Re: Nginx LibreSSL and BoringSSL alternative to OpenSSL ?

2015-06-01 Thread George
thanks seems with LibreSSL 2.1.6 no longer need the steps for creating .openssl/lib and copying files to that directory and symlink to make it work seems it works on Nginx 1.9.1 with LibreSSL 2.1.6 sweet ! nginx -V nginx version: nginx/1.9.1 built by gcc 4.8.3 20140911 (Red Hat 4.8.3-9) (GCC) b

Re: mail proxying

2015-06-01 Thread dethegeek
Hi As I understood the example given in the documentation, it is for a TLS session between a client and nginx. This is the next step in my roadmap. Right now, I'm focusing on the secure connection between nginx and the backend servers. It still would be interesting to implement whad I need dire

Re: Nginx LibreSSL and BoringSSL alternative to OpenSSL ?

2015-06-01 Thread mex
Hi, nginx + libressl works without any issues; we have it running since last summer and have seen no problems so far, but did not tested it with 1.8.x though the following explians how to do it: https://8ack.de/guides/nginx-libressl-first-test cheers, mex Posted at Nginx Forum: http://fo

Nginx LibreSSL and BoringSSL alternative to OpenSSL ?

2015-06-01 Thread George
Currently on CentOS 6/7, I source compile my Nginx 1.9.x versions with static OpenSSL 1.02a patched for chacha20_poly1305 but thinking about switching to LibreSSL or BoringSSL (for equal preference group cipher support). The question I have is anyone else using Nginx with LibreSSL or BoringSSL on

Occasionally 500 responses

2015-06-01 Thread badtzhou
We were seeing occasionally 500 responses from nginx on our production servers. There is nothing in the error log correlated to the event. Upon turning on debugging log and TCP dump, we identified the occasionally 500 responses are caused by end user resetting the connection(especially end users wh

Re: In-flight HTTP requests fail during hot configuration reload (SIGHUP)

2015-06-01 Thread Matthew O'Riordan
Hi Maxim Thanks for the reply. Few comments below with context for others reading this thread: >> 1. Telnet to the Nginx server on the HTTP port it is listening on. >> >> 2. Send a HTTP/1.1 request to the upstream server (172.17.0.51): >> GET /health HTTP/1.1 >> Host: localhost >> Connection: K

Re: mail proxying

2015-06-01 Thread Andrew Hutchings
> On 1 Jun 2015, at 21:00, steve wrote: > > HI > > On 01/06/15 23:51, dethegeek wrote: >> Hi >> >> Steve, thank you for your reply. >> >> I already read the page you mentionned, and as I understand it, either this >> feature is missing, either it is not documented. >> >> Andrew said TLS is n

Re: mail proxying

2015-06-01 Thread steve
HI On 01/06/15 23:51, dethegeek wrote: Hi Steve, thank you for your reply. I already read the page you mentionned, and as I understand it, either this feature is missing, either it is not documented. Andrew said TLS is not implemented, so I'll follow his advice to properly workaround this lim

SOLVED: Re: [OT] Cant write across filesystem mounts?

2015-06-01 Thread E.B.
> When running PHP script through Nginx it writes OK to files > on the same disk mount where the PHP file is located but > not to the other parts of the system that are on another mount. > (well i dont know if its a matter of "same mount" or not, but > that is how it is behaving) > > Example, /tmp

Re: [OT] Cant write across filesystem mounts?

2015-06-01 Thread E.B.
Thank you very much for yours response! > > When running PHP script through Nginx it writes OK to files > > on the same disk mount where the PHP file is located but > > not to the other parts of the system that are on another mount. > > (well i dont know if its a matter of "same mount" or not, but

Re: [OT] Cant write across filesystem mounts?

