Re: Is this an attack or a normal request?

2020-08-25 Thread Jeff Dyke
I've seen the rest of this thread, and there are many good ideas, fail2ban is great, i actually use it with wazuh. The best security measure i ever made with wordpress is changing the name of the /admin/login.php and disabling or at least access listing the api. If no one needs api access, shut

Re: Cache Volume utilized at around 50 % with proxy_cache_min_uses

2020-08-25 Thread anish10dec
> Given the above, I see two possible reasons why the cache volume > is only filled at 50%: > > 1. You've run out of keys_zone size. > > 2. You've run out of resources requested frequent enough to be > cached with proxy_cache_min_uses set to 2. > > It should be easy enough to find out what hap

Re: Cache Volume utilized at around 50 % with proxy_cache_min_uses

2020-08-25 Thread Maxim Dounin
Hello! On Tue, Aug 25, 2020 at 07:41:43AM -0400, anish10dec wrote: > With use of proxy_cache_min_uses volume of cache is getting settled up at > around 50% utilization. > No matter what is the volume allocated in max_size its not filling up > further beyond 50%. > If the proxy_cache_min_uses is

Re: Connection timeout on SSL with shared hosting

2020-08-25 Thread nathanpgibson
Turned out there was an INPUT DROP rule in iptables (but not in ip6tables), although I am using ufw as a firewall. Now https works and my nginx redirects are functioning as expected! Posted at Nginx Forum: https://forum.nginx.org/read.php?2,289099,289186#msg-289186 __

Cache Volume utilized at around 50 % with proxy_cache_min_uses

2020-08-25 Thread anish10dec
With use of proxy_cache_min_uses volume of cache is getting settled up at around 50% utilization. No matter what is the volume allocated in max_size its not filling up further beyond 50%. If the proxy_cache_min_uses is removed the cache gets filled up with max_size allocated volume. No of files i

Re: Connection timeout on SSL with shared hosting

2020-08-25 Thread nathanpgibson
Thanks so much, Francis Daly! This is a huge help in isolating the problem. Based on the nginx access log, IPv6 requests to port 443 are getting to nginx but IPv4 requests to port 443 are not. But they are getting to tcpdump. All I see there is a bunch of packets with the tcpflag [S]. I take it t