Re: Memory issue

2017-04-06 Thread JohnCarne
another attempt : # configuration file /etc/nginx/nginx.conf: #Core Functionality user nobody; worker_processes 8; pid/var/run/nginx.pid; pcre_jit on; error_log /var/log/nginx/error_log; #error_log /home/abackup/debug.log debug; worker_rlimit_nofile 30; #Load Dynamic Modules includ

Re: Memory issue

2017-04-06 Thread JohnCarne
I could not paste output of nginx -T, even truncating to 2500 lines instead of 158000 I get : Please shorten your messages, the body is too large. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273274,273468#msg-273468 ___ nginx mailing lis

Re: Memory issue

2017-04-06 Thread JohnCarne
@] BR via Nginx : Idea coming right out of the blue: have you given a thought on compiling nginx (+ gradually modules) with valgrind? ​You should know pretty quickly if something is wrong.​ Thanks for this idea which can really improve the eng process... Brotli seems the main suspected issue Ano

Re: Memory issue

2017-04-06 Thread Aleksandar Lazic
Am 06-04-2017 19:05, schrieb Maxim Dounin: Hello! On Thu, Apr 06, 2017 at 11:32:45AM -0400, JohnCarne wrote: [...] [...] Indeed, we are all tired to do 3 upgrades /month Note that the way you are asking others to help you is not likely to attract many volunteers. +1

Re: 99.999% my config works - then default_server is used

2017-04-06 Thread Ruslan Ermilov
On Thu, Apr 06, 2017 at 11:18:02PM +0200, Michal Kralik wrote: > Hi, > > We're facing super strange issues with nginx 1.10.3 (CentOS 7, > 3.10.0-327.36.3.el7.x86_64). Our config works ok, we get a lot of traffic, > but every day a couple of requests (5-10) don't get processes correctly by > a serv

99.999% my config works - then default_server is used

2017-04-06 Thread Michal Kralik
Hi, We're facing super strange issues with nginx 1.10.3 (CentOS 7, 3.10.0-327.36.3.el7.x86_64). Our config works ok, we get a lot of traffic, but every day a couple of requests (5-10) don't get processes correctly by a server directive with the defined server_name, but rather by a server directive

Re: Memory issue

2017-04-06 Thread B.R. via nginx
Idea coming right out of the blue: have you given a thought on compiling nginx (+ gradually modules) with valgrind? ​You should know pretty quickly if something is wrong.​ ​Note the slowdown, though. Might not be a good idea on production, or if you do not secure some offload to somewhere else if i

Re: Nginx upstream server certificate verification

2017-04-06 Thread shivramg94
Thank Sergey, for you response. I have one more question. If I have multiple upstream server host names in the upstream server block, then how can I specify the specific upstream server host name to which the request is being proxied, in the proxy_ssl_name directive? Posted at Nginx Forum: http

Re: Memory issue

2017-04-06 Thread JohnCarne
Thanks for your feebacks. I do my best seriously to communicate what I can ! We note this issue on very busy server only, it will be hard to remove all modules on such busy server, and reconfig all, but not impossible. Anoop is on the case on smallest servers, and succeed to see the issue at small

Re: Memory issue

2017-04-06 Thread Maxim Dounin
Hello! On Thu, Apr 06, 2017 at 11:32:45AM -0400, JohnCarne wrote: > cpanel stat generation cause thet nginx makes a lot of reload to grab new > file descriptor... no issue on that > > Issue is nginx, I show you situation now with 2.58% used for 1 work, which > is same value for others, but gloab

Re: Memory issue

2017-04-06 Thread Lucas Rolff
> cpanel stat generation cause thet nginx makes a lot of reload to grab new > file descriptor... no issue on that Even though this is off-topic - if you issue a lot of reloads during cPanel stat generation, your hooks are configured wrong, since Apache in cPanel only reloads *once* during the w

Re: Memory issue

2017-04-06 Thread JohnCarne
Thanks for info, Anoop will read this, he is subscribed Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273274,273458#msg-273458 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Memory issue

2017-04-06 Thread Valentin V. Bartenev
On Thursday 06 April 2017 11:32:45 JohnCarne wrote: > cpanel stat generation cause thet nginx makes a lot of reload to grab new > file descriptor... no issue on that > [..] JFYI, reloading nginx isn't required to reopen log files. See for details: http://nginx.org/en/docs/control.html#logs wbr

Re: Memory issue

2017-04-06 Thread JohnCarne
cpanel stat generation cause thet nginx makes a lot of reload to grab new file descriptor... no issue on that Issue is nginx, I show you situation now with 2.58% used for 1 work, which is same value for others, but gloably, nginx uses now 2.58%, this number is increasing slowly at the rythm of ngi

