Re: proxy_pass_header not working in 1.6.0

2014-07-01 Thread Jonathan Matthews
On 1 Jul 2014 11:01, "Lucas Rolff" wrote: > > So.. Where is the thing that states I can't use proxy_pass_header cache-control, or expires? :))) The proxy_hide_header and proxy_pass_header reference docs. ___ nginx mailing list nginx@nginx.org http://ma

Re: proxy_pass_header not working in 1.6.0

2014-07-01 Thread Jonathan Matthews
On 1 Jul 2014 10:34, "Lucas Rolff" wrote: > > Do you have a link to a documentation that has info about this then? Because in the below link, and in http://wiki.nginx.org/HttpProxyModule#proxy_pass_header theres nothing about what it accepts. How about the doc you already found, and then the link

Re: proxy_pass_header not working in 1.6.0

2014-07-01 Thread Jonathan Matthews
On 1 Jul 2014 10:20, "Lucas Rolff" wrote: > > Well, it used to work before 1.6.0.. > > For me http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_pass_header shows that I should do: > > proxy_pass_header Cache-Control; > > So that should be correct No. You have misread the documentatio

Re: proxy_pass_header not working in 1.6.0

2014-07-01 Thread Jonathan Matthews
On 1 Jul 2014 07:58, "Lucas Rolff" wrote: > > Hi guys, > > I'm currently running nginx version 1.6.0 (after upgrading from 1.4.4). > > Sadly I've found out, after upgrading proxy_pass_header seems to stop working, meaning no headers is passed from the upstream at all You need to read the proxy_pa

Re: RE: GeoIP FirstNonPrivateXForwardedForIP

2014-06-23 Thread Jonathan Matthews
On 23 Jun 2014 07:58, "Keyur" wrote: > > Hello, > > Can someone please look into this.. I need it for proper website > functionality. I don't know the answer to your problem and perhaps, given the lack of reply, no one on this public mailing list mainly populated by non-nginx staff does either.

Re: using 2000+ ip prefixes in nginx geo module !!

2014-06-19 Thread Jonathan Matthews
On 19 June 2014 19:59, shahzaib shahzaib wrote: > We've added 2000+ ip prefixes in a file "geo.conf" included in nginx vhost > by using ngx-http_geo_module and received the following warning :- > > 2014/06/19 23:52:46 [warn] 1633#0: duplicate network "103.24.96.0/22", > value: "tw", old value: "tw

Re: Caching servers in Local ISPs !!

2014-06-18 Thread Jonathan Matthews
On 18 Jun 2014 20:45, "shahzaib shahzaib" wrote: > > >>why not host those file on a professional CDN instead of in-house? > Because 80% of the traffic is from our country and 50% of that traffic is from the ISP we're talking to and this is the reason we deployed the caching box on this ISP edge.

Re: URI escaping for X-Accel-Redirect and proxy_pass in 1.4.7 and 1.6.0

2014-06-17 Thread Jonathan Matthews
On 17 June 2014 07:49, gwilym wrote: > The workaround is to _double_ encode so as to send back > "image%2520with%2520spaces.jpg" to Nginx but we can't roll this out until > Nginx 1.6 because it breaks 1.4... but we can't roll out 1.6 until the code > is there. I don't have a nice fix for you I'm

Re: How could I forbid outside visits without response 403

2014-06-13 Thread Jonathan Matthews
On 13 Jun 2014 15:15, "姚锟" <627...@qq.com> wrote: > I think it still waste some resourses, "RETURN A 403 STATIC PAGE".. I think you're probably wrong. You're almost certainly prematurely optimising the wrong thing. Just 403 the unwanted requests and move on with your job/life/project. I mean this

Re: location uri wildcard

2014-06-11 Thread Jonathan Matthews
On 10 June 2014 17:31, grd2345 wrote: > http://www.mysite.com/ClassScheduler.aspx [snip] > I basically need a wild card to detect ClassScheduler.aspx from the above > old urls This assumption looks wrong. Check out how location stanzas work: http://nginx.org/r/location Hint: locations in their si

Re: nginx channel

2014-06-06 Thread Jonathan Matthews
On 6 June 2014 12:41, nginxsantos wrote: > Would be great where channels are used, I am talking about ngx_channel? Please rearrange your words into a comprehensible sentence and/or question. Thank you. ___ nginx mailing list nginx@nginx.org http://ma

Re: Deny all + Custom Error page

2014-06-06 Thread Jonathan Matthews
On 6 Jun 2014 08:49, "basti" wrote: > > Hello, > > I try to block wildcard sub domains as follows: > > > # block wildcard > server { > server_name ~^(.*)\.example\.com$ ; > root /usr/share/nginx/www; > error_page 403 /index.html; > allow 127.0.0.1; > deny all; > access_log off; > lo