2015-06-01 Thread Maxim Dounin
Hello! On Sat, May 30, 2015 at 02:20:05PM -0700, E.B. wrote: > Hi I dont think this is specific to nginx but I hope its a good > place to ask! > > When running PHP script through Nginx it writes OK to files > on the same disk mount where the PHP file is located but > not to the other parts of th

Re: In-flight HTTP requests fail during hot configuration reload (SIGHUP)

2015-06-01 Thread Maxim Dounin
Hello! On Mon, Jun 01, 2015 at 03:40:12PM +0100, Matthew O'Riordan wrote: > We have recently migrated across from HAProxy to Nginx because > it supports true zero-downtime configuration reloads. However, > we are occasionally getting 502 and 504 errors from our > monitoring systems during de

In-flight HTTP requests fail during hot configuration reload (SIGHUP)

2015-06-01 Thread Matthew O'Riordan
We have recently migrated across from HAProxy to Nginx because it supports true zero-downtime configuration reloads. However, we are occasionally getting 502 and 504 errors from our monitoring systems during deployments. Looking into this, I have been able to consistently replicate the 502 an

Re: How to send a REST request to another node if the service on the current node is not available?

2015-06-01 Thread Maxim Dounin
Hello! On Mon, Jun 01, 2015 at 02:25:49AM -0400, Lu, Boying wrote: > Hi, All, > > We setup a cluster of three nodes and running ngix on each node > to load balance. > > I found that if a REST service is unavailable on current node, > the corresponding REST request sending to this node > will

Re: Compiling Nginx on Windows 7

2015-06-01 Thread Maxim Dounin
Hello! On Mon, Jun 01, 2015 at 10:45:04AM +0300, Andrei Belov wrote: > > On 30 May 2015, at 23:00, z_kamikimo wrote: > > > Im experiencing issues with compiling Nginx on Windows 7, every thing goes > > good until nmake -f objs/Makefile. > > I get the following error > > > > Assembling: tmp32\

Re: proxy_cache not working anymore in 1.8

2015-06-01 Thread Rene Moser
Hi On 01.06.2015 13:51, Oleksandr V. Typlyns'kyi wrote: >> Vary: * > http://nginx.org/r/proxy_cache_valid > If the header includes the "Vary" field with the special value "*", such > a response will not be cached (1.7.7). If the header includes the "Vary" > field with another value, such

Re: mail proxying

2015-06-01 Thread dethegeek
Hi Steve, thank you for your reply. I already read the page you mentionned, and as I understand it, either this feature is missing, either it is not documented. Andrew said TLS is not implemented, so I'll follow his advice to properly workaround this limitation. Posted at Nginx Forum: http://

Re: proxy_cache not working anymore in 1.8

2015-06-01 Thread Oleksandr V. Typlyns'kyi
Today Jun 1, 2015 at 13:28 Rene Moser wrote: > Hi > > We use nginx as proxy_cache and identified a different somehow weird > behaviour compared to 1.6.: > > In some situations we get a MISS or EXPIRED in 1.8, where with the same > config, same resource and same origin, we got a HIT in 1.6. > Re

Re: mail proxying

2015-06-01 Thread dethegeek
Hi Thank you Andrew, You confirmed what I'm afraid of. I hope this feature will be implemented soon. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,259279,259296#msg-259296 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org

proxy_cache not working anymore in 1.8

2015-06-01 Thread Rene Moser
Hi We use nginx as proxy_cache and identified a different somehow weird behaviour compared to 1.6.: In some situations we get a MISS or EXPIRED in 1.8, where with the same config, same resource and same origin, we got a HIT in 1.6. The weird thing is, it does never change to a HIT even after sev

Re: Compiling Nginx on Windows 7

2015-06-01 Thread Andrei Belov
On 30 May 2015, at 23:00, z_kamikimo wrote: > Im experiencing issues with compiling Nginx on Windows 7, every thing goes > good until nmake -f objs/Makefile. > I get the following error > > Assembling: tmp32\sha1-586.asm > tmp32\sha1-586.asm(1432) : error A2070:invalid instruction operands > tm