Re: Way to deny all requests if any upstream is down

You can do it if all upstream servers are down but I don't think that any is possible. Just have a backup server that replies with a 502 to any url. I did something similar recently but you need to have a backup server that can take care of all methods, get, post etc. /Michael Salmon SE KI34 06

Re: How can I set a maximum limit for gzip module?

There is no any directive like “gzip_max_length” so far. By the way, nginx compresses the body by “chunk”, so one “chunk” is an independtent compressed data. On 27 April 2017 at 13:27:42, t.nishiyori (nginx-fo...@forum.nginx.org) wrote: Hello, I'm using nginx-1.11.2 for proxy server with gzip-m

How can I set a maximum limit for gzip module?

Hello, I'm using nginx-1.11.2 for proxy server with gzip-module. I hope to use such like a "gzip_max_length" directive in ngx_http_gzip_module. Because some upstream response's sizes exceeded the settings of gzip_buffers. (But there were no error... These are strange things for me...) I can chan

Re: $upstream_addr returning "-" only on requests with "del" in them

And the usual debug information I just found on https://www.nginx.com/resources/wiki/start/topics/tutorials/debugging/ that I should provide (very sorry for doing that in 3 parts, won't happen again): nginx -V nginx version: nginx/1.10.0 (Ubuntu) built with OpenSSL 1.0.2g 1 Mar 2016 TLS SNI

Re: $upstream_addr returning "-" only on requests with "del" in them

Sometimes writing your thought helps... Apparently something wasn't reporting correctly so far, but using the debug level, I finally end up getting some information. I should mention that the word that seems to provoke this issue is ' del ' (with two spaces around it). If those 3 letters are includ

xslt question

Hi I am using https://gist.github.com/wilhelmy/5a59b8eea26974a468c9 for location /ts/ { #autoindex on; #autoindex_format html; try_files $uri @autoindex; } # need xlst module location @autoindex { autoindex on; autoindex_format xml;

$upstream_addr returning "-" only on requests with "del" in them

Hi guys, I have a problem with some of the requests sent to my Nginx load balancer, which reports (in the access_log configured to show $upstream_addr) that $upstream_addr is equal to "-", but only in a weird case where the post contains the word "del". I'm using Nginx 1.10.0 packaged in Ubuntu 1

Re: how add RewriteRule .* index.php in nginx

On Wed, Apr 26, 2017 at 10:22:20AM -0400, e.htabar wrote: Hi there, > how set add " RewriteRule .* index.php " in nginx.conf for subfolder ? You probably put the config in a suitable location{} block. What config do you have right now that does most of what you want? Do you "return" or "rewrit

Re: Nginx Nodejs Raspberry Pi2 Bad Gateway

On Tue, Apr 25, 2017 at 10:13:19AM -0400, marciokoko wrote: Hi there, I confess that it's a bit confusing to me what exactly you are doing here. Can you create one "curl" command which makes one request, that gives a response that is not what you want to see? If you can show what you expect to

Re: Health checks and reloads

Hi Aditya, On 26/04/2017 23:30, Aditya Umrani wrote: > Hello, > > We are using nginx plus and we use application health-checks. We > want to move to the 'mandatory' parameter which requires that > servers pass the health check before it becomes active. > [...] I'd suggest to approach -plus supp

Health checks and reloads

Hello, We are using nginx plus and we use application health-checks. We want to move to the 'mandatory' parameter which requires that servers pass the health check before it becomes active. Currently, we have a system which reloads all configs (rather than a diff based system which would just onl

critique my config file

I am using Nginx 1.13 and have removed all the "if"s from the config file and would now like someone to analyse it, look at the rewrites, etc if possible. It works fine but seems a bit unorganized and I'm wondering if there are some duplicate things. I have created a bunch of 444 locations to drop

Re: remove if from code

Thanks! I got it to work but had to put my fastcgi stuff inside. location ~ \.php$ { try_files $uri /index.php; # fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock; expires off; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_par

Why does nginx rewrite sending https to http?