Re: Memory issue

2017-04-06 Thread Maxim Dounin
Hello! On Wed, Apr 05, 2017 at 09:32:41PM -0400, JohnCarne wrote: > We described it properly when opening ticket, I reformulate : > > Usually, 1 nginx worker process consumes 1.16-2% of RAM maximum on this > server, and it remain stable. > For some days after nginx upgrades, every overnight, dur

Re: Checking multiple caches before forwarding request to upstream

2017-04-06 Thread sachin.she...@gmail.com
Thanks, I guess actual proxying is the only way out. I will try it out. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273446,273454#msg-273454 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Checking multiple caches before forwarding request to upstream

2017-04-06 Thread Maxim Dounin
Hello! On Thu, Apr 06, 2017 at 06:45:23AM -0400, sachin.she...@gmail.com wrote: > Hi, > > We want to define multiple caches based on certain request headers (time > stamp) so that we can put files modified in last 10 days on SSDs, last 30 > days on HDDs and so on. I understand that we could use

Re: No referrer header on leacher's site !!

2017-04-06 Thread c0nw0nk
Dmitry S. Polyakov Wrote: --- > On Thu, Apr 6, 2017, 10:50 shahzaib mushtaq > wrote: > > > >>With the controls sites have over the referrer header, it's not > very > > effective as an access control mechanism. You can use something like > > http

Re: No referrer header on leacher's site !!

2017-04-06 Thread Dmitry S. Polyakov
On Thu, Apr 6, 2017, 10:50 shahzaib mushtaq wrote: > >>With the controls sites have over the referrer header, it's not very > effective as an access control mechanism. You can use something like > http://nginx.org/en/docs/http/ngx_http_secure_link_module.html > instead. > > We're also using Nginx

Re: No referrer header on leacher's site !!

2017-04-06 Thread c0nw0nk
Hello There, I had this same issue and fixed it by the following method. For example in HTML : That is what your media stream link would look like. But if you use JavaScript like the following example : window.onload = MediaReplacement() function MediaReplacement() { var _video = "/file.mp4?

Checking multiple caches before forwarding request to upstream

2017-04-06 Thread sachin.she...@gmail.com
Hi, We want to define multiple caches based on certain request headers (time stamp) so that we can put files modified in last 10 days on SSDs, last 30 days on HDDs and so on. I understand that we could use map feature to pick a cache dynamically which is good and works for us. But when serving a

Re: Memory issue

2017-04-06 Thread Anoop Alias
If a module is dynamic loadable has issue and if we do not load the module , will it still cause the error ? In the case above , ModSecurity-nginx was compiled as a dynamic module and not loaded . On Thu, Apr 6, 2017 at 3:31 PM, JohnCarne wrote: > I let dev Anoop answer to you... he has a clue

Re: Memory issue

2017-04-06 Thread JohnCarne
I let dev Anoop answer to you... he has a clue about the issue : https://github.com/SpiderLabs/ModSecurity-nginx/issues/45 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273274,273444#msg-273444 ___ nginx mailing list nginx@nginx.org http:/

Re: Memory issue

2017-04-06 Thread Aleksandar Lazic
Am 06-04-2017 07:14, schrieb JohnCarne: It looks like i don't speak english properly to be understood, others will open a thread on this issue, and may be explain better Well how about to remove the additionally modules and watch if the memory issue still exists. ### --add-dynamic-module=

Re: No referrer header on leacher's site !!

2017-04-06 Thread shahzaib mushtaq
>>With the controls sites have over the referrer header, it's not very effective as an access control mechanism. You can use something like http://nginx.org/en/docs/http/ngx_http_secure_link_module.html instead. We're also using Nginx secure link module based on HASH + expiry but somehow this secu

Re: Content mismatch random error !!

2017-04-06 Thread shahzaib mushtaq
Hi, Anyone ? Regards. On Wed, Apr 5, 2017 at 4:13 PM, shahzaib mushtaq wrote: > Hi, > > Sometimes we encounter Content mismatch error in browser on website & > refreshing the page fix this issue. The full error is : > http://prntscr.com/esp3jr > > Here is nginx.conf file : https://pastebin.com

Re: Websocket security

2017-04-06 Thread mex
Hello christian, naxsi-contributor first bad news first: naxsi wouldnt work on websockets. Any other security for websockets you have to implement yourself. list of usefull reads: - https://devcenter.heroku.com/articles/websocket-security - https://security.stackexchange.com/questions/48378/

Re: proxy_cache_background_update after cache expiry

2017-04-06 Thread IgorR
thank you Maxim, the resourse was saved to cache but was quickly expiring in the browser causing a Cache-Control: no-cache header to be sent. Sending something like Cache-Control: public,max-age=15,s-maxage=240;must-revalidate,stale-while-revalidate=240 together with Last-Modified/ETag from t