Re: proxy_bind/splitting with nginx mail module for IMAP

2024-07-10 Thread Sergey A. Osokin
cross several IPs. For http this is well documented, but for > the mail module I could not find anything. Simply trying "proxy_bind" in > the mail{}-config does not yield any success, because it is forbidden in > this context. > > How would you tackle port exhaustion with ma

proxy_bind/splitting with nginx mail module for IMAP

2024-07-10 Thread Malte Schmidt via nginx
I am currently working on a setup using nginx mail module with several backends. Due to port exhaustion, I would like to do splitting of outgoing connections across several IPs. For http this is well documented, but for the mail module I could not find anything. Simply trying "proxy_bin

Re: Nginx proxy_bind failing

2020-10-31 Thread garyc...@yahoo.com
Hi Peter! The high-level problem was to install Nginx on an Asuswrt-Merlin router to reverse proxy certain websites through an established OpenVPN Split-Tunnel. To do that, I had to ensure the Nginx Workers were using a specified Source IP and/or Ephemeral Port which could be MARKed by iptables f

Re: Nginx proxy_bind failing

2020-10-31 Thread Peter Booth
Gary, This was interesting to read. There was one thing that wasn’t obvious to me however. What was the high level problem that you were solving with this specific configuration? Curiously Peter Sent from my iPhone > On Oct 30, 2020, at 3:16 PM, garyc...@yahoo.com > wrote: > > All: >

Re: Nginx proxy_bind failing

2020-10-30 Thread garyc...@yahoo.com
All: After reviewing the iptables chains workflow, I discovered that the Nginx Worker (100.64.8.236:12345) outside interface was associated with the OUTPUT chain. (192.168.0.2:12345) OUTPUT ==> (192.168.0.154:$po

Re: Nginx proxy_bind failing

2020-10-29 Thread garyc...@yahoo.com
All: I discovered a single SYN packet being sent from 192.168.0.2:12345 (nginx worker) when initiating traffic. Nothing more. # netstat -anp|grep 12345 tcp0 1 192.168.0.2:12345 172.64.163.36:443 SYN_SENT 14176/nginx: worker For whatever reason, that packet isn't show

Nginx proxy_bind failing

2020-10-29 Thread garyc...@yahoo.com
X All: I'm attempting to configure nginx to reverse proxy requests from (192.168.0.2:12345) the same Internal Host Address that it's listening from (192.168.0.2:443) on separate ports using the listen and proxy_bind directives. # /opt/sbin/nginx -v nginx version: nginx/1.19.2 (x86_6

Re: proxy_bind with hostname from /etc/hosts possible?

2017-03-17 Thread larsg
thanks for the reply. indeed, we are generating the split_clients directive on the host it's running. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,272918,273009#msg-273009 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mai

Re: proxy_bind with hostname from /etc/hosts possible?

2017-03-17 Thread Francis Daly
On Mon, Mar 13, 2017 at 10:38:12AM -0400, larsg wrote: Hi there, > is it possible to use an hostname from local /etc/hosts as proxy_bind > value? http://nginx.org/r/proxy_bind says that its argument is an address. So I'm going to say "no". > You can see our cur

proxy_bind with hostname from /etc/hosts possible?

2017-03-13 Thread larsg
Hi! is it possible to use an hostname from local /etc/hosts as proxy_bind value? In our current Background: We use nginx 1.8.1 as reverse proxy. In order to overcome the "Overcoming Ephemeral Port Exhaustion" problem (64k+ connections), we use proxy_bind to iterate over all loccally av

Re: proxy_bind

2017-01-18 Thread Jim Ohlstein
http://nginx.org/en/linux_packages.html Posted at Nginx Forum: https://forum.nginx.org/read.php?2,272031,272043#msg-272043 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: proxy_bind

2017-01-18 Thread vegetax
I am running centos 6.8 all the repo's I am trying from centos to epel just have version 1.10.2 for my OS I think I would need to use Centos 7 to use 1.11.0 Posted at Nginx Forum: https://forum.nginx.org/read.php?2,272031,272042#msg-272042 ___ nginx ma