Re: Dynamic config options from ENV

2014-06-05 Thread Jonathan Matthews
On 5 June 2014 17:00, Maximilian Schulz wrote: > Hi everybody, > > is it possible to set a nginx config variable from an ENV variable? I tried > several thing, but none of them worked. The most promising was specifying > "env MY_VAR;" at the top of the nginx.conf and then using its value via > "my

Re: Issue nginx - ajax

2014-06-04 Thread Jonathan Matthews
On 4 June 2014 05:48, Vishal Mestri wrote: > Hi Jonathan Matthews, > > Thank you for your valuable comments. > I understand , what you would like to suggest, but we are using self-signed > certificate just for trial demo. > > Once UAT is done, we would be using actual certi

Re: Issue nginx - ajax

2014-06-03 Thread Jonathan Matthews
On 3 June 2014 11:58, Vishal Mestri wrote: > Hi B.R. and all, > > > Really thank you for your support till now. > > > We were able to resolve issue on IE as well as on Firefox. > > > we did following settings:- > > > 1) IE > > We added my website to secure site list. > > Post that, I imported cert

Re: Browser showing headers and Gziped code inside body.

2014-06-03 Thread Jonathan Matthews
On 2 June 2014 19:09, Satake wrote: > I'm currently using nginx/1.4.7 and for some reason a client is complaining > that the page is showing with errors in both his browsers (Firefox and IE). > > The error in question is the following: > > https://www.dropbox.com/s/wnpjyyq01j7l5qg/Problemas%20ao%2

Re: Nginx 1.7.0: location @php

2014-06-02 Thread Jonathan Matthews
On 2 June 2014 04:47, TECK wrote: > Francis, > > We are going in circles without reaching a solution Fortunately, this being a *public* *mailing* *list*, and Francis (along with almost every other subscriber) giving his time, experience and opinions for free, you are definitely no worse off than

Re: Nginx Rewrite for Proxy Pass

2014-05-30 Thread Jonathan Matthews
On 30 May 2014 16:55, bwellsnc wrote: > Hello everyone, I have an interesting issue. I am using nginx 1.6.0 to > proxy back to my Jira instance. This is working great within my network. > This is the issue. I am using a fortigate device to protect my network and > I want to use the https connec

Re: Issues with my galaxy server

2014-05-29 Thread Jonathan Matthews
Someone, perhaps you, changed something on your backend (your "galaxy" server, which means absolutely nothing to anyone on this list, do be aware), and they fucked it. Or "introduced an intermittent performance issue which is resulting in a proportion of your proxied requests to time out", if you p

Re: RE: Nginx with NO SSL offload

2014-05-27 Thread Jonathan Matthews
On 27 May 2014 19:29, nginxsantos wrote: > I am still not convinced that no one faced this problem earlier. When Nginx > works as a reverse proxy, is everyone doing a SSL offload for the HTTPS > traffic? Yes, everyone is. ___ nginx mailing list nginx@n

Re: Reuse of resources.

2014-05-21 Thread Jonathan Matthews
On 21 May 2014 10:22, Adarsh Pugalia wrote: > > Hi, I am just beginning with nginx and had a problem. The rest of your email doesn't describe a problem. What is your problem? ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/list

Re: nginx VPS based ?

2014-05-19 Thread Jonathan Matthews
On 19 May 2014 12:38, "BONNET, Frank" wrote: > > Hello > > For internal purpose ( students projects ) Are /you/ the student in this context? ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: subs filter error

2014-05-09 Thread Jonathan Matthews
On 9 May 2014 13:36, Tom McLoughlin wrote: > I keep getting this error every time someone loads a page. > subs filter header ignored, this may be a compressed response. while > reading response header from upstream, client: xx.xx.xx.xx, server: , > request: "GET /search/sharepoint/0/7/0 HTTP/1.1",

Re: $arg_name as an array

2014-05-09 Thread Jonathan Matthews
On 9 May 2014 10:16, beatnut wrote: > Hello, > > Does it possible to use $arg_name as an array? > For example > I've query string : ?opt[test]=1 > > I'd like to get value od opt[test] but $arg_opt[test] doesn't work. > > Is there special syntax for that case? Query strings arguments are just stri

Re: Nginx receiving bytes from Amazon ELB (Performance Issue)

2014-05-07 Thread Jonathan Matthews
On 7 May 2014 19:05, rodrigo.aiello wrote: > requests are taking too long to process [snip] > 1 EC2 Micro (Nginx) I found your problem. Micro instances are a false economy. Stop using them. ___ nginx mailing list nginx@nginx.org http://mailman.nginx.or

