HTTP website. Could that create issue as well? If yes, what's the fix of it. Again thanks for your help. On Tue, Apr 4, 2017 at 4:32 PM, nanaya wrote: > Hi, > > On Tue, Apr 4, 2017, at 20:24, shahzaib mus

Re: No referrer header on leacher's site !!

2017-04-04 Thread nanaya
Hi, On Tue, Apr 4, 2017, at 20:24, shahzaib mushtaq wrote: > Hi, > > We came across a website who is playing our video links remotely. Since > we've hotlinking protection enabled based on referrer headers so i > checked > the request header by playing that video & found out that *referrer > heade

No referrer header on leacher's site !!

2017-04-04 Thread shahzaib mushtaq
Hi, We came across a website who is playing our video links remotely. Since we've hotlinking protection enabled based on referrer headers so i checked the request header by playing that video & found out that *referrer header was missing* in the browser's requests header tab. Then to generate sam

Re: Allow /.well-known/acme-challenge but deny dot files

2017-04-04 Thread nanaya
Hi, On Tue, Apr 4, 2017, at 17:45, Anoop Alias wrote: > You can put it above the other deny location > # Allow "Well-Known URIs" as per RFC 5785 > location ~* ^/.well-known/ { > allow all; > } > Or use "^~" because it's of higher precedence compared to "~". > If the longest matching prefix loca

Re: Allow /.well-known/acme-challenge but deny dot files

2017-04-04 Thread Anoop Alias
You can put it above the other deny location # Allow "Well-Known URIs" as per RFC 5785 location ~* ^/.well-known/ { allow all; } On Tue, Apr 4, 2017 at 2:06 PM, Martin Wolfert wrote: > Hi, > > try this: > > # Allow access to the letsencrypt ACME Challenge > location ~ /\.well-known\/acme-chall

Re: Binary upgrade with systemd

2017-04-04 Thread Lucas Rolff
Hello Marc, For which PID do you send the WINCH signal? From: nginx mailto:nginx-boun...@nginx.org>> on behalf of Marc Soda mailto:m...@soda.fm>> Reply-To: "nginx@nginx.org" mailto:nginx@nginx.org>> Date: Tuesday, 4 April 2017 at 04.04 To: "nginx@nginx.org

Re: Allow /.well-known/acme-challenge but deny dot files

2017-04-04 Thread Martin Wolfert
Hi, try this: # Allow access to the letsencrypt ACME Challenge location ~ /\.well-known\/acme-challenge { allow all; } Best, Martin Am 04.04.2017 um 10:33 schrieb basti: Hello, at the Moment I use this config # Deny access to all .invisible files. location ~ /\. { deny all; access_log

Allow /.well-known/acme-challenge but deny dot files

2017-04-04 Thread basti
Hello, at the Moment I use this config # Deny access to all .invisible files. location ~ /\. { deny all; access_log off; log_not_found off; } Now I need access to Let's Encrypt acme-challenge and add this to my config before deny all .invisible files, now it looks like ... # Allow Let's Encry

Nginx map module regex in file

2017-04-04 Thread Jagannath Naidu
Hi, I am trying to redirect some urls to a different document path. My configuration file is as follows /etc/nginx/conf.d/site.conf *map_hash_max_size 2048;* *map_hash_bucket_size 128;* *map $uri $new {* *include list_4;* *}* resolver 127.0.0.1;