Hi, I'm trying to rewrite some route in cloud foundry static buildpack, but whenever I rewrite, the https goes to http. So I add return with / with /login, then it goes to http://server/, even it starts with https://server/login. location /login { return 301 /; <% if ENV["FORCE_HTT

Re: Client certificate authentication error

> openssl x509 -req -in client.csr -out client.crt -signkey client.key -CA > server.crt -CAkey server.key -CAcreateserial -days 365 I think you should be using the CA certificate here, not the server certificate. ___ nginx mailing list nginx@nginx.org ht

Re: UDP reverse proxying for OpenVPN isn't working using Nginx streams

On Wed, Apr 26, 2017 at 09:42:22AM -0400, akb-nginx wrote: > Thanks for your responce. I think I am out of luck then as far as proxying > UDP openvpn is concerned. Any particular reason that Nginx took this > approach instead of how very basic load balancers like "Pen" etc do it. > > I was able to

Passing small request_body to auth_request through a header

I have a small body (less than 512 bytes) that I'd like to pass to auth_request. Since the body is discarded, I've tried passing it through a header with no luck. Is there any way to do this? location = /my_auth { internal; include fastcgi_params; fastcgi_pass un

Re: Client certificate authentication error

There is an incorrect syntax to fix. I have registered p12 certificate and ca certificate in my Firefox browser, but I get "400 Bad Request". ==> I have registered client.p12 and ca.crt file in my Firefox browser, but I get "400 Bad Request". Posted at Nginx Forum: https://forum.nginx.org/read

Client certificate authentication error

Hello. I am trying to implement a client certificate using nginx on Ubuntu 16.04. Firefox browser "400 Bad Request No required SSL certificate was sent "error occurs. To solve the above error, I release everything for the development process and configuration tests. 1. create client certificate f

how add RewriteRule .* index.php in nginx

down vote favorite how set add " RewriteRule .* index.php " in nginx.conf for subfolder ? and dont redirect for root example: https://www.bidbarg.com/ (index.php redirect to none) https://www.bidbarg.com/bimeh/index.php/ (index.php needed) thank you Posted at Nginx Forum: https://forum.nginx.

Way to deny all requests if any upstream is down

Hi All, Is there any way to deny all requests if any upstream servers are down?. Thanks Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273881,273881#msg-273881 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinf

Re: nginx-1.13.0

Hello! On Wed, Apr 26, 2017 at 07:15:13AM +1000, Alex Samad wrote: > On 26 April 2017 at 00:32, Maxim Dounin wrote: > > > > > *) Change: SSL renegotiation is now allowed on backend connections. > > > > What does this mean ? > > > reason I am asking is I would like to setup a site say exa

Re: UDP reverse proxying for OpenVPN isn't working using Nginx streams

Thanks for your responce. I think I am out of luck then as far as proxying UDP openvpn is concerned. Any particular reason that Nginx took this approach instead of how very basic load balancers like "Pen" etc do it. I was able to proxy using simpler tools like pen and nc but a more loaded Nginx fa

Re: UDP reverse proxying for OpenVPN isn't working using Nginx streams

Hi, On Wed, Apr 26, 2017 at 08:32:08AM -0400, akb-nginx wrote: > Hi. > > I was just wondering whether UDP stream proxying on Nginx is in its infacy > or there is something which I am doing wrong. I have this simple config: > > events { worker_connections 1024; } > > worker_processes 1; > err

Re: Blocking all URIs except for one directory

Hello! On Tue, Apr 25, 2017 at 12:50:24PM -0700, Igal @ Lucee.org wrote: > Hello, > > I want to secure a site using the allow/deny directives so that only > allowed networks will be able to access it. There is one "public" > directory, however, that I want to be accessible for everyone. > >

UDP reverse proxying for OpenVPN isn't working using Nginx streams

Hi. I was just wondering whether UDP stream proxying on Nginx is in its infacy or there is something which I am doing wrong. I have this simple config: events { worker_connections 1024; } worker_processes 1; error_log /dev/stderr debug; daemon off; stream { server { listen X.X.X.X:1194 u

Re: N00b - confused ssl

So it sounds like if I want to decrypt incoming traffic and upstream traffic I would put them in the same block like this ? Seems fine. p.s. just if you trust your backend there is in general no need to use proxy_ssl_verifyon; When it’s off (by default) nginx will be fine with whatever cer

Re: N00b - confused ssl

So it sounds like if I want to decrypt incoming traffic and upstream traffic I would put them in the same block like this ? server { ## # This is acting like the server side to decrypt the incoming traffic

Re: nginx-1.13.0

Hello Nginx users, (I forgot to send this email yesterday.) Now available: Nginx 1.13.0 for Windows https://kevinworthington.com/n ginxwin1130 (32-bit and 64-bit versions) These versions are to support legacy users who are already using Cygwin based builds of Nginx. Officially supported native W

Re: remove if from code

Does anyone know how to rewrite this snippet? ## Execute PHP Scripts using FastCGI location ~ \.php(/.*)? { if (!-e $request_filename) { rewrite / /index.php last; } You can use try_files for that ( http://nginx.org/en/docs/http/ngx_http_core_module.html#try_files ) location ~