Re: Cache revalidate modified timezone mismatch

2014-05-07 Thread Jonathan Matthews
On 7 May 2014 15:51, Thijs Koerselman wrote: > I have a backend returning a last modified header in CEST. RF2616 says "All HTTP date/time stamps MUST be represented in Greenwich Mean Time (GMT), without exception". I'm not very surprised nginx isn't doing what you expect. Fix your backend. > Wh

Re: using $upstream* variables inside map directive

2014-05-07 Thread Jonathan Matthews
On 7 May 2014 06:38, Kirill K. wrote: > Hello, > I'm trying to avoid caching of small responses from upstreams using map: > map $upstream_http_content_length $dontcache { > default 0; > ~^\d\d$ 1; > ~^\d$ 1; > } > > Unfortunatelly, nginx seems to ignore $upstream* variables at the map > processing

Re: nginx logging with huge vhosts

2014-04-30 Thread Jonathan Matthews
On 30 Apr 2014 05:56, "Joydeep Bakshi" wrote: > > Hello Maxim, > > Presently I have configured separate access & error log for each & every nginx vhost. I wonder if there is other alternative which can log all vhosts into a common access & error log and later split them according to vhost for ea

Re: can multiple domain points a single nginx host with server_name ?

2014-04-28 Thread Jonathan Matthews
On 28 Apr 2014 12:44, "Joydeep Bakshi" wrote: > is > > nginx [ server_name test1.com test2.com www.test3.com ] > > equivalent to > > apache [ > servername test1.com > serveralias test2.com www.test3.com ] > > ? As Maxim says, yes. If you have hardcoded names, i believe there are 3 ways to

Re: 1.7.01 mainline on debian has installed a wrong package

2014-04-27 Thread Jonathan Matthews
On 27 April 2014 23:14, ura wrote: > those two commands don't show any version numbers No, they don't - they show paths. > so i am not presently any > closer to identifying the issue here. > the paths returned look fine to me, from what i know already. Ok. Good luck finding the problem. Check y

Re: 1.7.01 mainline on debian has installed a wrong package

2014-04-27 Thread Jonathan Matthews
On 27 April 2014 23:00, ura wrote: > thanks for assisting. i ran that command and see 3 repos which provide > nginx. from what i see there, the 1.7.0-1 wheezy package is the candidate > and also has been installed. > > i just checked my local development machine which is running lmde - the > versi

Re: 1.7.01 mainline on debian has installed a wrong package

2014-04-27 Thread Jonathan Matthews
On 27 April 2014 22:37, ura wrote: > after running the upgrade to 1.7.01 mainline version on debian, the nginx > version check (service nginx -V) lists: > 0.91-ubuntu1 - even though 1.7.01 is listed in the package manager in > debian. > > does this mean that debains repos are serving an incorrect

Re: how to allow apache to control SSL traffic ?

2014-04-21 Thread Jonathan Matthews
On 21 Apr 2014 07:01, "Joydeep Bakshi" wrote: > > Hello list, > > My apache vhosts are configured to take care of SSL connections. I have installed nginix as http accelerator. How can I instruct nginx to pass all SSL request to apache SSL vhost ? Most simply, try stopping nginx listening on port

Re: Web GUI

2014-04-04 Thread Jonathan Matthews
On 5 Apr 2014 00:03, "Knut Moe" wrote: > > I just got NginX installed on Ubuntu and was wondering if there is a Web GUI built-in that can be called from the local IP address with some port number? Nginx does not have a GUI built in. It has a status module called stub_status which you can compile

Re: SSL renegotiation probelm using nginx as reverse proxy to apache

2014-04-04 Thread Jonathan Matthews
On 4 Apr 2014 01:57, "sean_at_stitcher" wrote: > I'm not sure I understand why apache wants to renegotiate with nginx, nor > why nginx doesn't seem to want to do it (despite apache thinking it can.) I vaguely recall seeing (on this list) the suggestion that Apache does this (at least) when a requ

Re: Transfering url arguments to different location

2014-04-02 Thread Jonathan Matthews
On 2 April 2014 14:13, B.R. wrote: > If someone had details about reasons not to use post_action (either from the > referenced IIRC discussion or from other sources), I would be very > interested in them. http://forum.nginx.org/read.php?2,213627,213722#msg-213722 and the note on the wiki next to

Re: 404 error with rewriting rule

2014-04-02 Thread Jonathan Matthews
On 1 Apr 2014 19:23, "skyice" wrote: > > Hello, > > With this rule : > > rewrite ^/([^/])(/.*) $2?locale=$1&$query_string last; Your first capture is looking for exactly 1 character. Do you really mean that? J ___ nginx mailing list nginx@nginx.org htt

