Hello! On Wed, Oct 07, 2015 at 08:29:22AM -0400, esxgx wrote:
> Maxim Dounin, > > Thanks for your prompt reply~ ^ ^ > Actually In my script, the tcp stream is encrypted and disguised as a normal > chunked downloaded file to pass the firewall, and I need to control every > chunk(the stream is encrypted in blocks, and a chunk represents a block) so > that there is no specific protocol identification. > > If the script cannot control the process of chunked encoding, it should have > some identification so that the firewall can update itself to find out the > proxy stream. > > There are many web hostings that use nginx + php-fpm, so I wrote the script > in PHP. > > Does that mean I cannot use nginx as a web server in this way? > > Nginx is an excellent web server with good proformance, I'm not willing to > give up this server. You are misusing chunked encoding. It's not expected to provide message boundaries, it only provides a way to know if a response body is complete or not. Additionally, chunked encoding is expected to be removed (and re-applied if needed) by any HTTP intermediate along the way of the response. That is, your approach isn't going to work in the real world, regardless of whether you'll be able to do this with nginx or not. -- Maxim Dounin http://nginx.org/ _______________________________________________ nginx mailing list [email protected] http://mailman.nginx.org/mailman/listinfo/nginx
