Re: Re: How to control the total requests in Ngnix

I sent the test requests from only one client. 童树山 咪咕视讯科技有限公司 研发部 Mobile：13818663262 Telephone：021-51856688(81275) Email：tongshus...@migu.cn From: Gary Date: 2017-12-01 12:17 To: nginx Subject: Re: How to control the total requests in Ngnix I thought the rate is per IP address, not for whole

Re: Re: How to control the total requests in Ngnix

I sent the test requests from one fron only 1 server. 童树山 咪咕视讯科技有限公司 研发部 Mobile：13818663262 Telephone：021-51856688(81275) Email：tongshus...@migu.cn From: Gary Date: 2017-12-01 12:17 To: nginx Subject: Re: How to control the total requests in Ngnix I thought the rate is per IP address, not for

Re: How to control the total requests in Ngnix

I thought the rate is per IP address, not for whole server. 

Re: Re: How to control the total requests in Ngnix

I configured as below: limit_req_zone "all" zone=all:100m rate=2000r/s; limit_req zone=all burst=100 nodelay; but when testing,I use tool to send the request at: Qps:486.1(not reach 2000) I got the many many 503 error,and the error info as below: 2017/12/01 11:08:29 [error] 26592#37196: *15466

Re: Re: How to control the total requests in Ngnix

my website is busier than I think I can handle Tong From: Peter Booth Date: 2017-12-01 06:25 To: nginx Subject: Re: How to control the total requests in Ngnix So what exactly are you trying to protect against? Against “bad people” or “my website is busier than I think I can handle?” Sent from

Re: How to control the total requests in Ngnix

Here is a log of real life IP limiting with a 30 connection limit: 86.184.152.14 British Telecommunications PLC 8.37.235.199 Level 3 Communications Inc. 130.76.186.14 The Boeing Company security.5.bz2:Nov 29 20:50:53 theranch kernel: ipfw: 5005 drop session type 40 86.184.152.14 58714 -> myip 80,

Re: How to control the total requests in Ngnix

So what exactly are you trying to protect against? Against “bad people” or “my website is busier than I think I can handle?” Sent from my iPhone > On Nov 30, 2017, at 6:52 AM, "tongshus...@migu.cn" > wrote: > > a limit of two connections per address is just a example. > What does 2000 reque

Re: Return 408 to ELB

Hello! On Thu, Nov 30, 2017 at 02:02:27PM -0500, reverson wrote: > I am running into an issue, that I believe was documented here > (https://trac.nginx.org/nginx/ticket/1005). > > Essentially, I am seeing alerts as our ELBs are sending 504s back to clients > with no backend information attached,

Return 408 to ELB

I am running into an issue, that I believe was documented here (https://trac.nginx.org/nginx/ticket/1005). Essentially, I am seeing alerts as our ELBs are sending 504s back to clients with no backend information attached, but when I look through our nginx request logs, I see that we "should have"

Re: 回复: How to control the total requests in Ngnix

It would be nice if all the requests were from different IP addresses. In real life, particularly with IPV4, you will get multiple connections from single IP addresses since they sit behind a nat router. I do the connection limiting in the firewall with Nginx limiting as a backup. This makes it ea

Re: Re: How to control the total requests in Ngnix

On Thu, Nov 30, 2017 at 08:04:41PM +0800, tongshus...@migu.cn wrote: Hi there, > what is the same "key " for all requests from different client ips for > limit_conn_zone/limit_req_zone? I have no idea on this. Any $variable might be different in different connections. Any fixed string will not

Re: Multiple Cache Manager Processes or Threads

Hello! On Thu, Nov 30, 2017 at 12:20:19PM -0500, traquila wrote: > I have an issue with the cache manager and the way I use it. > When I configure 2 different caches zones, one very huge and one very fast, > the cache manager can't delete files quickly enough and lead to a partition > full. > >

Re: Overridable header values (with map?)

