Maxim -
You were pretty much entirely correct here - although it was actually the
firewall (which sits logically between the reverse proxies and the
upstreams) which wasn't removing state from the connection table quickly
enough. Following the advice here
https://www.nginx.com/blog/overcoming-ep
> On 5 Nov 2020, at 22:18, meniem wrote:
>
> I'm trying to setup Nginx reserve proxy which redirect to a specific host
> that requires certificate for proper functionality. But I get this error
> when I hit the endpoint from the browser:
>
>
>2020/11/05 19:55:21 [error] 6334#6334: *111317
Currently with auth_request I can set an expiration, but I also need to
check to see if a user has been manually disabled before that expiration
time.
Is there a way to force auth_request to be called every time? Currently if
it is successful it doesn't hit that endpoint again.
-Jonathan
___
I'm trying to setup Nginx reserve proxy which redirect to a specific host
that requires certificate for proper functionality. But I get this error
when I hit the endpoint from the browser:
2020/11/05 19:55:21 [error] 6334#6334: *111317 SSL_do_handshake()
failed (SSL: error:14094418:SSL r