Re: ktls nginx not working

2022-01-27 Thread Jeffrey Walton
On Thu, Jan 27, 2022 at 8:52 AM Anoop Alias wrote: > > I am trying to implement/test ktls as per the blog article > > https://www.nginx.com/blog/improving-nginx-performance-with-kernel-tls/#tls-protocol > > ### > This is done on CentOS8 VM > > # uname -r > 4.18.0-348.7.1.el

Re: ktls nginx not working

2022-01-27 Thread Anoop Alias
it works now But I have a strange situation If we download the file using text clients like wget or curl , the BIO_get_ktls_send and SSL_sendfile is not showing in debug log, but it shows up if we use a browser like Chrome or Firefox -- *Anoop P Alias* __

Re: ktls nginx not working

2022-01-27 Thread Sergey Kandaurov
> On 27 Jan 2022, at 17:27, Anoop Alias wrote: > > sendfile on; > > is there in the http context > > I tested with > > # TLS Settings > ssl_protocols TLSv1.2; > ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384; > > which should cover centos8 as mentioned in the blog pos

Re: ktls nginx not working

2022-01-27 Thread Anoop Alias
sendfile on; is there in the http context I tested with # TLS Settings ssl_protocols TLSv1.2; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384; which should cover centos8 as mentioned in the blog post? But it still did not work ## Its a KVM vps from

Re: ktls nginx not working

2022-01-27 Thread Sergey Kandaurov
> On 27 Jan 2022, at 16:48, Anoop Alias wrote: > > Hi, > > I am trying to implement/test ktls as per the blog article > > https://www.nginx.com/blog/improving-nginx-performance-with-kernel-tls/#tls-protocol > > ### > This is done on CentOS8 VM > > # uname -r > 4.18.

RE: RE: How to make nginx fail if it can't write to cache dir.

2022-01-27 Thread Reinis Rozitis
> I fail to see why it will keep on answering to new requests if it can't fulfill any of them. Because there might be other requests which can be answered without touching the problematic cache directory? While the error is critical (for the particular request) I don't think it makes sense for ngi

ktls nginx not working

2022-01-27 Thread Anoop Alias
Hi, I am trying to implement/test ktls as per the blog article https://www.nginx.com/blog/improving-nginx-performance-with-kernel-tls/#tls-protocol ### This is done on CentOS8 VM # uname -r 4.18.0-348.7.1.el8_5.x86_64 ### # openssl-3.0.1/.openssl/

Re: RE: How to make nginx fail if it can't write to cache dir.

2022-01-27 Thread unikron
I can't think of any edge case that will happen to my nginx instances, that's why I want it to die. I fail to see why it will keep on answering to new requests if it can't fulfill any of them. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,293477,293484#msg-293484 ___

RE: How to make nginx fail if it can't write to cache dir.

2022-01-27 Thread Reinis Rozitis
> Cache config: > proxy_cache_path /nginx/cache levels=1:2 keys_zone=bla:20m max_size=10g inactive=20m use_temp_path=off; > > I had a problem while using tmpfs mount for nginx cache dir, my automation mounted it over and over again(so each time nginx created a new set of base dirs [a-z]), but afte

How to make nginx fail if it can't write to cache dir.

2022-01-27 Thread unikron
Hi, Nginx version: nginx/1.20.2 Cache config: proxy_cache_path /nginx/cache levels=1:2 keys_zone=bla:20m max_size=10g inactive=20m use_temp_path=off; I had a problem while using tmpfs mount for nginx cache dir, my automation mounted it over and over again(so each time nginx created a new set of