Re: Just looking for guide to understand query strings

2014-05-29 Thread B.R.
The question mark separates the locations with the arguments, thus the location itself is merely '/'. If you do not have a location set explicitely for '/', you probably have a default location block ('location /') which will serve all unmatched locations, thus resulting in 200. Maybe the intent

Re: Nginx 1.6.0 + spdy performance testing

2014-05-29 Thread Steve Holdoway
I add an extra header, just for those who don't understand spdy... add_header Alternate-Protocol "443:npn-spdy/3.1"; and specifically set up ssl protocols/ciphers and ocsp stapling but I'd suggest that it's a limitation of the benchmark that you're hitting. Using something like webpaget

Just looking for guide to understand query strings

2014-05-29 Thread Paul N. Pace
My logs have been inundated with hits at example.com/?anything, though in the actual logs 'anything' is a very long string of characters. Log entry: "GET /?anything HTTP/1.1" 200 581 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" (note there is no location for 'anythi

Re: Header Vary: Accept-Encoding - security risk ?

2014-05-29 Thread B.R.
On Thu, May 29, 2014 at 5:48 PM, W-Mark Kubacki wrote: > Do not suppress header »Vary« or you will run into problems with > proxies, which would otherwise always serve the file gzip-ped > regardless of a requester indicating support or lack thereof. > ​Do not worry. Reading Maxim's answer, the on

Nginx 1.6.0 + spdy performance testing

2014-05-29 Thread tulio84z
I need to evaluate if using spdy will be good for my website but i'm having trouble setting everyting up. While using the chrome benchmark extension (1) an error message stating that it was not possible to use spdy apeared. This made me believe that there might be something wrong with my configurat

Re: Issues with my galaxy server

2014-05-29 Thread Iry Witham
I modified the proxy_read_timeout and that has resolved the issue. Hopefully that will suffice until I upgrade. Thanks, Iry On 5/29/14 12:16 PM, "Reinis Rozitis" wrote: >> 2014/05/28 16:11:52 [error] 16146#0: *1604 upstream timed out (110: >Connection timed out) while reading response header fr

Re: Issues with my galaxy server

2014-05-29 Thread Reinis Rozitis
2014/05/28 16:11:52 [error] 16146#0: *1604 upstream timed out (110: Connection timed out) while reading response header from upstream, client: 10.20.23.189, server: localhost, request: "GET /library_common/browse_library?sort=name&operation=browse&f-description=All &f-name=All&f-deleted=False&cnt

Re: Issues with my galaxy server

2014-05-29 Thread Jonathan Matthews
Someone, perhaps you, changed something on your backend (your "galaxy" server, which means absolutely nothing to anyone on this list, do be aware), and they fucked it. Or "introduced an intermittent performance issue which is resulting in a proportion of your proxied requests to time out", if you p

Re: Issues with my galaxy server

2014-05-29 Thread Iry Witham
I have checked the error.log and the following is what I am seeing: 2014/05/28 15:18:39 [info] 16146#0: *987 client closed prematurely connection, so upstream connection is closed too while sending request to upstream, client: 10.40.42.12, server: localhost, request: "GET /library_common/browse_li

Re: Header Vary: Accept-Encoding - security risk ?

2014-05-29 Thread W-Mark Kubacki
2014-05-28 23:20 GMT+02:00 chili_confits : > I have enabled gzip with > ... > gzip on; > gzip_http_version 1.0; > gzip_vary on; > ... > to satisfy incoming HTTP 1.0 requests. > > In a very similiar setup which got OWASP-evaluated, I read this - marked as > a defect: > "The web server sent

Re: Issues with my galaxy server

2014-05-29 Thread Maxim Dounin
Hello! On Thu, May 29, 2014 at 03:20:38PM +, Iry Witham wrote: > Hi Team, > > I am writing to gather some insight on how I may need to change > my configuration on Nginx. I have been running a galaxy server > for 3+ years now and have begun experiencing issues with > accessing several of

Re: Issues with my galaxy server

2014-05-29 Thread Reinis Rozitis
"The page you are looking for is temporarily unavailable. Please try again later." Can you provide me with insight? The first thing would be to check what the actual HTTP error is (is it some 5xx or 4xx etc) - some browsers (like IE also Chrome) tend to display a "userfriendly" page without

Issues with my galaxy server

2014-05-29 Thread Iry Witham
Hi Team, I am writing to gather some insight on how I may need to change my configuration on Nginx. I have been running a galaxy server for 3+ years now and have begun experiencing issues with accessing several of the largest libraries and get the following error: "The page you are looking for

Re: Header Vary: Accept-Encoding - security risk ?

2014-05-29 Thread Maxim Dounin
Hello! On Wed, May 28, 2014 at 05:20:54PM -0400, chili_confits wrote: > Dear list, > > I have enabled gzip with > ... > gzip on; > gzip_http_version 1.0; > gzip_vary on; > ... > to satisfy incoming HTTP 1.0 requests. > > In a very similiar setup which got OWASP-evaluated, I read this

Re: Does nginx support openstack swift API?

2014-05-29 Thread Maxim Dounin
Hello! On Thu, May 29, 2014 at 07:04:46PM +0800, Andy wrote: > Hello guys, > > I'm trying to find a way to use OpenStack SWIFT with nginx, the below are > request steps: > > 1. nginx is configured as proxy cache > 2. client send a request to nginx for url: http://domain.com/filename.txt > 3. ng

Does nginx support openstack swift API?

2014-05-29 Thread Andy
Hello guys, I'm trying to find a way to use OpenStack SWIFT with nginx, the below are request steps: 1. nginx is configured as proxy cache 2. client send a request to nginx for url: http://domain.com/filename.txt 3. nginx received the request and it is a cache miss, it need to fetch the content f