Re: Large CRL file crashing nginx on reload

2018-07-27 Thread Shaun Tarves
That is exactly the issue. Seeing what the "reload" did to the memory (starting a new worker process) was the culprit. I was thinking the configuration reload should just refresh what's in memory, but it clearly doubles the requirement of memory and must wait until the previous child can stop grace

Re: Large CRL file crashing nginx on reload

2018-07-27 Thread Maxim Dounin
Hello! On Fri, Jul 27, 2018 at 10:56:38AM -0400, Shaun Tarves wrote: > Here are the relevant parts of our configuration: > > worker_processes 1; > pid/var/run/nginx.pid; > events { > worker_connections 512; > } > http { > server { > listen xx.xx.xx.xx:443 default_server ssl;

Re: Large CRL file crashing nginx on reload

2018-07-27 Thread Shaun Tarves
Here are the relevant parts of our configuration: worker_processes 1; pid/var/run/nginx.pid; events { worker_connections 512; } http { server { listen xx.xx.xx.xx:443 default_server ssl; ssl on; ssl_certificate /opt/xxx.pem; ssl_certificate_key /opt/xxx.key ssl_

secure/hide "api.anothersite.com" from public and only allow "mysite.com" to access it via 127.0.0.1:50010 internally

2018-07-27 Thread Dan Tullis via nginx
FYI - I believe I figured it out. Suggestions welcomed. Here is what I did: On the frontend: Instead of doing GETs and POSTs to "api.anothersite.com/api/messages" I now do the call to "mysite.com/api/messages" On the backend: added an additional "location" similar to:  location /api/messages {