Re: DTLS patches

2018-02-21 Thread Wang Shanker
> 在 2018年2月21日,23:34,Vladimir Homutov 写道: > >> On Wed, Feb 21, 2018 at 10:44:00PM +0800, Wang Shanker wrote: >> Hi, >> >> I noticed that you have introduced `ngx_event_udp_accept()`, which can >> create a separate socket for receiving datagrams from a specific client. >> I understand that it i

Re: DTLS patches

2018-02-21 Thread Vladimir Homutov
On Wed, Feb 21, 2018 at 10:44:00PM +0800, Wang Shanker wrote: > Hi, > > I noticed that you have introduced `ngx_event_udp_accept()`, which can > create a separate socket for receiving datagrams from a specific client. > I understand that it is necessary for DTLS servers. However I wonder > why it i

Re: DTLS patches

2018-02-21 Thread Wang Shanker
Hi, I noticed that you have introduced `ngx_event_udp_accept()`, which can create a separate socket for receiving datagrams from a specific client. I understand that it is necessary for DTLS servers. However I wonder why it is also called for normal udp servers. For udp servers listening on a

Re: DTLS patches

2018-02-21 Thread Wang Shanker
Hi, of course. I'm implementing RFC8094, which is for transmitting dns queries through DTLS. Nginx is used for offloading DTLS encryption and the software behind nginx is bind9. Cheers, Miao Wang > 在 2018年02月21日,22:12,Vladimir Homutov 写道: > > On Wed, Feb 21, 2018 at 08:47:37AM -0500, shankerwa

Re: DTLS patches

2018-02-21 Thread Vladimir Homutov
On Wed, Feb 21, 2018 at 08:47:37AM -0500, shankerwangmiao wrote: > > I have tested this patch in my environment. Before the patch is applied, > `tcp_nodelay off` needs to be placed in every `server` clause with DTLS > enabled to work the problem around. > Hello, can you please elaborate about your

Re: DTLS patches

2018-02-21 Thread shankerwangmiao
Vladimir Homutov Wrote: --- > On Wed, Feb 21, 2018 at 12:18:27PM +0800, Wang Shanker wrote: > > Hi, Vladimir > > > > `ngx_stream_ssl_init_connection` trys to set tcp_nodelay on the > given connection. > > The following patch adds a test for the ty

Re: DTLS patches

2018-02-21 Thread Vladimir Homutov
On Wed, Feb 21, 2018 at 12:18:27PM +0800, Wang Shanker wrote: > Hi, Vladimir > > `ngx_stream_ssl_init_connection` trys to set tcp_nodelay on the given > connection. > The following patch adds a test for the type of connection before set. > > Cheers, > > Miao Wang > > diff --git a/src/stream/ngx_st

ngx_http_geo_module vs allow/deny performance

2018-02-21 Thread beatnut
Hello all, What is the best approach in relation to performance when i want to block a fiew hundrets or a fiew thousands of ip addresses ? I ofted read that ngx_http_geo_module is better for many ip addresses. What it depends on? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278699,

Re: Mail Proxy for two domains nehind NAT

2018-02-21 Thread entpneur
Thanks Maxim, how should I put all in one server block because I thought the logic will be as follow: mail { auth_http127.0.0.1/auth.php; imap_capabilities"IMAP4rev1" "UIDPLUS"; server { listen 0.0.0.0:143;

Re: Optimizing nginx mail proxy

2018-02-21 Thread Azusa Taroura
Hello! The "request" means send mail request on the SMTP/SMTPS connection. The "performance result" means the speed per minutes for the mail sending. So you're right about the following point. > Most critical parts from > performance point of view are your auth_http backend and your SMTP > ba

Re: Optimizing nginx mail proxy

2018-02-21 Thread Azusa Taroura
Thank you for your reply! I would like to authenticate each connection. If I use Postfix for mail proxy, it authenticates each e-mail not for each connection. alexsamad Wrote: --- > Silly question why not use postfix for this ? > > > On 20 F

Re: What kind of problems will happen to nginx when updated from centos 6 to 7 ?

2018-02-21 Thread mslee
I was short of explanation. I am testing as you say. But I want to know the problem in advance when it comes to providing services to actual users and when not. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278691,278693#msg-278693 ___ ngi