Slow startup, reload and config test with 40k server blocks

2019-03-26 Thread ops42
I'm testing an nginx config with 40k server blocks acting as proxies (proxy_pass). Each server block has its own proxy_cache_path. The "nginx -t" takes about 5 minutes to complete. The config test duration is even exponential if I add more server blocks and proxy_cache_path. Changing any parameter

Uneven load distribution inside container

2019-03-26 Thread BharathShankar
I am trying out the sample gRPC streaming application at https://github.com/grpc/grpc/tree/v1.19.0/examples/python/route_guide. I have modified the server to start 4 grpc server processes and correspondingly modified the client to spawn 4 different processes to hit the server. Client and server

Fw:Routing problems through cookies

2019-03-26 Thread 姜伯洋
map $cookie_wpt_debug $forward_to_gray { # When default is not specified, the default resulting value will be an empty string. default ""; 9cb88042edc55bf85c22e89cf880c63a 10.105.195.11; } if ( $forward_to_gray != '' ) { proxy_pass http://$forward_to_gray$request_

Re: nginx-1.15.10

2019-03-26 Thread Maxim Dounin
Hello! On Tue, Mar 26, 2019 at 06:16:39PM +0100, A. Schulze wrote: > Am 26.03.19 um 17:50 schrieb Maxim Dounin: > > The difference is that in 1.15.10 you can put a certificate itself > > into a variable. Quoting docs: > > > > : The value data:$variable can be specified instead of the file > >

Re: nginx-1.15.10

2019-03-26 Thread A. Schulze
Am 26.03.19 um 17:50 schrieb Maxim Dounin: > The difference is that in 1.15.10 you can put a certificate itself > into a variable. Quoting docs: > > : The value data:$variable can be specified instead of the file > : (1.15.10), which loads a certificate from a variable without using > : int

Re: nginx-1.15.10

2019-03-26 Thread Maxim Dounin
Hello! On Tue, Mar 26, 2019 at 09:49:40PM +0530, Anoop Alias wrote: > On Tue, Mar 26, 2019 at 7:55 PM Maxim Dounin wrote: > > > Changes with nginx 1.15.10 26 Mar > > 2019 > > > > > > *) Feature: loading of SSL certificates and secret keys from variables

njs-0.3.0

2019-03-26 Thread Dmitry Volyntsev
Hello, I'm glad to announce a new release of NGINX JavaScript module (njs). This release proceeds to extend the coverage of ECMAScript specifications and modules functionality. - Added initial ES6 modules support: : // module.js : function sum(a, b) {return a + b} : export default {sum}; : // s

Re: nginx-1.15.10

2019-03-26 Thread Anoop Alias
On Tue, Mar 26, 2019 at 7:55 PM Maxim Dounin wrote: > Changes with nginx 1.15.10 26 Mar > 2019 > > > *) Feature: loading of SSL certificates and secret keys from variables > The doc says: Since version 1.15.9, variables can be used in the file name when

Re: [nginx-announce] nginx-1.15.10

2019-03-26 Thread Kevin Worthington
Hello Nginx users, Now available: Nginx 1.15.10 for Windows https://kevinworthington.com/nginxwin11510 (32-bit and 64-bit versions) These versions are to support legacy users who are already using Cygwin based builds of Nginx. Officially supported native Windows binaries are at nginx.org. Annou

Re: Protect against php files being send as static files

2019-03-26 Thread Olaf van der Spek
Ian Hobson Wrote: --- > If you place your php files outside the main root directory, and > then do something like this That'd good but unfortunately not common practice. It'd be nice to have better safety by default. Posted at Nginx Forum: http

nginx-1.15.10

2019-03-26 Thread Maxim Dounin
Changes with nginx 1.15.10 26 Mar 2019 *) Change: when using a hostname in the "listen" directive nginx now creates listening sockets for all addresses the hostname resolves to (previously, only the first address was used). *) Feature: p

Re:nginx Digest, Vol 113, Issue 33

2019-03-26 Thread 村长
ease confirm if this achievable or supported currently with Stream mode? Below is the related config part. map $ssl_preread_server_name $backend_svr { ~^(\w+).test.com $1-tcp.default.svc.cluster.local; } limit_conn_zone $ssl_preread_server_name zone=perserver:10m; server { listen

RE: TCP connection limit on dynamic backend

2019-03-26 Thread R, Rajkumar (Raj)
Thanks for your quick response. Is there a way to delay the execution of limit_conn. Please suggest if there's a way forward on this. thanks, raj -Original Message- From: nginx On Behalf Of Roman Arutyunyan Sent: Tuesday, March 26, 2019 4:59 PM To: nginx@nginx.org Subject: Re: TCP con

Routing problems through cookies

2019-03-26 Thread 姜伯洋
map $cookie_wpt_debug $forward_to_gray { # When default is not specified, the default resulting value will be an empty string. default ""; 9cb88042edc55bf85c22e89cf880c63a 10.105.195.11; } if ( $forward_to_gray != '' ) { proxy_pass http://$forward_to_gray$request_ur

Re: TCP connection limit on dynamic backend

2019-03-26 Thread Roman Arutyunyan
Hi, On Tue, Mar 26, 2019 at 09:13:44AM +, R, Rajkumar (Raj) wrote: > Hi, > > Using nginx in TCP/Stream mode and would like to limit the number of active > connection to my backend server whereas the backend is resolved dynamically > based on the SNI header ($ssl_preread_server_name). But t

Re: Is it possible to add milliseconds in error.log and also timestamps

2019-03-26 Thread Maxim Dounin
Hello! On Tue, Mar 26, 2019 at 05:47:51AM -0400, sivak wrote: > Is it possible to add milliseconds in error.log No. > and also to include > timestamps in the output after executing below commands > > $NGINX_EXECUTABLE_FILE -I > $NGINX_EXECUTABLE_FILE -P There is no such commands. -- Maxim D

Is it possible to add milliseconds in error.log and also timestamps

2019-03-26 Thread sivak
Is it possible to add milliseconds in error.log and also to include timestamps in the output after executing below commands $NGINX_EXECUTABLE_FILE -I $NGINX_EXECUTABLE_FILE -P Posted at Nginx Forum: https://forum.nginx.org/read.php?2,283506,283506#msg-283506

TCP connection limit on dynamic backend

2019-03-26 Thread R, Rajkumar (Raj)
Hi, Using nginx in TCP/Stream mode and would like to limit the number of active connection to my backend server whereas the backend is resolved dynamically based on the SNI header ($ssl_preread_server_name). But this does not allow any connections to the backend with below config. I see examp