Re: Transfering url arguments to different location

2014-04-02 Thread Jonathan Matthews
On 2 Apr 2014 07:31, "Cristian Rusu" wrote: > > Hello > > I have a setup on nginx to count downloads. > > > location / {. > post_action /afterdownload; > > Here I have a value in $arg_key > > location /afterdownload { > > I need $arg_key here > > Any way to send it to /afterdownload se

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Jonathan Matthews
On 28 March 2014 14:31, Ben Johnson wrote: > Is there any way to av,oid this certificate being presented, but still > return the 444 response under the conditions I've described? I'd /suspect/ not, as the 444 response can't be "delivered" (i.e. the connection closed) until sufficient information

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Jonathan Matthews
On 28 March 2014 16:51, Ben Johnson wrote: > Maxim, when you say, "If SNI is used, it's in theory possible to close a > connection early," do you mean to imply that while possible, this > capability has not yet been implemented in nginx (the tickets are still > open after almost two years)? I'd s

Re: nginx ssl certificate via variable

2014-03-27 Thread Jonathan Matthews
On 26 March 2014 13:03, stremovsky wrote: > Hello ! > > When it will be possible to use variables with ssl_certificate in nginx > configuration ? > > It has been discussed several times already in the passed. For example > here: > > http://forum.nginx.org/read.php?29,235397,235408 > http://serverf

Re: Nginx forum returns 502 (2014-03-25T08:13Z)

2014-03-25 Thread Jonathan Matthews
On 25 March 2014 21:17, Jim Ohlstein wrote: > [what does] that "T08:13Z" mean The Z suffix indicates UTC, as per section 2 of http://www.ietf.org/rfc/rfc3339.txt. HTH, Jonathan -- Jonathan Matthews Oxford, London, UK http://www.jpluscplusm.com

Re: Nginx getting last variables on exploded uri

2014-03-15 Thread Jonathan Matthews
On 15 Mar 2014 17:30, "gokhanege" wrote: > > Where is the problem? I cound not found it. Your problem is that all of your .* matches are greedy, whereas you (probably) want only the last to be greedy. Have a Google for how to do that with regular expressions. You also might want to replace /some

Re: SMNP monitoring support

2014-03-14 Thread Jonathan Matthews
On 14 March 2014 04:01, Niranjan Khare wrote: > Hello all, > > I'd like to know if nginx supports / plans to support triggering SNMP alarms > in the near future? I would suggest, and hope, not. That sort of feature creep and bloat doesn't belong anywhere near a small, efficient HTTP proxy! You m

Re: Nginx - PHP FPM Server load is very high

2014-03-06 Thread Jonathan Matthews
On 6 March 2014 19:18, agriz wrote: > The server is struggling to handle the traffic. > I have 8GB ram. Quad core server. [snip] > Right now, the load is about 50 I very much doubt your problem is a simple one which can be solved by tweaking your nginx config. I say this because you have (50/4 ==

Re: map or not map?

2014-03-06 Thread Jonathan Matthews
On 6 March 2014 18:24, wrote > Is using map the only solution (i'm looking for a simple regexp)? For this, a map is the /best/ solution! J ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Some Issues with Configuration

2014-03-05 Thread Jonathan Matthews
On 5 March 2014 21:18, Richard Ibbotson wrote: > On Wednesday 05 Mar 2014 21:03:22 Jonathan Matthews wrote: >> Nginx doesn't execute PHP. It passes each request destined for your >> blog (i.e. the locations you decide are "your blog") to another >> process

Re: Some Issues with Configuration

2014-03-05 Thread Jonathan Matthews
On 5 March 2014 11:13, Richard Ibbotson wrote: > Hi > > I've been having a few problems with configuration of NGINX. No > problems with running Apache or Lighttpd on my own Linux box but I've > been scratching my head over NGINX. > > When I've compiled from source or used the vanilla Ubuntu packa

Re: [SHOW'N'TELL] Primitive RBAC/AAA implementation in nginx config

2014-02-26 Thread Jonathan Matthews
On 26 Feb 2014 12:05, "Jonathan Matthews" wrote: > > Hi all - > > I spent some time poking at a interesting problem that came up last > night, and ended up with this primitive RBAC system, implemented in > declarative nginx config. Thanks to the couple of people who r

[SHOW'N'TELL] Primitive RBAC/AAA implementation in nginx config

2014-02-26 Thread Jonathan Matthews
: https://gist.github.com/jpluscplusm/922 Cheers, Jonathan -- Jonathan Matthews Oxford, London, UK http://www.jpluscplusm.com/contact.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Translating apache config to nginx

2014-02-21 Thread Jonathan Matthews
On 21 February 2014 21:51, Grant wrote: >> What is "normal operation"? If the request you make is like /thr.ee, >> it should be allowed; if it is not like /thr.ee is should be blocked. > > I just meant normal browsing around the inbox in Roundcube. If you assume that people on this list magically

Re: nginx limit_rate if in location - strange behaviour - possible bug ?

