bcrypt

2017-06-22 Thread Dwight Marzolf
We have an installation of nginx 1.10.3 in which we are using an htpasswd file that contains bcrypt encyrpted passwords. This is a file that is used by multiple apps that require authentication. Everything I am reading online says that nginx does not support bcrypt passwords. The other apps usin

Re: block google app

2017-06-22 Thread lists
Ah but I want Google to look, but just return links to pages, not images. There all those ‎hits that pretend to be Google, because hey, why not. ;-) I block a large number of bots simply by the firewall. I started

Re: block google app

2017-06-22 Thread Peter Booth
From experience this stuff is a lot harder and more nuanced than it might seem. Google's agents are well behaved and obey robots.txt. The last high traffic website I worked on had over 250 different web spiders/bots scraping it. That's 250 different user agents that didn't map to a "real" browse

Re: block google app

2017-06-22 Thread lists
The IP addresses from the Google app aren't those of Google. They are ISPs generally. What bugs me is a fair number of these IP addresses never read my web pages. Easy enough to see from access.log. They just look

Re: block google app

2017-06-22 Thread Jeff Dyke
I ended up digging a bit more and found that I believe Richard to be correct in both cases. I would check the ips and see who they belong to, you may just be hurting your mobile users. On Thu, Jun 22, 2017 at 11:03 AM, Richard Stanway wrote: > That user agent doesn't belong to a Google crawle

Re: FastCGI KeepAlive

2017-06-22 Thread Maxim Dounin
Hello! On Thu, Jun 22, 2017 at 10:23:01AM -0400, Olaf van der Spek wrote: > Does nginx use / depend on FCGI_GET_VALUES? No, it doesn't. -- Maxim Dounin http://nginx.org/ ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo

Re: block google app

2017-06-22 Thread Richard Stanway
That user agent doesn't belong to a Google crawler - they are end-user requests from the Google App (mobile application). I'm not sure what the motivation is for blocking them but I wouldn't consider it malicious / unwanted traffic. On Thu, Jun 22, 2017 at 4:47 PM, Jeff Dyke wrote: > I'm glad yo

Re: block google app

2017-06-22 Thread Jeff Dyke
I'm glad you found the solution, but being a Google crawler, it would likely respect a robots.txt file with Disallow: images/*, which if it worked would allow you to remove an if clause from being evaluated on every page load. You may have already tried it. But i have a feeling you'll start to fi

Re: FastCGI KeepAlive

2017-06-22 Thread Olaf van der Spek
Does nginx use / depend on FCGI_GET_VALUES? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275028,275069#msg-275069 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: [nginx logging module]$Request_time almost show 0.000 with proxy cache configuration

2017-06-22 Thread Lucas Rolff
> - a cache hit means that the resource should also be in the linux page cache - so no physical disk read needed. That's a very wrong assumption to make, and only makes sense in very small scale setups - and multiple terabytes of memory isn't exactly cheap, that's why we have SSD storage to ha

Re: FastCGI KeepAlive

2017-06-22 Thread Olaf van der Spek
Thanks! I'll see if I can post the full response. The implementation is custom indeed, but I am sending FCGI_END_REQUEST. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275028,275067#msg-275067 ___ nginx mailing list nginx@nginx.org http://

Re: [nginx logging module]$Request_time almost show 0.000 with proxy cache configuration

2017-06-22 Thread Peter Booth
This might not be a bug at all. Remember that when nginx logs request time it's doing so with millisecond precision. This is very, very coarse-grained when you consider what modern hardware is capable of. The Tech Empower benchmarks shwo that an (openresty) nginx on a quad-socket host can server

Re: FastCGI KeepAlive

2017-06-22 Thread Maxim Dounin
Hello! On Thu, Jun 22, 2017 at 06:00:16AM -0400, Olaf van der Spek wrote: > Note the connect(13, ...) and close(13) right after the response has been > received. > For PHP it's working, but AFAIK there's nothing in the FastCGI protocol that > the backend has to do other then keeping the connecti

Re: [nginx logging module]$Request_time almost show 0.000 with proxy cache configuration

2017-06-22 Thread Maxim Dounin
Hello! On Thu, Jun 22, 2017 at 05:53:04AM -0400, jindov wrote: > I've configured for nginx to cache static like jpeg|png. The problem is if > request with MISS status, it will show a non-zero value request_time, but if > a HIT request, the request_time value is 0.000. This is expected behaviour.

Re: Nginx not caching the content when the response is just a plain text string

2017-06-22 Thread Maxim Dounin
Hello! On Thu, Jun 22, 2017 at 03:51:21AM -0400, rebaca wrote: [...] > I am trying to access the link "localhost/cache1/sample.txt" which hits > serverX. serverX then finds that the file is not present, takes it as MISS, > and then forwards the request probably as > 'localhost:8111/custom/sample

Re: FastCGI KeepAlive

2017-06-22 Thread Olaf van der Spek
Note the connect(13, ...) and close(13) right after the response has been received. For PHP it's working, but AFAIK there's nothing in the FastCGI protocol that the backend has to do other then keeping the connection open. gettimeofday({tv_sec=1498125120, tv_usec=540583}, NULL) = 0 recvfrom(3, "G

[nginx logging module]$Request_time almost show 0.000 with proxy cache configuration

2017-06-22 Thread jindov
Hi guys, I've configured for nginx to cache static like jpeg|png. The problem is if request with MISS status, it will show a non-zero value request_time, but if a HIT request, the request_time value is 0.000. This is an nginx bug and is there anyway to resolve it. My log format ``` log_format c

Re: session ticket key rotation

2017-06-22 Thread A. Schulze
B.R. via nginx: nginx configuration is parsed/analyzed by nginx master process by design. Moreover, TLS configuration is kept at this level if I recall well. Thus, the user your master process use needs to have the rights to access the specified file. To reload nginx configuration, you will in

Re: session ticket key rotation

2017-06-22 Thread B.R. via nginx
nginx configuration is parsed/analyzed by nginx master process by design. Moreover, TLS configuration is kept at this level if I recall well. Thus, the user your master process use needs to have the rights to access the specified file. To reload nginx configuration, you will indeed need to use SIG

Re: When will primary server come back in http upstream module?

2017-06-22 Thread B.R. via nginx
1. 'unavailable' means the server will automatically and temporarily be removed from the pool of servers managed by the upstream (same effect as manually parametering it as down) 2. the fail_timeout parameter documentation of the very section you provided a link to is pretty clear: t

Nginx not caching the content when the response is just a plain text string

2017-06-22 Thread rebaca
SUMMARY: Nginx not caching the content when the response is just a plain text string DETAILS: Below shows the connection between entities: [ client ] <---> [ serverX ] <---> [ serverY ] serverX and serverY both are virtual nginx servers on same machine. serverX - proxy handler is enabled by