Re: ngx_http_find_virtual_server ngx_http_regex_exec DOS

2024-01-30 Thread Maxim Dounin
Hello! On Tue, Jan 30, 2024 at 10:28:23AM +0200, Clima Gabriel wrote: > Greetings fellow nginx-devs, > It looks to me as if an attacker could force the server to use up a large > amount of resources doing ngx_http_regex_exec if the server were to be > configured with a relatively large number of

Re: Managing Static Files

2024-01-30 Thread Maxim Dounin
Hello! On Tue, Jan 30, 2024 at 07:36:49AM +, bittn...@gmail.com wrote: > Hi...I read a few articles about managing static files and I'm a > bit confused! > I use Nginx as the main server to host my website > I enabled gzip and brotli > I have also enabled gzip_static and brotli_static > And

Re: How can I sync nginx.conf in two keepalived server?

2024-01-30 Thread Jason Anderson via nginx
This may help: https://docs.nginx.com/nginx/admin-guide/high-availability/configuration-sharing/ Regards, Jason On Tue, Jan 30, 2024, 9:04 AM baalchina wrote: > Hi, all. I had just deploy two nginx servers and made them high-available > using keepalived. I tested it, and HA works fine. > > Bu

How can I sync nginx.conf in two keepalived server?

2024-01-30 Thread baalchina
Hi, all. I had just deploy two nginx servers and made them high-available using keepalived. I tested it, and HA works fine. But I had some new questions here: 1st, When I edited the nginx.conf in master server, how to transfer the conf file to backup server immediately? 2nd, And after I edited , I

ngx_http_find_virtual_server ngx_http_regex_exec DOS

2024-01-30 Thread Clima Gabriel
Greetings fellow nginx-devs, It looks to me as if an attacker could force the server to use up a large amount of resources doing ngx_http_regex_exec if the server were to be configured with a relatively large number of regex server_names. I would appreciate any ideas on the topic, especially sugges