[QUIC][BUG] function 'ngx_hkdf_extract ' has memory leak when use OPENSSL but not BoringSSL.

2021-03-09 Thread lingtao.klt
In ngx_hkdf_expand, when use OPENSSL, the *pctx need to be free. ``` static ngx_int_t ngx_hkdf_expand(u_char *out_key, size_t out_len, const EVP_MD *digest, const uint8_t *prk, size_t prk_len, const u_char *info, size_t info_len) { #ifdef OPENSSL_IS_BORINGSSL if (HKDF_expand(out_key, ou

Re: How did nginx resolve names?

2021-03-09 Thread andromeda123
Hi Francis - Thank you for response explaining the difference in DNS resolution behavior during 1) start - up 2) run time. Can you please elaborate why start-up DNS resolution does not use `resolver` directive? Just the way run time resolution does? A follow up question - Is it feasible to use s

njs-0.5.2

2021-03-09 Thread Dmitry Volyntsev
Hello, I'm glad to announce a new release of NGINX JavaScript module (njs). This release focuses on extending the modules functionality. Notable new features: - js_body_filter directive. The directive allows changing the response body. : nginx.conf: : js_import foo.js; : : location / {

nginx-1.19.8

2021-03-09 Thread Maxim Dounin
Changes with nginx 1.19.809 Mar 2021 *) Feature: flags in the "proxy_cookie_flags" directive can now contain variables. *) Feature: the "proxy_protocol" parameter of the "listen" directive, the "proxy_protocol" and "set_real_ip_from" d

Re: How nginx stream module reuse tcp connections?

2021-03-09 Thread Francis Daly
On Sun, Mar 07, 2021 at 09:03:48PM -0500, allenhe wrote: Hi there, > So, if there is no error and the downstream/upstream didn't actively close > the connection, the nginx won't timeout and close the tcp connection with > the downstream or with the upstream at all? is that correct? I don't thi

Re: worker_connections exceed open file resource limit

2021-03-09 Thread Maxim Dounin
Hello! On Tue, Mar 09, 2021 at 05:29:02AM -0500, bee.lists wrote: > It is development. I’ve been running 1024 for over 10 years and > now there’s a restriction on 256 workers, and I don’t know why. > It seems to be set quite low. Given the fact this is a new > warning, developers that have i

Re: pthread in nginx module

2021-03-09 Thread Maxim Dounin
Hello! On Tue, Mar 09, 2021 at 01:00:20AM -0500, klowd92 wrote: > Hi Everyone, > > I am developing an nginx module. > The module requires some background processing via thread when the server is > running. > > I have written my module to use pthread.h > I have attempted to spawn a thread during

Re: QUIC based Nginx in Linux(Ubuntu) based systems

2021-03-09 Thread Sergey Kandaurov
> On 6 Mar 2021, at 17:47, Sumit Kumar wrote: > > > I am trying to develop a QUIC POC as part of my master's project and the > results gained from here are also supposed to help me build a base for QUIC > based Nginx adoption in Cisco's Products. > > > > I am simply trying to follow the

Re: worker_connections exceed open file resource limit

2021-03-09 Thread bee.lists
Hi there. It is development. I’ve been running 1024 for over 10 years and now there’s a restriction on 256 workers, and I don’t know why. It seems to be set quite low. Given the fact this is a new warning, developers that have increased this setting have been wrong all this time? I’ll take a