On Thu, Nov 30, 2017 at 9:45 AM, Maxim Dounin wrote: > Hello! > Hi! The error in question will only appear if you don't have the > variable defined at all, that is, it is not used anywhere in your > configuration. Using it at least somewhere will resolve the > error. That is, just add somethi

Plan to support proxy protocol v2?

Hi, The aws elbv2 just works with proxy protocol v2. Is there any plan to support this version in nginx soon? regards Posted at Nginx Forum: https://forum.nginx.org/read.php?2,277599,277599#msg-277599 ___ nginx mailing list nginx@nginx.org http://mai

Re: Multiple Cache Manager Processes or Threads

Sorry, I gave wrong values: On the beginning, ram cache is correctly purge around 300GB (+/- Input bandwidth*10sec) , but when the hdd cache begins to fill up, ram cache growing over 320GB. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,277597,277598#msg-277598 __

Multiple Cache Manager Processes or Threads

Hello, I have an issue with the cache manager and the way I use it. When I configure 2 different caches zones, one very huge and one very fast, the cache manager can't delete files quickly enough and lead to a partition full. For example: proxy_cache_path /mnt/hdd/cache levels=1:2:2 keys_zone=ca

Re: Overridable header values (with map?)

Hello! On Thu, Nov 30, 2017 at 12:28:24AM -0500, Brandon Mintern wrote: [...] > This was fine, but I recently came across an interesting use of map > that I thought I could generalize > to simplify this pattern. My idea was to do something like: > > # h

Re: Re: How to control the total requests in Ngnix

Francis, what is the same "key " for all requests from different client ips for limit_conn_zone/limit_req_zone? I have no idea on this. Tong From: Francis Daly Date: 2017-11-30 18:17 To: nginx Subject: Re: How to control the total requests in Ngnix On Thu, Nov 30, 2017 at 05:12:18PM +0800, to

Re: Re: How to control the total requests in Ngnix

a limit of two connections per address is just a example. What does 2000 requests mean? Is that per second? yes，it's QPS. 童树山 咪咕视讯科技有限公司 研发部 Mobile：13818663262 Telephone：021-51856688(81275) Email：tongshus...@migu.cn 发件人： Gary 发送时间： 2017-11-30 17:44 收件人： nginx 主题： Re: 回复: How to control th

Re: Moving SSL termination to the edge increased the instance of 502 errors

Since the upstream now has changed tcp ports - do check if it is a firewall/network buffer etc issue too on the new port. On Wed, Nov 29, 2017 at 11:42 PM, Peter Booth wrote: > There are many things that *could* cause what you’re seeing - say at least > eight. You might be lucky and guess the ri

Re: How to control the total requests in Ngnix

On Thu, Nov 30, 2017 at 05:12:18PM +0800, tongshus...@migu.cn wrote: Hi there, > I want to use ngnix to protect my system,to allow max 2000 requests sent to > my service(http location). > The below configs are only for per client ip,not for the total requests > control. > ##method 1###

Re: 回复: How to control the total requests in Ngnix

I think a limit of two connections per address is too low. I know that tip pages suggest a low limit in so-called anti-DDOS (really just flood protection). Some large carriers can generate 30+ connections per IP, probably because they lack sufficient IPV4 address space for their millions of users.

回复: How to control the total requests in Ngnix

Additional: the total requests will be sent from different client ips. Tong 发件人： tongshus...@migu.cn 发送时间： 2017-11-30 17:12 收件人： nginx 主题： How to control the total requests in Ngnix Hi guys, I want to use ngnix to protect my system,to allow max 2000 requests sent to my service(http location)

How to control the total requests in Ngnix

Hi guys, I want to use ngnix to protect my system,to allow max 2000 requests sent to my service(http location). The below configs are only for per client ip,not for the total requests control. ##method 1## limit_conn_zone $binary_remote_addr zone=addr:10m; server { location /mylo