Re: Strange behavior on proxy cache at high load spike

2020-05-04 Thread J.R.
> After 2minutes response 'stabilizes' with correct size (in this example > 1526025). Problem is also amplified due clients validate response and retry > progressively if corrupted. What is the response your upstream is sending back? If the 'corrupted' data is still a 200, then nginx will cache th

Re: CHACHA20-POLY1305 Server Preference NOK with tlsv1.3

2020-05-04 Thread Maxim Dounin
Hello! On Mon, May 04, 2020 at 08:10:38PM +0200, Vincent Blondel wrote: > I just copy/pasted/replaced the content of my openssl.conf with the > proposal in this mail ... still OK with tslv1.2 and NOK with tlsv1.3 ... > > openssl is up to date and seems working fine ... Some things to consider:

Strange behavior on proxy cache at high load spike

2020-05-04 Thread abr3
Hi, this bugs me for some time now. I have nginx 1.16.0 configured as following on proxy cache: proxy_cache_path /dev/shm/nginx_cache levels=1:2 keys_zone=proxy:1024m max_size=1024m inactive=60m; proxy_temp_path/dev/shm/nginx_proxy_tmp; proxy_cache_use_stale updating; pr

Re: CHACHA20-POLY1305 Server Preference NOK with tlsv1.3

2020-05-04 Thread Vincent Blondel
I just copy/pasted/replaced the content of my openssl.conf with the proposal in this mail ... still OK with tslv1.2 and NOK with tlsv1.3 ... openssl is up to date and seems working fine ... $ openssl version OpenSSL 1.1.1f 31 Mar 2020 $ openssl ciphers -v TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any

Re: CHACHA20-POLY1305 Server Preference NOK with tlsv1.3

2020-05-04 Thread Maxim Dounin
Hello! On Mon, May 04, 2020 at 07:49:26AM +0200, Vincent Blondel wrote: > thanks for the update Maxim but unfortunately still nok ... > > my openssl.conf > > [default_conf] > ssl_conf = ssl_sect > [ssl_sect] > system_default = system_default_sect > [system_default_sect] > Options = ServerPrefer

Needing assistance with Nginx 1.17.9 Windows install

2020-05-04 Thread Bryan Townsend
Hello. I am very new to Nginx and need some assistance with my config. This is on a windows server and will be listening on 80,18080, 443 and 18081. Traffic comes in to www.myserver.com and is passed to my Windows Nginx server by the firewall. I need to be able to listen and pass traffic on bot

Re: Nginx 1.19

2020-05-04 Thread Maxim Konovalov
On 04.05.2020 17:45, Martin Grigorov wrote: > Hi Maxim, > > On Mon, May 4, 2020 at 12:54 PM Maxim Konovalov > wrote: > > Hi Antoine, > > On 04.05.2020 11:26, Flinou wrote: > > Hello, > > > > I know that, usually, mainline versions are supposed to be >

Re: Nginx 1.19

2020-05-04 Thread Martin Grigorov
Hi Maxim, On Mon, May 4, 2020 at 12:54 PM Maxim Konovalov wrote: > Hi Antoine, > > On 04.05.2020 11:26, Flinou wrote: > > Hello, > > > > I know that, usually, mainline versions are supposed to be released the > > month after the stable one. However, based on > > https://trac.nginx.org/nginx/road

Re: Nginx 1.19

2020-05-04 Thread Maxim Konovalov
Hi Antoine, On 04.05.2020 11:26, Flinou wrote: > Hello, > > I know that, usually, mainline versions are supposed to be released the > month after the stable one. However, based on > https://trac.nginx.org/nginx/roadmap, Nginx 1.19 is planned for 04/30/2021. > Is that normal ? > Yes, we are plann

SMTP proxy and authentication on backend

2020-05-04 Thread Fabio Grasso
Hello there, I'm new to this mailing list, so hi everybody ;-) I'm implementing a mail proxy based on nginx. I wrote an authentication backend in LUA and it works fine. With IMAP I've no problem, everything works fine. With SMTP I'm facing the well noted "limitation" about the authentication on

Re: Nginx 1.19

2020-05-04 Thread Mathew Heard
Sad but probably due to HTTP/3, a long anticipated feature that's anything but simple. On Mon, 4 May 2020 at 18:27, Flinou wrote: > Hello, > > I know that, usually, mainline versions are supposed to be released the > month after the stable one. However, based on > https://trac.nginx.org/nginx/ro

Nginx 1.19

2020-05-04 Thread Flinou
Hello, I know that, usually, mainline versions are supposed to be released the month after the stable one. However, based on https://trac.nginx.org/nginx/roadmap, Nginx 1.19 is planned for 04/30/2021. Is that normal ? Thank you in advance, Antoine Posted at Nginx Forum: https://forum.nginx.org