Re: proxy_bind

2017-01-17 Thread Francis Daly
On Tue, Jan 17, 2017 at 06:29:34PM -0500, vegetax wrote: Hi there, > so following the link you have posted my version does not support > proxy_bind? Incorrect. The documentation says """ > This directive appeared in version 1.9.2. """ It also says

Re: proxy_bind

2017-01-17 Thread vegetax
so following the link you have posted my version does not support proxy_bind? # My Version nginx version: nginx/1.10.2 syntax: proxy_bind address [transparent] | off; Default:— Context:stream, server This directive appeared in version 1.9.2. Makes outgoing connections to a

Re: proxy_bind

2017-01-17 Thread Francis Daly
On Tue, Jan 17, 2017 at 05:24:43PM -0500, vegetax wrote: Hi there, > Hi, I am getting "invalid number of arguments" every time I add proxy_bind > $remote_addr transparent to my configs below can someone help and let me > know what I am missing. Thx My guess: compare

proxy_bind

2017-01-17 Thread vegetax
Hi, I am getting "invalid number of arguments" every time I add proxy_bind $remote_addr transparent to my configs below can someone help and let me know what I am missing. Thx stream { upstream splunk_backend { server 10.10.10.31:514; server 10.10.10.32:514; }

Re: how can i bind proxy_bind to interface name?

2016-03-14 Thread Maxim Dounin
Hello! On Mon, Mar 14, 2016 at 05:12:29AM -0400, vps4 wrote: > i use proxy_bind with interface ip address, it works fine > but i need bind to interface name, for example: ppp0 > but it not worked, how can i do? This is not supported. -- Maxim Dounin http://

how can i bind proxy_bind to interface name?

2016-03-14 Thread vps4
i use proxy_bind with interface ip address, it works fine but i need bind to interface name, for example: ppp0 but it not worked, how can i do? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,265297,265297#msg-265297 ___ nginx mailing list

Re: proxy_bind pool

2016-02-19 Thread Maxim Konovalov
Hi Frank, On 2/19/16 6:09 AM, Frank Liu wrote: > Hi, > > Is it possible to use proxy_bind to a pool of IPs? Since each IP has > a limited ephemeral ports that can be used to make outbound > connections to upstream servers, it would be help if we can use a > pool of IPs for

proxy_bind pool

2016-02-18 Thread Frank Liu
Hi, Is it possible to use proxy_bind to a pool of IPs? Since each IP has a limited ephemeral ports that can be used to make outbound connections to upstream servers, it would be help if we can use a pool of IPs for proxy_bind, or is there another workaround to have more connections to upstream

Re: How Nginx behaves with "proxy_bind" and DNS resolver with non matching ip versions between bind ip and resolved ip?

2015-01-04 Thread Maxim Dounin
Hello! On Tue, Dec 30, 2014 at 06:58:51AM -0500, shmulik wrote: > Thank you. > > So if i understood correctly: > > When i bind an ipv6 address, and the resolver returns 1 ipv4 address and 1 > ipv6 address - if the first attempted address is the ipv4 address, the > result will be an error + send

Re: How Nginx behaves with "proxy_bind" and DNS resolver with non matching ip versions between bind ip and resolved ip?

2014-12-30 Thread shmulik
Thank you. So if i understood correctly: When i bind an ipv6 address, and the resolver returns 1 ipv4 address and 1 ipv6 address - if the first attempted address is the ipv4 address, the result will be an error + sending back to the client a "500 Internal Server Error"? In such scenarios, is the

Re: How Nginx behaves with "proxy_bind" and DNS resolver with non matching ip versions between bind ip and resolved ip?

2014-12-29 Thread Maxim Dounin
Hello! On Mon, Dec 29, 2014 at 02:36:55AM -0500, shmulik wrote: > Hello, > I'm working with the proxy module, and with a dns resolver configured. The > traffic i'm using is both ipv4 and ipv6. > > I'm trying to understand Nginx behavior when using "proxy_bind

How Nginx behaves with "proxy_bind" and DNS resolver with non matching ip versions between bind ip and resolved ip?

2014-12-28 Thread shmulik
Hello, I'm working with the proxy module, and with a dns resolver configured. The traffic i'm using is both ipv4 and ipv6. I'm trying to understand Nginx behavior when using "proxy_bind" directive and when the resolver returns both ipv4 and ipv6 addresses. In particul