Bytes sent to upstream

2018-03-27 Thread Pablo Fischer
Hello, Seems like the upstream_bytes_sent variable only exists for the stream module and not for the http_upstream. Is there a way (via a variable would be better) to know the bytes that nginx has sent to upstream? Thanks! -- Pablo ___ nginx mailing l

Re: How to set a conditional Content-Security-Policy?

2018-03-27 Thread hal469
> There are "if" constructs in nginx, see http://nginx.org/r/if. Well I'll be darned. I'd thought "if was evil". Thx. > On the other hand, if you want to set CSP depending on the client > IP address, it might be better idea to use "geo" instead, e.g.: > > geo $csp { > default "default

Re: How to set a conditional Content-Security-Policy?

2018-03-27 Thread Maxim Dounin
Hello! On Tue, Mar 27, 2018 at 09:50:14AM -0700, hal...@xsmail.com wrote: > For my nginx server, I set a CSP header > > set $CSP ''; > set $CSP "${CSP}default-src 'self';"; > set $CSP "${CSP}script-src 'self';"; > add_header Content-Security-Policy $CSP; > > For a webapp, using Symfony, th

How to set a conditional Content-Security-Policy?

2018-03-27 Thread hal469
For my nginx server, I set a CSP header set $CSP ''; set $CSP "${CSP}default-src 'self';"; set $CSP "${CSP}script-src 'self';"; add_header Content-Security-Policy $CSP; For a webapp, using Symfony, the developer UI injects inline script for display of a "Debug Toolbar" It's access-blocked

RE: Nginx throttling issue?

2018-03-27 Thread John Melom
Maxim, Thank you for your reply. I will look to see if "netstat -s" detects any listen queue overflows. John -Original Message- From: nginx [mailto:nginx-boun...@nginx.org] On Behalf Of Maxim Dounin Sent: Tuesday, March 27, 2018 6:55 AM To: nginx@nginx.org Subject: Re: Nginx throttlin

RE: Nginx throttling issue?

2018-03-27 Thread John Melom
Peter, Thanks for your reply. What I’d really like is to understand how to tune nginx to avoid the delays when I run my tests. I am comfortable with the overly optimistic results from my current “closed model” test design. Once I determine my system’s throughput limits I will introduce signi

Re: SSL Client Certificate Validation

2018-03-27 Thread dhallam
Thank you. Please accept my apologies for not spotting that in the documentation. Many thanks. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,279204,279206#msg-279206 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/l

Re: SSL Client Certificate Validation

2018-03-27 Thread Maxim Dounin
Hello! On Tue, Mar 27, 2018 at 08:37:11AM -0400, dhallam wrote: > I'm running nginx version: nginx/1.11.5 (nginx-plus-r11). I am trying to > connect a tcp client (with client cert) over SSL to nginx, where the SSL > will be validated and terminated, and then onto the upsteam server in the > clear

SSL Client Certificate Validation

2018-03-27 Thread dhallam
Hi, I'm running nginx version: nginx/1.11.5 (nginx-plus-r11). I am trying to connect a tcp client (with client cert) over SSL to nginx, where the SSL will be validated and terminated, and then onto the upsteam server in the clear. I have the following configuration: stream { upstream ups

Re: Nginx throttling issue?

2018-03-27 Thread Maxim Dounin
Hello! On Mon, Mar 26, 2018 at 08:21:27PM +, John Melom wrote: > I am load testing our system using Jmeter as a load generator. > We execute a script consisting of an https request executing in > a loop. The loop does not contain a think time, since at this > point I am not trying to emu