Re: Advice in regards to configuration

2019-03-06 Thread Brandon Mallory
Good Advice, After doing some further research. Can you give me your opinion in regards to using the ssl_preread_server_name. So as long as I can get a SNI and then filter TCP connection to the proper server with that information. Does this sound doable ? My plan was to use TLS SNI to to ident

Re: gRPC reverse proxy closed tcp connection after 1000 rpc calls

2019-03-06 Thread Sergey Kandaurov
> On 6 Mar 2019, at 17:20, jetchars wrote: > > Hey, genius > > I've followed the official user guide to create a gRPC reverse proxy, config > as follow: > > [..] > - nginx keepalive with upstream servers successfully > - but when keepalive with gRPC client, after 1000 requests been processed,

gRPC reverse proxy closed tcp connection after 1000 rpc calls

2019-03-06 Thread jetchars
Hey, genius I've followed the official user guide to create a gRPC reverse proxy, config as follow: ``` upstream grpcservers { server 10.90.62.50:60080 weight=3; server 10.90.62.51:60080 weight=3; server 10.90.62.52:60080 weight=3; keepalive 2000; keepalive_timeout 120; ke

Re: Protect against php files being send as static files

2019-03-06 Thread Ian Hobson
On 05/03/2019 11:50, Olaf van der Spek wrote: Hi, Is there a way to protect against php files being send as static files / source due to some php specific configuration being missed (by accident)? Another web server has this by default: static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )