Double RAM usage after Nginx reload

2020-03-13 Thread Christos Chatzaras
Any idea why the "cache manager process" uses double RAM after the reload? System: nginx version: nginx/1.16.1 built with OpenSSL 1.1.1d-freebsd 10 Sep 2019 TLS SNI support enabled configure arguments: --prefix=/usr/local/etc/nginx --with-cc-opt='-I /usr/local/include' --with-ld-opt='-L /usr/l

Re: Problem installing in custom folder when Perl is enabled

2020-03-13 Thread Maxim Dounin
Hello! On Fri, Mar 13, 2020 at 03:12:35PM +0200, Martin Grigorov wrote: > I'm facing the following problem when I try to install Nginx in a custom > folder: [...] > make[1]: Entering directory '/home/ubuntu/hg/nginx/nginx' > cd objs/src/http/modules/perl && make install > make[2]: Entering dire

Re: How to establish secure connection between NGINX <-> https upstream API

2020-03-13 Thread Francis Daly
On Thu, Mar 12, 2020 at 10:47:40PM -0700, satscreate wrote: Hi there, > https://docs.nginx.com/nginx/admin-guide/security-controls/securing-http-traffic-upstream/# >location /upstream { >proxy_pass https://$upstream$request_uri; >proxy_ssl_certificate /etc

Re: Prevent direct access to files but allow download from site

2020-03-13 Thread MAXMAXarena
I managed to solve using cookies, but as you said, it is not secure. Although I have no experience, I managed to bypass the control. Maybe it's not the safest way like I did, in any case it is not recommended to proceed in this way. I have experience with auth_basic, but using the terminal to cre

Problem installing in custom folder when Perl is enabled

2020-03-13 Thread Martin Grigorov
Hello Nginx team, I'm facing the following problem when I try to install Nginx in a custom folder: ... objs/ngx_modules.o \ -ldl -lpthread -lcrypt -lpcre -lssl -lcrypto -ldl -lpthread -lz -lxml2 -lxslt -lexslt -lgd -lGeoIP \ -Wl,-E -fstack-protector-strong -L/usr/local/lib -L/usr/lib/aarch64-linu

Re: upstream SSL certificate does not match "dev_server" while SSL handshaking to upstream

2020-03-13 Thread satscreate
Any Update on this issue? -- Sent from: http://nginx.2469901.n2.nabble.com/ ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Elasticsearch Native Binary Protocol through NGiNX Stream

2020-03-13 Thread galew
Hi, thanks for the answer The problem was the syntax in the Elasticsearch Native Binary Protocol Client, which tried to sniff the configuration behind the proxy. Setting the clientTransportSniff="false" and transport addresses with the right syntax was enough. So this case solved, quilty was Life

upstream SSL certificate does not match "dev_server" while SSL handshaking to upstream

2020-03-13 Thread satscreate
Hi Team, Am trying to establish encrypted communication between NGINX <-> API's (POST, GET) with below configuration. But am facing some ssl handshake issue. *Config:* upstream dev_server { zone dev_server 64k; server dev1.sysmac.com:443; server dev2.sysmac.com:443; server