Nginx as reverse proxy - proxy_ssl_x questions

2023-11-18 Thread Mark
; proxy_ssl_session_reuse off; Or they would work ONLY if proxy_pass is pointed to an "https://";? Best wishes, Regards. Mark. ___ nginx mailing list nginx@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx as reverse proxy - proxy_ssl_x questions

2023-11-19 Thread Mark
/unneeded directive there? Thanks once again, Regards. Mark. Maxim Dounin , 19 Kas 2023 Paz, 03:05 tarihinde şunu yazdı: > Hello! > > On Sat, Nov 18, 2023 at 01:54:21PM +0300, Mark wrote: > > > Hello there. > > > > Having a proxy directive like; > > > > locatio

Re: NGINX to Join F5

2019-03-12 Thread Mark Moseley
On Mon, Mar 11, 2019 at 1:16 PM Igor Sysoev wrote: > Today is an important day for NGINX. We signed an agreement to join to F5. > > The NGINX team and I believe this is a significant milestone for our > open source technology, community, and the company. > > F5 is committed to our open source mis

Re: LiteSpeed 5.4 vs Nginx 1.16 benchmarks

2019-08-18 Thread Mark Mielke
Any idea how they did what? Misconfigure Nginx and use an obsolete distro version of Nginx? 😁 On Sat., Aug. 17, 2019, 1:17 p.m. Christos Chatzaras, wrote: > Today I read this post: > > http://www.webhostingtalk.com/showthread.php?t=1775139 > > In their changelog ( > https://www.litespeedtech.co

lzw compression

2019-08-23 Thread Mark Lybarger
/space on the device. I see the option to enable gzip compression, but that's not going to work for me. Any help or tips would be appreciated on possible solutions for me. I'd like to transparently decompress the traffic before it gets to my application layer. Tha

rewrite ssl proxy retain query string parms

2020-08-13 Thread Mark Lybarger
I'm using rewrite to change some tokens in the url path, and am using ssl proxy to send traffic to a downstream server. if i post to https://myhost/start/foo/213/hello, the request gets to https://client-service-host/client/service/hello/213 using the needed certificate. great. my question is, ho

transforming static files

2020-08-31 Thread Mark Lybarger
i have a bunch of files on a local filesystem (ok, it's NAS) that I serve up using an nginx docker image, just pointing the doc root to the system i want to share. that's fine for my xml files. the users can browse and see then on the filesystem. i also have some .bin files that can be converted

we need an explicit max_fails flag to allow origin error through?

2016-09-15 Thread Mark McDonnell
eters are ignored, and such a server will never be considered unavailable" ​Does​ any one have any further insights here? Thanks. M. -- Mark McDonnell | BuzzFeed | Senior Software Engineer | @integralist <https://twitter.com/integralist> https://keybas

What is "seconds with milliseconds resolution"

2016-09-21 Thread Mark McDonnell
Hello, I'm not sure I really understand the `msec` embedded variable. I'm getting the value back as `1474452771.178` It's described as "seconds with milliseconds resolution", but I'm not sure what that really means (maths isn't a strong skill for me). How do I convert the number into seconds? S

Re: What is "seconds with milliseconds resolution"

2016-09-21 Thread Mark McDonnell
Thanks Santiago, that actually makes perfect sense. Think I just needed the words read back to me in a different order or something lol ¯\_(ツ)_/¯ On Wed, Sep 21, 2016 at 11:39 AM, Santiago Vila wrote: > On Wed, Sep 21, 2016 at 11:19:43AM +0100, Mark McDonnell wrote: > > > I'm

nginx on Windows

2018-07-10 Thread Kevin Mark
major revision was in 2012. For instance, is the 1024 connection limit still around and would nginx on Windows still be characterized as beta software? Thanks, Kevin Mark ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo

Re: 502 bad gateway error with php5-fpm on Debian 7

2013-02-21 Thread Mark Alan
On Thu, 21 Feb 2013 12:07:41 +0100, GASPARD Kévin wrote: > To be honest I don' know. When I've setup this configuration (more > than 1 year ago I think) It seems that you are trying to force a non Debian directory structure into a Debian one. Show us the result of: nginx -V 2>&1|sed 's,--,\n--

Re: nginx + php5-fpm on Debian

2013-02-21 Thread Mark Alan
On Thu, 21 Feb 2013 14:07:45 +0100, GASPARD Kévin wrote: > > nginx -V 2>&1|sed 's,--,\n--,g' > nginx version: nginx/1.2.1 Ok, this seems pretty standard for Debian. > > find /etc/nginx/ -name *.conf|xargs -r grep -v '^\s*\(#\|$\)' > /etc/nginx/conf.d/koshie-island.koshie.fr.conf:server { > /etc/

