Performance of Nginx as reverse proxy for Hasura - 7-50x slow

2020-11-12 Thread R. Rajesh Jeba Anbiah
Recently noted that when proxying Hasura for the https support reduces the speed to 7-50x times! More information including tcpdump available in https://github.com/hasura/graphql-engine/discussions/6154 I have not faced noticed any performance issues with other REST APIs. Is it a known issue (p

499 response code for NGINX Proxy App in Cloud Foundry

2020-11-12 Thread praveen
Hi, I'm using nginx as the proxy application deployed in the cloud foundry space which will route the requests to the upstream servers which are behind the Elastic Load Balancer. I noticed that after 3-4 hours, the proxy application in the cloud foundry space is going down and it's logging 499 res

Hide HTTP headers in nginx

2020-11-12 Thread Kaushal Shriyan
Hi, As part of the security audit, I have set server_tokens off; in /etc/nginx/nginx.conf. Is there a way to hide Server: nginx, X-Powered-By and X-Generator? To hide the below HTTP headers Server: nginx > X-Powered-By: PHP/7.2.34 > X-Generator: Drupal 8 (https://www.drupal.org) curl -i -H Hos

Re: Forbid web.config page from the browser as in https://mydomain.com/web.config

2020-11-12 Thread Kaushal Shriyan
On Thu, Nov 12, 2020 at 8:13 PM Francis Daly wrote: > On Thu, Nov 12, 2020 at 07:17:46PM +0530, Kaushal Shriyan wrote: > > Hi there, > > > I am running the Nginx version: nginx/1.16.1 on CentOS Linux release > > 7.8.2003 (Core). I am trying to forbid/prevent web.config file to > > download it fro

[ANN] OpenResty 1.19.3.1 released

2020-11-12 Thread Yichun Zhang
Hi folks, I am happy to announce the new formal release, 1.19.3.1, of our OpenResty web platform based on NGINX and LuaJIT. The full announcement, download links, and change logs can be found below: https://openresty.org/en/ann-1019003001.html OpenResty is a high performance and dynamic web

Re: using $upstream* variables inside map directive

2020-11-12 Thread Francis Daly
On Thu, Nov 12, 2020 at 11:00:09AM -0500, unoobee wrote: Hi there, > > And you are reporting that it does not ever write to "ssd_cache". > Yes, this is correct. I want to choose the cache location based on the size > of the cached file Logically, you can't. You can only choose the cache locatio

Re: using $upstream* variables inside map directive

2020-11-12 Thread unoobee
> And you are reporting that it does not ever write to "ssd_cache". Yes, this is correct. I want to choose the cache location based on the size of the cached file I want to get the behavior described in the article, but only with the file size in the map directive, I assume I need $sent_http_conte

Re: HTTP/3 and php POST

2020-11-12 Thread Ryan Gould
Thanks for reporting this.  We have committed a change that can potentially fix this issue:  https://hg.nginx.org/nginx-quic/rev/ef83990f0e25  Could you please update the source code and report if the issue is indeed fixed for you?  thank you for solving the problem!  i can confirm that PayPal

Re: Forbid web.config page from the browser as in https://mydomain.com/web.config

2020-11-12 Thread Francis Daly
On Thu, Nov 12, 2020 at 07:17:46PM +0530, Kaushal Shriyan wrote: Hi there, > I am running the Nginx version: nginx/1.16.1 on CentOS Linux release > 7.8.2003 (Core). I am trying to forbid/prevent web.config file to > download it from the browser. When I hit > https://mydomain.com/web.config it is

Re: using $upstream* variables inside map directive

2020-11-12 Thread Francis Daly
On Thu, Nov 12, 2020 at 04:58:31AM -0500, unoobee wrote: Hi there, > My configuration looks like this: Thanks for this. It looks like you are setting "proxy_cache" to always try to read from "hdd_cache"; but you want it to sometimes write to "ssd_cache" instead. And you are reporting that it d

Forbid web.config page from the browser as in https://mydomain.com/web.config

2020-11-12 Thread Kaushal Shriyan
Hi, I am running the Nginx version: nginx/1.16.1 on CentOS Linux release 7.8.2003 (Core). I am trying to forbid/prevent web.config file to download it from the browser. When I hit https://mydomain.com/web.config it is allowing me to download instead of forbidding the page ( 403 Forbidden). I am sh

Re: aarch64 packages for other Linux flavors

2020-11-12 Thread Emilio Fernandes
Hi Konstantin, El vie., 29 may. 2020 a las 12:24, Konstantin Pavlov () escribió: > Hello Emilio, > > 29.05.2020 10:23, Emilio Fernandes wrote: > > Hi Konstantin, > > > > I guess you follow the GitHub issue but just in case: Mike Crute just > > announced a beta AMI for > > Alpine: > https://github

Re: using $upstream* variables inside map directive

2020-11-12 Thread unoobee
My configuration looks like this: proxy_cache_path /cache/ssd keys_zone=ssd_cache:10m levels=1:2 inactive=600s max_size=100m; proxy_cache_path /cache/hdd keys_zone=hdd_cache:10m levels=1:2 inactive=600s max_size=100m; upstream backend { server www.test.com:443; }

Re: using $upstream* variables inside map directive

2020-11-12 Thread Francis Daly
On Thu, Nov 12, 2020 at 02:33:49AM -0500, unoobee wrote: Hi there, > I tried using $upstream_http_content_length inside the map directive with > the "volatile" parameter to specify the proxy_cache behavior, but the map > still uses the default value. What's your config? > Is there any way to se