2014-02-17 Thread Jonathan Matthews
On 17 February 2014 10:02, Bozhidara Marinchovska wrote: > My question is what may be the reason when downloading the example file with > download manager not to match limit_rate directive "Download managers" open multiple connections and grab different byte ranges of the same file across those c

Re: ASP.NET pages with nginx

2014-02-11 Thread Jonathan Matthews
On 11 Feb 2014 15:09, "parnican" wrote: > > This didn't work. > proxy_set_header Host $proxy_host; > next try > proxy_set_header Host $http_host:8080; Tell your app to expect "bernolak.dyndns.info", without the port suffix. Tell nginx to set the Host header to "bernolak.dyndns.info", without th

Re: ASP.NET pages with nginx

2014-02-11 Thread Jonathan Matthews
On 11 Feb 2014 13:44, "parnican" wrote: > > Just did some experiments with following settings: > proxy_set_header X-Real-IP $remote_addr; > proxy_pass_header X-Accel-Redirect; > > No change:( ...its time to give up or any ides? How about using it to set the header that contains the "wrong" set

Re: Protecting URIs with OAuth2

2014-02-11 Thread Jonathan Matthews
On 11 Feb 2014 06:33, "kate_r" wrote: > > Hi > > Does anyone know how to protect an URI with OAuth authentication? the > upstream sever is already capable of issuing new tokens, but I'm hoping that > nginx can check the access token for certain URIs. In my experience, you can easily use nginx to

Re: ASP.NET pages with nginx

2014-02-11 Thread Jonathan Matthews
On 10 Feb 2014 17:12, "parnican" wrote: > > I have tried "experiments" with following parameters but no change..not sure > this is the way i should go... Any suggestion how to make nginx *not* pass > through the ":8080? How about proxy_set_header? J __

Re: high Traffic setup problem, module status don't deliver data

2014-02-10 Thread Jonathan Matthews
On 10 February 2014 12:06, Aleksandar Lazic wrote: > Thanks for help. Aleksandar - I can't work out what you need help with. There aren't any questions (or question marks!) in your email :-) I can't see your problem at first or second glance; I'm sure others will, but I'm quite slow. Could you s

Re: ASP.NET pages with nginx

2014-02-10 Thread Jonathan Matthews
On 10 February 2014 10:55, parnican wrote: > Hi all, > i would like to use my aspx pages with raspberry and nginx but it seem to be > not an easy goal... > I have tried almost all "tutorials" on the web but i can not find solution > for my issue. With lots of experiments i was able to reach a poin

Re: sudden nginx hang -- restart fails, "98: Address already in use"

2014-02-05 Thread Jonathan Matthews
On 5 February 2014 18:53, dwirth wrote: > Hello, all. > > About an hour ago, out of the blue, my server stopped responding to webpage > requests. We are using nginx + php-fpm on RHEL6. > > # service nginx status > nginx (pid 31600) is running... > > # service nginx restart > Stopping nginx:

Re: nginx -> Dns server ?

2014-02-01 Thread Jonathan Matthews
On 31 January 2014 20:35, Larry wrote: > I just read that nginx has a resolver. > Will it be able to replace our powerdns which just enables the basics ds > stuffs ? (lookup + ttl as usual) No. On 1 February 2014 07:38, Larry wrote: > Maybe this will make it : > https://github.com/agentzh/lua-r

Re: Launching Excel in a production web server on a Mac

2014-01-28 Thread Jonathan Matthews
To say that you've not given us sufficient information to help you debug your problem would perhaps be biggest understatement I've yet seen in 2014. Seriously, chap - "I can't open my spreadsheet in nginx" ... are you /really/ expecting anyone to be able to help from that minimal (if not totally n

Re: X-Frame-Options: Nginx includes header twice

2014-01-28 Thread Jonathan Matthews
On 28 January 2014 11:04, Some Developer wrote: > If I could set arbitary headers in > Django then I could do it all there I know nothing about Django, but this would seem to be what you're asking for: https://docs.djangoproject.com/en/1.6/ref/request-response/#setting-header-fields J

Re: nginx seems to proxy only http GET

2014-01-27 Thread Jonathan Matthews
On 27 January 2014 17:24, Matthias Richter wrote: > Hi, > > I'm using nginx to offload https to http. That works well but in my > backend only GET Requests seem to get through. For all POST, PUT and > DELETE I only receive a Status 400 with conten "HTTP method POST is not > supported by this URL".