Re: Default error_page for multiple vhosts

2013-02-22 Thread Mark Alan
On Fri, 22 Feb 2013 09:32:33 +0100, Alexander Nestorov wrote: > I'm trying to set a default error_page for my entire nginx server (as > http { > error_page 404 /var/www/default/404.html; > server { > root /var/www/mydomain.com/; > } > } > Is there any other way I could achieve

Problem with auth_basic + proxy_pass + transmission-daemon

2013-02-23 Thread Mark Alan
Hello list, While using nginx 1.3.12 + transmission-daemon 2.77 + Ubuntu 12.04, # /etc/transmission-daemon/settings.json ... "rpc-bind-address": "127.0.0.1", "rpc-port": 9091, "rpc-url": "/transmission/", ... ls -l /etc/nginx/.htpasswdtrans -rw-r- 1 root www-data 64 .

Re: "nginx does not suck at ssl"

2013-03-11 Thread Mark Alan
On Sat, 9 Mar 2013 21:55:13 -0800, Grant wrote: > After reading "nginx does not suck at ssl": > > http://matt.io/entry/ur > > I'm using: > > ssl_ciphers > ALL:!aNULL:!ADH:!eNULL:!MEDIUM:!LOW:!EXP:!kEDH:RC4+RSA:+HIGH; Some of us use the following to mitigate BEAST attacks: ssl_ciphers ECDHE-RSA

Re: Need some help with rewrite rule translation

2013-06-14 Thread Mark Alan
On Fri, 14 Jun 2013 09:58:12 +0200, mailinglis...@simonhoenscheid.de wrote: > Both solutions look interesting, I will have a look on it. We use been successfully the "return no content=204" opiton: location = /favicon.ico { access_log off; log_not_found off; expires 30d; try_files /sites/$server

Ignore broken SSL servers in config

2013-06-19 Thread Mark Moseley
TL;DR: Any nginx setting to say 'if a vhost's ssl settings are broken, skip it and don't fail to start' ? I've certainly RTFM'd this and peered at the source, but I figured I might as well throw it out there, in case there's some hidden setting I've missed. I'm building a reverse proxy config for

Re: Ignore broken SSL servers in config

2013-06-20 Thread Mark Moseley
On Thu, Jun 20, 2013 at 2:00 AM, Maxim Dounin wrote: > Hello! > > On Wed, Jun 19, 2013 at 11:06:19AM -0700, Mark Moseley wrote: > > > TL;DR: > > Any nginx setting to say 'if a vhost's ssl settings are broken, skip it > and > > don't fail to start&

Root ignored for "location = /"?

2014-02-06 Thread Mark James
problems if I instead use "location /". Can anyone suggest a reason or a resolution? Thanks. Mark ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Root ignored for "location = /"?

2014-02-06 Thread Mark James
On 07/02/14 02:23, Valentin V. Bartenev wrote: The reason is documented:http://nginx.org/r/index "It should be noted that using an index file causes an internal redirect ..." Thanks very much for this Valentin. I've been stuck on this for a while. The solution was to replace the "location =

Issue from forum: SSL: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

2014-04-29 Thread Mark Moseley
I'm running into a lot of the same error as was reported in the forum at: http://mailman.nginx.org/pipermail/nginx-devel/2013-October/004385.html > SSL: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac I've got an nginx server doing front-end SSL, with the upstream

Re: Issue from forum: SSL: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

2014-04-29 Thread Mark Moseley
On Tue, Apr 29, 2014 at 4:36 PM, Lukas Tribus wrote: > Hi Mark, > > > > I'm running into a lot of the same error as was reported in the forum > > at: > http://mailman.nginx.org/pipermail/nginx-devel/2013-October/004385.html > > > >> SSL: error:1408

Re: Issue from forum: SSL: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

2014-05-07 Thread Mark Moseley
On Wed, Apr 30, 2014 at 12:55 AM, Lukas Tribus wrote: > Hi, > > > >> The fix is already in OpenBSD [4], Debian and Ubuntu will probably ship > the > >> patch soon, also see [5] and [6]. > > > > Oh, cool, that's good news that it's upstream then. Getting the patch > > to apply is a piece of cake.

Re: ssl proxys https web server is very slow

2014-06-20 Thread Mark Moseley
On Fri, Jun 20, 2014 at 5:20 AM, Maxim Dounin wrote: > Hello! > > On Fri, Jun 20, 2014 at 10:51:38AM +0200, Yifeng Wang wrote: > > > Hi, It's my first time using NGINX to proxy other web servers. I set a > > variable in location, this variable may be gotten in cookie or args. if > > I use it dire

Re: Google dumps SPDY in favour of HTTP/2, any plans for nginx?

