Re: 10054: An existing connection was forcibly closed by the remote host

2018-07-26 Thread walwong
apply these settings to the proxy: keepalive_requests 500; proxy_http_version 1.1; context: http, server, location Version 1.1 is recommended for use with keepalive connections Posted at Nginx Forum: https://forum.nginx.org/read.php?2,267564,280683#msg-280683

Re: Large CRL file crashing nginx on reload

2018-07-26 Thread Maxim Dounin
Hello! On Thu, Jul 26, 2018 at 04:16:11PM -0400, Shaun Tarves wrote: > We are trying to use nginx to support the DoD PKI infrastructure, which > includes many DoD and contractor CRLs. The combined CRL file is over 350MB > in size, which seems to crash nginx during a reload (at least on Red Hat >

Re: Large CRL file crashing nginx on reload

2018-07-26 Thread Igor A. Ippolitov
Shaun, Can you post a snippet on how you include crl into your configuration and 'ps aux | grep nginx' output, please? The wild guess is that you include the crl several times. And on reload you get twice as many workers as there are usually. You can try moving ssl_crl statement into http{}

Large CRL file crashing nginx on reload

2018-07-26 Thread Shaun Tarves
Hi, We are trying to use nginx to support the DoD PKI infrastructure, which includes many DoD and contractor CRLs. The combined CRL file is over 350MB in size, which seems to crash nginx during a reload (at least on Red Hat 6). Our cert/key/crl set up is valid and working, and when only including

Re: Nginx url decoding URI problem with proxy_pass

2018-07-26 Thread Igor A. Ippolitov
Michael, You can use rewrite. Just catch the host part: >rewrite /image_preview/https://(?[^ :/]/(.*) /$1; >proxy_pass https://$my_host rewrite will encode the URL back again. On 26.07.2018 20:18, Michael Kovacs wrote: Greetings Nginx mailing list! I'm using nginx as an image proxy and am usin

proxy_pass to dyndns address

2018-07-26 Thread basti
Hello, inside a location I have a proxy_pass to a hostname with a dynamic IP for example location ^~ /example/ { proxy_pass https://host1.dyndns.example.com; } getent hosts resolve the right IP. But in via nginx return a 504. When I reload nginx it work until IP is changed. The DNS Serv

secure/hide "api.anothersite.com" from public and only allow "mysite.com" to access it via 127.0.0.1:50010 internally

2018-07-26 Thread Dan Tullis via nginx
I would like to hide a backend API REST server from public view and have it accessed from frontend web server locally/internally. Is this possible? Below are my setup and configs: angular/nodejs frontend app, say it is "mysite.com" running on server at 127.0.0.1:51910 nodejs backend app, say

Nginx url decoding URI problem with proxy_pass

2018-07-26 Thread Michael Kovacs
Greetings Nginx mailing list! I'm using nginx as an image proxy and am using proxy_pass to fetch the image. Unfortunately if that image URL has a space in it the proxy_pass fails. It works fine with any other image. example successful URL: /image_preview/https://somedomain.com/image.jpg example

nginx -> httpd -> mod_jk -> tomcat

2018-07-26 Thread Giacomo Arru - BETA Technologies
Hi everybody, I recently begun using proxy with nginx (same tests were made with haproxy). My needs are to proxy for failover and balancing tomcat: I need to serve lots of users with production app. While I understood that a 100% tomcat AJP1.3 compatibility is achievable with apache httpd