Re: X-Frame-Options: Nginx includes header twice

2014-01-27 Thread Jonathan Matthews
On 27 January 2014 02:49, Some Developer wrote: > Seems a bit strange to me that an application framework sets HTTP headers. > Surely this should be left to the HTTP server? What are other peoples > opinions on this? There are many instances where the application is the most knowledgable layer re

Re: Understanding location blocks and try files

2014-01-22 Thread Jonathan Matthews
On 22 January 2014 20:36, Francis Daly wrote: > On Wed, Jan 22, 2014 at 02:54:35PM -0500, AD7six wrote: > > Hi there, > >> location ~ \.php$ { >> location ~* \.(?:manifest|appcache|html?|xml|json)$ { > >> A valid response where the url is a file: >> >> $ curl -i http://nginx.dev/foo.json >

Re: Understanding location blocks and try files

2014-01-22 Thread Jonathan Matthews
On 22 January 2014 18:31, AD7six wrote: > What confuses me is why this example is a 404: > >> curl -i http://nginx.dev/apples.json >> HTTP/1.1 404 Not Found >> Server: nginx/1.4.4 > > As can be seen in the log [3] there is an invalid response from /index.php. > If I disable the location block addi

Re: Nested location block for merging config returns 404?

2014-01-21 Thread Jonathan Matthews
On 21 January 2014 13:59, WheresWardy wrote: >> Your line >> >> location \.(txt|css) { >> >> looks like a regex, but you're not telling nginx it /is/ a regex. I >> wouldn't expect anything to work until you fix that. > > Apologies, that was a typo during simplification of my config. I do indeed

Re: Nested location block for merging config returns 404?

2014-01-21 Thread Jonathan Matthews
On 21 January 2014 13:40, WheresWardy wrote: > I don't think it's a regex issue, because if I add an additional proxy_pass > inside the nested location block, I then get a valid request. Additionally, > any headers set inside the outer location block don't appear, but then if I > duplicate them in

Re: Nested location block for merging config returns 404?

2014-01-21 Thread Jonathan Matthews
On 21 January 2014 13:29, WheresWardy wrote: > I just get a 404 returned for the previously workings URLs: > > location ~ /(dir1/)?dir2/ { > location \.(txt|css) { > add_header X-My-Static value2; > } > add_header X-My-Header value1; > proxy_pass http://myproxy; > } > > Can location bl

Re: Help required in Setting up FTP Load Balancer in NGINX-

2014-01-21 Thread Jonathan Matthews
On 21 January 2014 06:56, tilde...@gmail.com wrote: > I required help to configure FTP Load balancer in NGINX. > > Can you all please help me with the necessary steps or any link which > explains the same. > > Note: My incoming FTP request will come in FTP protocol only. We cannot > configure FTP

Re: Decompressing a compressed response from upstream, applying transformations and then compressing for downstream again

2014-01-20 Thread Jonathan Matthews
On 20 January 2014 14:34, Makailol Charls wrote: > Hello Maxim, > > Would you suggest the code change to achieve this? Instead of forking your own incompatible nginx version, I'd be tempted to test this out: Turn gzip on. Always remove the Accept-Encoding header from the proxied request. Perform

Re: duplicate Vary: Accept-Encoding header

2014-01-19 Thread Jonathan Matthews
On 20 January 2014 04:54, Makailol Charls wrote: > I use nginx/1.4.4 with gunzip = on and gzip_vary = on. This leads to a > duplicate Vary Header. [snip] > This issue is in standard ngx_http_header_filter_module so can anyone > suggest solution? Quick question: other than looking untidy, what's t

Re: Images Aren't Displaying When Perl Interpreter Is Enabled

2014-01-16 Thread Jonathan Matthews
At first, pre-coffee glance, I suspect people will be better placed to help you if you provide some examples (redacted if necessary) of URIs that work and URIs that don't work ... ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/li

Re: Dynamic ssl certificate ? (wildcard+ multiple different certs)

2014-01-09 Thread Jonathan Matthews
On 9 January 2014 16:28, Larry wrote: > I would like to be able to "load" the right cert according to the cookie set > and request uri. > A sort of dynamic setting. > So, what is the workaround I could use to avoid creating one file per new > (self-signed)certificate issued ? Your problem is that

Re: Nginx as reverse Proxy, remove X-Frame-Options header

2014-01-09 Thread Jonathan Matthews
On 9 January 2014 12:24, nano wrote: > I share your opinion regarding nginx documentation. It is woeful. Sorry chap - I didn't say that and I don't think that. There may well be some specific target audiences not well served by the aggregate of the current (psuedo-)documentation sources, but that

Re: Nginx as reverse Proxy, remove X-Frame-Options header

2014-01-09 Thread Jonathan Matthews
On 9 January 2014 11:57, Maxim Dounin wrote: > Hello! > > On Thu, Jan 09, 2014 at 10:21:43AM +, Jonathan Matthews wrote: > >> On 9 January 2014 10:03, basti wrote: >> > Hello, >> > >> > I have a closed-source Webapp that run on an IIS-Webserver