2015-03-18 Thread Mark Mielke
ream is actually a „real“ internet-server > (that happens to do http/2). > > Somebody trying to build the next „CloudFlare/Akamai/WhateverCDN“? > ;-) > > Is a world possible/imaginable that only does http/2? > > > Rainer > > >

Re: Google dumps SPDY in favour of HTTP/2, any plans for nginx?

2015-03-18 Thread Mark Mielke
likely that you are correct in terms of *current* potential. That is, I think this technology is too new for people to understand it and really think about how to leverage it. It sounds like you don't even know about it... On Wed, Mar 18, 2015 at 10:45 AM, Valentin V. Bartenev wrote: > On We

NGINX gateway problem

2015-03-30 Thread Mark Asysteo
Hey! i got problem with my ruby site http://www.asysteo.pl it was working amazing and today i made PHP update i got this error. I double checked all 9000 port connections but its still active. any smart ideas from guru's on this forum? ;) -- Posted via http://www.ruby-forum.com/. __

Re: Free O’Reilly animal book about nginx

2015-07-31 Thread Mark Mielke
I requested it a few days ago. It was a little confusing. The link was circular... You get a link to request a copy which gets you a link to request a copy. But the email had a pdf attachment and that was the book if I recall correctly... I really like nginx and the thinking of the people behind it

Re: TCP hostname routing using SNI

2016-06-17 Thread Mark Moseley
On Fri, Jun 17, 2016 at 2:48 PM, jordan.davidson < nginx-fo...@forum.nginx.org> wrote: > We need TCP (not http) hostname routing for an environment we are creating > using k8s and ingress with the nginx ingress controller. We are trying to > figure out if there is a way to create an nginx server w

access logs to parquet

2024-01-11 Thread Mark Lybarger
hi, i'm using nginx as a proxy to api gateway / lambda services. each day, i get 500mb of gzipped access logs from 6 proxy servers. i want to load these nginx access logs into a data lake that takes parquet format as input. my question is fairly general, is there something that easily converts

Re: nginx Digest, Vol 178, Issue 2

2025-07-07 Thread Mark Mielke
d to understand them. -- Mark Mielke On Mon, Jul 7, 2025, 8:07 a.m. Tobias Damisch wrote: > Hi Matthew, > > I can still remember when I was a n00b, so I'll show some mercy here. > > 1.) Learn how to email. You can start by providing a meaningful and > descriptiv

Re: nginx Digest, Vol 178, Issue 2

2025-07-11 Thread Mark Mielke
On Tue, Jul 8, 2025 at 1:25 AM Ian Hobson wrote: > I do hope they taught you that dividing by zero was impossible/ did not > work/was not allowed. > > On 08/07/2025 04:46, Mark Mielke wrote: > > like how in primary grade school they might teach that divided by zero > &

Re: Cross-compiling Nginx for ARM?

2013-04-17 Thread W-Mark Kubacki
been integrated into Linux. [7] http://mark.ossdl.de/en/2010/04/howto-extend-the-sheevaplug-by-esata.html If I were you I would go for a Mikrotik Routerboard (the RB951G-2HnD is excellent except its lack of 5GHz wifi). That are MIPS machines, though. ;-) -- Mark _

Re: "A" Grade SSL/TLS with Nginx and StartSSL

2013-10-20 Thread W-Mark Kubacki
128:!aNULL:!PSK:!SRP' … Include PSK and/or SRP if you need them, which almost none webserver operator does. Optionally with !ECDH if you don't trust the origin of the random seed values for NIST curves. -- Mark http://mark.ossdl.de/ [1] http://e

Re: Dynamic ssl certificate ? (wildcard+ multiple different certs)

2014-01-09 Thread W-Mark Kubacki
Certificates are selected and presented by the server before the client even has the chance to send any cookies, the latter happening after the »TLS handshake«. 2014/1/9 Larry : > Hello, > > Here is my current conf > > server { > listen 443; > > server_name ~^(.*)

Re: Header Vary: Accept-Encoding - security risk ?

2014-05-29 Thread W-Mark Kubacki
ists if »/config« were requested with the intend to get »/config.css«. As you can see, even this example is far-fetched. -- Mark ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

View the client's HTTP protocol?

2017-02-10 Thread Mark McDonnell via nginx
I know the $status variable shows you the upstream/origin's HTTP protocol (e.g. HTTP/1.1 200) but is there a way to view the protocol the client made the request with? For example we've seen some S3 errors returned with a 505 which suggests the user made a request with some strange HTTP protocol,