Re: Help needed with Nginx SRPM script

2021-04-16 Thread Andrei Belov
> On 16 Apr 2021, at 13:00, Thomas Stephen Lee wrote: > > Thanks a lot, Andrei. > > That worked well. > > I had the same problem in RHEL 8. > > below is the modified script for EL8 Glad to hear it's working for you now. Out of curiosity - in case of RHEL8, what's the point of rebuilding ng

Re: Help needed with Nginx SRPM script

2021-04-15 Thread Andrei Belov
> On 16 Apr 2021, at 08:50, Thomas Stephen Lee wrote: > > Hi, > > I have the following script on RHEL 7 > > > --Script Start- > > OPENSSL="openssl-1.1.1k" > NGINX_VERSION="1.19.10-1" > > rpm -ivh > http://nginx.org/packages/mainline/centos/7/SRPMS/nginx-$NG

Re: Want to use --emit-relocs in the linker step

2020-04-27 Thread Andrei Belov
> On 27 Apr 2020, at 16:53, Mahmood Naderan wrote: > > Hi, > I want to add '--emit-relocs' at the linker stage while building nginx, I > have edited the objs/Makefile to be like this: > > $(LINK) -o objs/nginx \ > objs/src/core/nginx.o \ > > objs/ngx_modu

Re: Packages for Ubuntu 18.04 "Bionic"?

2018-05-07 Thread Andrei Belov
Hi Moshe, > On 07 May 2018, at 19:12, Moshe Katz wrote: > > Hello, > > I see that the new Ubuntu 18.04 release has Nginx 1.14.0 > as its install version. > However, as new development progresses, I will want to be on the `mainline` > version on m

Re: GeoIP2

2018-03-29 Thread Andrei Belov
Hi Frank, > On 29 Mar 2018, at 10:23, Frank Liu wrote: > > The nginx geoip module > http://nginx.org/en/docs/http/ngx_http_geoip_module.html > is using the > legacy maxmind db. > I just read maxmind legacy db March 2018 will be the l

Re: execution error - pcre limits exceeded (-8)

2017-04-21 Thread Andrei Belov
> On 21 Apr 2017, at 12:29, Dino Edwards wrote: > > Hi Andrei, > > Which version of modsecurity are you using with nginx? > > I’m using 2.9.1 It's worth to try libmodsecurity (aka ModSecurity 3.x) + nginx connector instead: https://github.com/SpiderLabs/ModSecurity/tree/v3/master https://

Re: execution error - pcre limits exceeded (-8)

2017-04-21 Thread Andrei Belov
Hi Dino, > On 20 Apr 2017, at 21:42, Dino Edwards wrote: > > Hello, > > I have compiled nginx 1.12.0 with modsecurity on a Ubuntu 16.04 server and > I’m running it as a reverse proxy in front of an Apache webserver which hosts > a variety of different type of websites. After enabling modsecu

Re: Reverse Proxy with 500k connections

2017-03-07 Thread Andrei Belov
Yes, split_clients solution fits perfectly in the described use case. Also, nginx >= 1.11.4 has support for IP_BIND_ADDRESS_NO_PORT socket option ([1], [2]) on supported systems (Linux kernel >= 4.2, glibc >= 2.23) which may be helpful as well. Quote from [1]: [..] Add IP_BIND_ADDRESS_NO_PORT t

Re: Drupal 7, nginx with ModSecurity - How to resolve that 404 error page please?

2016-12-01 Thread Andrei Belov
Hi Matej, > On 29 Nov 2016, at 11:08, Matej Zuzčák wrote: > > Hello all, > > I have installed Drupal 7 on latest version of Nginx web server which > was compiled with support of ModSecurity module. I have activated core > OWASP rule set. But when I active ModSecurity in my virtual host config >

Re: Compiling Nginx on Windows 7

2015-06-01 Thread Andrei Belov
On 30 May 2015, at 23:00, z_kamikimo wrote: > Im experiencing issues with compiling Nginx on Windows 7, every thing goes > good until nmake -f objs/Makefile. > I get the following error > > Assembling: tmp32\sha1-586.asm > tmp32\sha1-586.asm(1432) : error A2070:invalid instruction operands > tm

Re: nginx core dump issue

2014-10-21 Thread Andrei Belov
On 21 Oct 2014, at 00:54, i_way wrote: > Hi expert, > > I am running into nginx core dump issue and I need expert's help. > Thank you so much! > > We are running nginx 1.6.0 + mod_security on RHEL 6.4. > We are using the two ports with https. > > ■core dump > GNU gdb (GDB) Red Hat Enterprise

Re: tmp directory filling up

2014-06-16 Thread Andrei Belov
On 11 Jun 2014, at 23:23, Maxim Dounin wrote: > Hello! > > On Wed, Jun 11, 2014 at 10:58:47AM -0400, Tatonka wrote: > >> Hi, >> >> I have a rails application that is hosted through nginx and passenger. In >> this application I want provide very large files for the users to download >> (>2GB)

Re: nginx Segmentation fault

2014-06-04 Thread Andrei Belov
Not yet. Quick look makes me think that "client_body_in_file_only on;" might help. -- defan > On 04 июня 2014 г., at 19:58, kyprizel wrote: > > Andrei, have you checked issue 630? > > https://github.com/SpiderLabs/ModSecurity/issues/630 > > >> On Wed,

Re: nginx Segmentation fault

2014-06-04 Thread Andrei Belov
e to try - any feedback will be greatly appreciated! Cheers, — Andrei Belov http://nginx.com/ On 04 Jun 2014, at 17:17, Godinho wrote: > I needed to use modsecurity so I compiled nginx and modsecurity. > > Modsecurity was compiled with options: ./configure > --enable-standalone-m

Re: "writev() failed (134: Transport endpoint is not connected)" when upstream down

2013-04-22 Thread Andrei Belov
Branden, On Apr 5, 2013, at 2:24 , Branden Visser wrote: > Hello, I've found that when there are upstream servers unavailable in > my upstream group, applying a little bit of load on the server (i.e., > just myself browsing around quickly, 2-3 req/s max) results in the > following errors even fo

Re: Strange $upstream_response_time latency spikes with reverse proxy

2013-03-19 Thread Andrei Belov
Hello Jay, On Mar 19, 2013, at 2:09 , Jay Oster wrote: > Hi again! > > On Sun, Mar 17, 2013 at 2:17 AM, Jason Oster wrote: > Hello Andrew, > > On Mar 16, 2013, at 8:05 AM, Andrew Alexeev wrote: >> Jay, >> >> You mean you keep seeing SYN-ACK loss through loopback? > > That appears to be the