Re: Nginx as reverse Proxy, remove X-Frame-Options header

2014-01-09 Thread Jonathan Matthews
On 9 January 2014 10:03, basti wrote: > Hello, > > I have a closed-source Webapp that run on an IIS-Webserver and send a > "X-Frame-Options: SAMEORIGIN" header. > I also have to implement this Webapp in my own, Frame based Application. > > So I try to use nginx as a reverse Proxy, but the X-Frame-

Re: proxy_pass check if 404, and return 404

2014-01-07 Thread Jonathan Matthews
On 7 January 2014 23:57, Jonathan Matthews wrote: > The *only* context I can see this being even slightly useful is where > you are concerned about the unacceptably large size of the upstream > server's 404 page. > > If this isn't your problem, I don't understa

Re: proxy_pass check if 404, and return 404

2014-01-07 Thread Jonathan Matthews
The *only* context I can see this being even slightly useful is where you are concerned about the unacceptably large size of the upstream server's 404 page. If this isn't your problem, I don't understand what you're trying to solve. ___ nginx mailing li

Re: Very slow dns lookup using proxy_pass

2014-01-06 Thread Jonathan Matthews
On 6 January 2014 20:34, justink101 wrote: > Consistently slow DNS lookups from > nginx I *really* don't think you've demonstrated anything that points to that conclusion. Do some tcpdump'ing. Show the data. Show your working. ;-) J ___ nginx mailing

Re: Very slow dns lookup using proxy_pass

2014-01-03 Thread Jonathan Matthews
On 4 January 2014 03:42, justin wrote: > I am seeing very slow DNS lookup times ( > 2 seconds ) using proxy_pass, > even though dig response times on the server are quick [snip] > Any ideas why this is so slow, and solutions? Please demonstrate a slow request, and show the data that leads you to

Re: Using 127.0.0.1 in resolver

2013-12-20 Thread Jonathan Matthews
On 20 December 2013 23:20, justin wrote: > Using: > > resolver 127.0.0.1 valid=300s; > > Does not work. I assume this would simply uses the DNS servers listed in > /etc/resolv.conf? Your assumption is wrong. You'd need to be running a local DNS resolver for that config to work. _

Re: Optimizing NGINX TLS Time To First Byte (TTTFB)

2013-12-17 Thread Jonathan Matthews
On 17 December 2013 08:46, Lukas Tribus wrote: > Hi Adam, > > Thanks, this is very helpful. Are you trying to upstream the record size > patch? > > What I don't get from your patch, it seems like you are hardcoding the > buffer to 16384 bytes during handshake (line 570) and only later use a > 1400

Re: sent_http_HEADER Volatile under Nginx 1.2.4

2013-12-16 Thread Jonathan Matthews
On 16 December 2013 12:38, Paul Taylor wrote: > Hi Maxim, > > Ok, thanks for the clarification. > > So to confirm, we are looking for the value of the sent header from the > upstream, to identify whether the content should be served from the cache, > or the upstream. Does this therefore mean that

Re: Proxy_cache or direct static files ?

2013-12-16 Thread Jonathan Matthews
On 16 December 2013 10:47, Larry wrote > Did i understand something wrong ? Yes. Proxy cache is for storing the response of an upstream HTTP server whose requests you're proxying, so that you don't have to ask the potentially slow(er) upstream server the next time an identical request comes in.

Re: hello

2013-12-15 Thread Jonathan Matthews
On 15 December 2013 15:21, nginx14 wrote: > Hello, I have a nginx server is enabled. > And I have a file called htaccess > The file should cause to allowing accessed only from Israel. > > But the file does not work, > I realized that it is related to nginx only. Nginx does not use htaccess files

Re: Maintenance mode for all but my ip

2013-12-07 Thread Jonathan Matthews
On 7 December 2013 15:19, B.R. wrote: > Hello, > > > On Sat, Dec 7, 2013 at 4:10 PM, Jonathan Matthews > wrote: >> >> > rewrite ^.*$ $target #Redirecting all traffic according to >> > map-assigned >> >> I don't particularly like ^

Re: Maintenance mode for all but my ip

2013-12-07 Thread Jonathan Matthews
On 7 December 2013 14:58, B.R. wrote: > I am new to the use of maps, but I suppose it would fit perfectly, using > core variables such as the binary IP address: [snip] > rewrite ^.*$ $target #Redirecting all traffic according to map-assigned I don't particularly like ^^^ this. It seems like a

Re: Force ppt(x) and pps(x) to be downloaded instead of being served as plain text

