proxy_bind with hostname from /etc/hosts possible?

2017-03-13 Thread larsg
Hi! is it possible to use an hostname from local /etc/hosts as proxy_bind value? In our current Background: We use nginx 1.8.1 as reverse proxy. In order to overcome the "Overcoming Ephemeral Port Exhaustion" problem (64k+ connections), we use proxy_bind to iterate over all loccally available IP

Re: Reverse Proxy with 500k connections

2017-03-13 Thread larsg
Hi Guys, we solved the problem and I wanted to give you feedback about the solution. Finally it was an problem with our linux ip routes. After implementing source based policy routing this nginx configuration worked. Thank you for your support! Kind Regards Lars Summary of Solution: split_clie

Re: Conflict between form-input-nginx-module and nginx-auth-request-module?

2017-03-13 Thread Maxim Dounin
Hello! On Sat, Mar 11, 2017 at 05:13:38AM +, Yongtao You via nginx wrote: > To answer my own question, even though I still don't see why it has anything > to do with the auth-request module, but the reason requests are timing out is > because form-input module called ngx_http_read_client_re

Re: proxy_pass and weird behaviour

2017-03-13 Thread Maxim Dounin
Hello! On Sat, Mar 11, 2017 at 09:07:54AM +0100, Michael Grimm wrote: [...] > Well, that is working, somehow, except: If the LE server > addresses Host A, the challenge file is going to be retrieved > instantaneously. If the LE server addresses Host B, only every > *other* request is being se

Re: OAuth Access token validation

2017-03-13 Thread B.R. via nginx
nginx can authenticate users based on subrequests to an identity server, yes, RTFM: https://nginx.org/en/docs/http/ngx_http_auth_request_module.html If you want to use JSON Web Tokens, only the non-FOSS version will be able to help you: https://nginx.org/en/docs/http/ngx_http_auth_jwt_module.html