Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread Matthias Fechner
Am 01.08.2017 um 23:51 schrieb shahzaib mushtaq: > Following ciphers i am using : > > server { > listen 443 http2; > ssl on; > ssl_protocols TLSv1 TLSv1.1 TLSv1.2; > ssl_ciphers > 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384

答复: Building Nginx from source for Windows

2017-08-01 Thread 四弦
Hello, The binary program built for Linux can't run directly on Windows.And the source of nginx is called a 'tarball',whose file structure is fit for Linux.To build it,you need Linux build tool chains. The best solution is Cygwin,which is a program that allow you to use POSIX programs on Windo

Building Nginx from source for Windows

2017-08-01 Thread David Woodstuck
I have two questions: 1. How do I build Nginx from source for Windows? 2. If I can build Nginx from source for one Window OS, can I copy Nginx into another Windows? 3. I have already build Nginx from for Linux because I need this module - https://github.com/yaoweibin/ngx_http_substitutions_filte

Re: nginx limit_req and limit_conn not working to prevent DoS attack

2017-08-01 Thread Gary Sellani
The trouble is nginx does a fair amount of work before blocking the IP address, unless things have changed. My recollection is it parses the whole request. Obviously it doesn't send any data. So you are better off blocking with the firewall. You do need to know your audience. Something related

Nginx installation from source for Windows

2017-08-01 Thread David Woodstuck
I have two questions: 1. How do I install Nginx from source for Windows? 2. If I can install Nginx from source for one Window OS, can I copy Nginx into another Windows? Thanks, David ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mai

Re: nginx limit_req and limit_conn not working to prevent DoS attack

2017-08-01 Thread Phani Sreenivasa Prasad
Yes. Firewall would be another option. But before to that, i would like to try out all options at nginx level if one or other would resolve the issue at nginx layer itself. cant we put accept() filters? or how the deny option works? can we use deny option to not to accept any new connections if n

Re: nginx limit_req and limit_conn not working to prevent DoS attack

2017-08-01 Thread Gary Sellani
I don't know about iptables, but you can limit port 80 and 443 with ipfw. I run mine at 10 per IP. I've had corporations behind NAT trigger lesser limits. My point being you don't have to parse the log (swatch). 

Re: nginx limit_req and limit_conn not working to prevent DoS attack

2017-08-01 Thread Anoop Alias
You can use an external tool to parse Nginx error log and block the IP in iptables/netfilter On Wed, Aug 2, 2017 at 7:43 AM, Phani Sreenivasa Prasad < nginx-fo...@forum.nginx.org> wrote: > I assume it would help dropping connections . since we are setting rate > limit per ip and any client IP whi

Re: nginx limit_req and limit_conn not working to prevent DoS attack

2017-08-01 Thread Phani Sreenivasa Prasad
I assume it would help dropping connections . since we are setting rate limit per ip and any client IP which is suspicious by sending requests in bulk(lets say 1 connections/requests), it makes sense to not to accept connections/requests from that IP. Thoughts ?? Posted at Nginx Forum: https

Re: nginx limit_req and limit_conn not working to prevent DoS attack

2017-08-01 Thread Zhang Chao
Hi! I don’t think just drop the connection is a good idea, client will never know what happens on the server end. However, the code 444 may help you, nginx just close the connection in this case. On 2 August 2017 at 09:30:01, Phani Sreenivasa Prasad ( nginx-fo...@forum.nginx.org) wrote: Hi All,

nginx limit_req and limit_conn not working to prevent DoS attack

2017-08-01 Thread Phani Sreenivasa Prasad
Hi All, I am using nginx in our products. When I run goldeneye DoS attack script against nginx, it is not able to defend against the attack and normal users getting impacted. python goldeneye.py http:// -w 5 -s 1 -m random -d we are using below nginx limit_req options but didnt help. The n

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread Rainer Duffner
> Am 01.08.2017 um 23:51 schrieb shahzaib mushtaq : > > What do you think should i change it to ? What does SSL-Labs say to it? Or htbridge? Rainer___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread shahzaib mushtaq
Hi, Following ciphers i am using : server { listen 443 http2; ssl on; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RS

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread spectre inc
The current workaround is to change the SSL Cipher Suite On Tue, Aug 1, 2017 at 5:37 PM shahzaib mushtaq wrote: > Hi, > > What fix do you suggest ? > > Shahzaib > > > > Vir

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread shahzaib mushtaq
Hi, What fix do you suggest ? Shahzaib Virus-free. www.avast.com

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread spectre inc
I had the same problem when seeing a site with https is that's the case then it has to do with the ssl and there is work around let me know and I'll tell you what to fix Sent from my iPhone > On Aug 1, 2017, at 2:30 PM, shahzaib mushtaq wrote: > > Hi, > > This error is mostly coming on goog

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread spectre inc
Are you useing ssl? On Tue, Aug 1, 2017 at 4:31 PM shahzaib mushtaq wrote: > Hi, > > This error is mostly coming on google chrome. :( > > > Shahzaib > > On Tue, Aug 1, 2017 at 8:51 PM, Etienne Robillard > wrote: > >> Hi, >> >> i think mozilla don't even support SPDY protocol anymore. The replac

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread shahzaib mushtaq
Hi, This error is mostly coming on google chrome. :( Shahzaib On Tue, Aug 1, 2017 at 8:51 PM, Etienne Robillard wrote: > Hi, > > i think mozilla don't even support SPDY protocol anymore. The replacement > is HTTP2. > Best regards, > > E > > Le 2017-08-01 à 09:50, shahzaib mushtaq a écrit : > >

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread Etienne Robillard
Hi, i think mozilla don't even support SPDY protocol anymore. The replacement is HTTP2. Best regards, E Le 2017-08-01 à 09:50, shahzaib mushtaq a écrit : Hi, Thanks for the answer, the browser is google chrome. Googling not helping much we've tried various solutions but all in vain. :-(

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread shahzaib mushtaq
Hi, Thanks for the answer, the browser is google chrome. Googling not helping much we've tried various solutions but all in vain. :-( http://prntscr.com/g2zqo9 Also the OS is FreeBSD. Regards. Shahzaib On Tue, Aug 1, 2017 at 5:39 PM, Francis Daly wrote: > On Tue, Aug 01, 2017 at 01:47:36PM +

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread Francis Daly
On Tue, Aug 01, 2017 at 01:47:36PM +0500, shahzaib mushtaq wrote: Hi there, > It was working well back in days but there's sudden error which is > preventing our users to play videos in browser. The error is : > > GET > https://domain.com/files/videos/2017/08/01/15015680292fcdf-360.mp4?h=vOilKo_

ERR_SPDY_PROTOCOL_ERROR Nginx !!

2017-08-01 Thread shahzaib mushtaq
Hi, It was working well back in days but there's sudden error which is preventing our users to play videos in browser. The error is : GET https://domain.com/files/videos/2017/08/01/15015680292fcdf-360.mp4?h=vOilKo_cOUft5fViRqIcMg&ttl=1501588832 net::ERR_SPDY_PROTOCOL_ERROR We're unable to find