Re: Tproxy support for IP transparency

2021-06-07 Thread bouvierh
Thanks for the reply! I have looked at it, however it looks like this is intended to make proxy transparent from upstream/backend perspective: It is used so upstream server can see client address not proxy address. I am looking to do the opposite, I would like to make proxy transparent from the

Tproxy support for IP transparency

2021-06-04 Thread bouvierh
Hello, When my application connects to a sever, I am intercepting the request and routing it to a nginx process located on the same host (listening to 127.0.0.1:8883). The interception need to be transparent, so IP tables does that well. Now the issue is restoring the original destination. This wo

Re: How to install nginx-module-njs on alpine

2021-06-02 Thread bouvierh
Thank you! Posted at Nginx Forum: https://forum.nginx.org/read.php?2,291725,291734#msg-291734 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

How to install nginx-module-njs on alpine

2021-06-02 Thread bouvierh
Hello, How do I install the javascript module on Alpine? I have tried: "apk add nginx-module-njs" but that module is not available. ERROR: unable to select packages: nginx-module-njs (no such package): Thanks, Hugues Posted at Nginx Forum: https://forum.nginx.org/read.php?2,291725,291725#msg-

Caching auth_request!

2021-04-29 Thread bouvierh
Hello, I am caching the result of auth_request. This is the simplified code: proxy_cache_path /var/cache/nginx levels=1 keys_zone=token_cache:1m max_size=2m inactive=60m use_temp_path=off; location /devices { auth_request /auth; auth_request

How to create a share variable between 2 server blocks

2021-04-12 Thread bouvierh
Hello! On a previous post I asked how I could get give a token to my Nginx server with having to put it in plain text in the config. One suggestion was to send to token in a request and use the javascript module to extract it. This is what I have been trying: load_module modules/ngx_http_js_module

Re: Plain text token in config!

2021-04-08 Thread bouvierh
Thanks for your help!! Are there any other ways that I might have missed? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,291202,291206#msg-291206 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Plain text token in config!

2021-04-08 Thread bouvierh
Thanks for your help!! Are there any other ways that I might have missed? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,291202,291205#msg-291205 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Plain text token in config!

2021-04-08 Thread bouvierh
Hello! I currently use Nginx as a reverse proxy for my backend services. Nginx authenticates itself to the backend services using a Token that is generated by a process every 10 minutes and that process is writing the token in the config file and reloading nginx regularly: location / { prox

arm32v7/nginx:1.19.7-alpine crashing silently

2021-03-03 Thread bouvierh
My system is: Hardware: https://www.moxa.com/en/products/industrial-computing/arm-based-computers/uc-8100a-me-t-series#specifications CPU: Armv7 Cortex-A8 1 GHz RAM: 1 GB DDR3 Docker: Docker version 3.0.13+azure, build dd360c7c0de8d9132a3965db6a59d3ae74f43ba7 OS: Debian 9 stretch I am trying to ru

Getting intermediate client certificates with custom module

2021-02-04 Thread bouvierh
Hello! I am using nginx in reverse proxy mode. When nginx proxy pass the certificates upstream, I would also like to pass the full cert chain along with it. This is for an industrial application and I don't have full control on why it is done this way. The only thing I can tamper with is Nginx.

Re: upstream SSL certificate does not match "x.x.x.x"

2020-10-29 Thread bouvierh
I worked! Thank you so much! Posted at Nginx Forum: https://forum.nginx.org/read.php?2,289813,289843#msg-289843 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

upstream SSL certificate does not match "x.x.x.x"

2020-10-27 Thread bouvierh
Hello, I have a configuration an nginx proxy server "NGINX_SERVER" as the following: listen 443 ssl default_server; chunked_transfer_encoding on; ssl_certificateserver.crt; ssl_certificate_keyprivate_key_server.pem; ssl_client_certificate trust