2013-12-06 Thread Jonathan Matthews
On 6 December 2013 10:54, Lorenzo Raffio wrote: > Nginx 1.5.7, ppt(x) and pps(x) are served as plain text (of course with > strange characters) by nginx. > > How can I have them always as a download? Probably by setting the appropriate MIME type up: http://wiki.nginx.org/HttpCoreModule#types ___

Re: NGINX Location Matching Question - Case insensitive matching at the start of a URI

2013-12-05 Thread Jonathan Matthews
On 5 December 2013 23:29, Brad Van Sickle wrote: > > Hi, > > I'm running in a somewhat urgent issue where I have to make a > case-insensitive location match on a URI segment that is at the > beginning of the URI. > > so I want to match > > /uri-segment/* > /URI-segment/* > /Uri-Segment/* > etc.. >

Re: Rewrite URL with parameters

2013-12-05 Thread Jonathan Matthews
On 5 December 2013 17:09, Raphael R. O. wrote: > Hi guys, > > I'm trying to rewrite an url with a few parameters, but unsuccessfully. You're almost there ;-) > What i already tried: > > rewrite > ^/category-body/categories/promotional(.*)utm_source=PromoCode&utm_medium=AddPromo&utm_campaign=Prom

Re: nginx - workers segfaulting

2013-12-04 Thread Jonathan Matthews
On 4 December 2013 09:36, Lukas Tribus wrote: > Agreed, the configuration workaround is viable; but the problem lies > in the actual troubleshooting. Coming to this conclusion takes time, > time the users don't have when the workers are crashing. Its not always > possible to rollback the configura

Re: rewrite or return directives for discuz v3.1

2013-12-04 Thread Jonathan Matthews
On 4 December 2013 07:54, r004 wrote: > hello; > I want to write a block to put in my VHOST config file. > i want > 1. if there is "/install/index.php/" in the link. it shouldbe removed from > the link. > 2. if the format is like /uc_server/blab.php/uc_server/blahblah ===it > should change to===>

Re: Need to compare client certificate CN with an entry in /etc/hosts

2013-11-26 Thread Jonathan Matthews
On 26 November 2013 22:48, Radha Venkatesh (radvenka) wrote: > Jonathan, > > The requirement is that we match an existing hostname entry in /etc/hosts > with the Client certificate CN (CN has to be the hostname of the client). That's not really saying anything /new/, is it? ;-) Here are some ex

Re: Need to compare client certificate CN with an entry in /etc/hosts

2013-11-26 Thread Jonathan Matthews
On 26 November 2013 19:19, Radha Venkatesh (radvenka) wrote: > we have to match the client certificate CN with an > existing entry in /etc/hosts. Please could you specify *exactly* what you need to ensure matches? It's not obvious (to me!), given what you wrote and given the minimal information a

Re: limit_req and limit_conn in rewrite modules if statement

2013-11-18 Thread Jonathan Matthews
On 18 November 2013 20:57, Nam wrote: > To elaborate a bit more, in a single location I may end up with something > like this... > > set $Whitelisted "No"; > if ($GeoList1 = allow) { > set $Whitelisted "Yes"; > } > if ($GeoList5 = allow) { > set $Whitelisted "Yes"; > } > if ($http_user_age

Re: using uninitialized "pat" variable while logging request

2013-11-16 Thread Jonathan Matthews
On 16 Nov 2013 01:02, "Toni Mueller" wrote: > Unfortunately, there is nothing between the info (too little) and > debug log levels (too much). But it was fruitful, as I found the > problem. :) Why don't you let the list know how you fixed it, so the next person with the same problem can find the

Re: sidebar menu + directory listing

2013-11-13 Thread Jonathan Matthews
On 13 November 2013 21:35, ge...@riseup.net wrote: > Hi all, > > I'd like to achieve the following, and found nothing so far trough > research. Maybe someone could give me a pointer whether this is possible > or not. > > I'd like to use directory listing for some folders, which are made > accessib

Re: Define a proxy for Nginx

2013-11-06 Thread Jonathan Matthews
On 5 November 2013 15:25, António P. P. Almeida wrote: > Assuming you're using php-fpm or php-cgi you can set a param to pass that as > a server variable: > > fastcgi_param HTTP_PROXY 'http://proxy:myport'; > > Then you'll have a $_SERVER['HTTP_PROXY'] entry for the global $_SERVER. I don't think

Re: multiple ssl certificates within single server {} block

2013-11-05 Thread Jonathan Matthews
On 5 November 2013 13:30, Richard Kearsley wrote: > Hi > > I was wondering if there's any way to have a configuration like this? > > server > { > listen 80; > listen 443 ssl; > > ssl_certificate www.example.com.cer; > ssl_certificate_key www.example.com.

  1   2   >