Re: Transient, Load Related Slow response_time / upstream_response_time vs App Server Reported Times

2020-11-05 Thread Jordan von Kluck
Maxim - You were pretty much entirely correct here - although it was actually the firewall (which sits logically between the reverse proxies and the upstreams) which wasn't removing state from the connection table quickly enough. Following the advice here https://www.nginx.com/blog/overcoming-ep

Re: SSL error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca:SSL alert

2020-11-05 Thread Sergey Kandaurov
> On 5 Nov 2020, at 22:18, meniem wrote: > > I'm trying to setup Nginx reserve proxy which redirect to a specific host > that requires certificate for proper functionality. But I get this error > when I hit the endpoint from the browser: > > >2020/11/05 19:55:21 [error] 6334#6334: *111317

How do I call a subrequest on every request?

2020-11-05 Thread Jonathan Morrison
Currently with auth_request I can set an expiration, but I also need to check to see if a user has been manually disabled before that expiration time. Is there a way to force auth_request to be called every time? Currently if it is successful it doesn't hit that endpoint again. -Jonathan ___

SSL error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca:SSL alert

2020-11-05 Thread meniem
I'm trying to setup Nginx reserve proxy which redirect to a specific host that requires certificate for proper functionality. But I get this error when I hit the endpoint from the browser: 2020/11/05 19:55:21 [error] 6334#6334: *111317 SSL_do_handshake() failed (SSL: error:14094418:SSL r