Please take 10 minutes to give us your feedback

2020-06-29 Thread Igor Sysoev
shaping the future of NGINX. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: proxy_store: is it used much?

2019-10-29 Thread Igor Sysoev
t; Is there anything non-obvious that speaks agains the use of proxy_store? proxy_store is useful for forever static files mirroring. It does not track file changing and removal at origin. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@ng

NGINX to Join F5

2019-03-11 Thread Igor Sysoev
licenses, development team, release cadence, or otherwise. In fact, F5 will increase investment to ensure NGINX open source projects become even stronger. Our CEO, Gus Robertson, wrote a blog to explain more: https://www.nginx.com/blog/nginx-joins-f5/ -- Igor Sysoev http://nginx.com

Re: SMTP Forward Nginx Proxy

2019-02-26 Thread Igor Sysoev
ppear to the third-party > SMTP service as if they came from the same server. > > Is it possible to solve this issue with ngingx smtp proxy? nginx SMTP proxy is intended to be used for authenticated SMTP only. -- Igor Sysoev http://nginx.com ___

Re: Nginx not respecting locations execution ordering

2018-04-18 Thread Igor Sysoev
First; location ~ \.mp4$ { add_header X-Location-MP4 Served-from-MP4-location; } } With this configuration you can sort the first level prefix locations in any order. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: [SOLVED] Re: Trouble configuring PHP 7.1 module for Unit 1.0 on Gentoo Linux

2018-04-13 Thread Igor Sysoev
> On 13 Apr 2018, at 18:07, Ralph Seichter wrote: > > On 13.04.2018 16:40, Igor Sysoev wrote: > >> On Gentoo you should also use --lib-path > > Thank you, Igor! The following works on my Gentoo test server: > > ./configure php --config=/usr/lib64/php7.1/bin

Re: Trouble configuring PHP 7.1 module for Unit 1.0 on Gentoo Linux

2018-04-13 Thread Igor Sysoev
> On 13 Apr 2018, at 17:23, Ralph Seichter wrote: > > On 13.04.2018 14:49, Igor Sysoev wrote: > >>> $ ./configure php --config=/usr/lib64/php7.1/bin/php-config >>> configuring PHP module >>> checking for PHP ... found >>> + PHP SAPI: [embed cl

Re: Trouble configuring PHP 7.1 module for Unit 1.0 on Gentoo Linux

2018-04-13 Thread Igor Sysoev
> On 13 Apr 2018, at 14:45, Ralph Seichter wrote: > > On 13.04.18 12:52, Igor Sysoev wrote: > >> PHP package was built without embed SAPI support. >> Otherwise it shows something like this: >> + PHP SAPI: [cli fpm embed apache2handler] > > Thanks, I

Re: Trouble configuring PHP 7.1 module for Unit 1.0 on Gentoo Linux

2018-04-13 Thread Igor Sysoev
64/php7.1/include/php/Zend -I/usr/lib64/php7.1/include/php/ext > -I/usr/lib64/php7.1/include/php/ext/date/lib -o > build/autotest build/autotest.c -lphp7 > -- > > A search turned up https://github.com/nginx/unit/issues/47 but I am not > sure if/how this applies to my issue and w

Re: Redirect question

2018-03-23 Thread Igor Sysoev
ng. When you have hundreds of locations the order becomes important factor during configuration maintainance. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Redirect question

2018-03-23 Thread Igor Sysoev
s$args; } However, if you do not want to care about location order in future, this is better: location /people/ { location ~ ^/people/(?.+) { return 301 http://example.com/users/$REST$is_args$args; } } -- Igor Sysoev http://nginx.com _

Re: How to stop nginx from adding a trailing slash

2018-03-09 Thread Igor Sysoev
> On 9 Mar 2018, at 19:17, Gregory Edigarov wrote: > > On 09.03.18 16:52, Igor Sysoev wrote: >>> On 9 Mar 2018, at 17:06, Gregory Edigarov wrote: >>> >>> Hello, >>> >>> somesite.com/blog is 301 redirected to somesite.com/blog/ by nginx.

Re: How to stop nginx from adding a trailing slash

2018-03-09 Thread Igor Sysoev
ocation = /blog { ... } location /blog/ { ... } -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

unit-0.2 beta release

2017-10-20 Thread Igor Sysoev
; property. *) Bugfix: Go application crashed under load. *) Bugfix: POST request for PHP were handled incorrectly. *) Bugfix: the router exited abnormally if all listeners had been deleted. *) Bugfix: the router crashed under load. *) Bugfix: memory leak in the router. -- Igor S

Re: Multiple SSL listen statements and SNI

2016-11-11 Thread Igor Sysoev
On 11 Nov 2016, at 22:13, Dave Hayes wrote: > On 11/11/2016 10:49, Igor Sysoev wrote: >> Yes, *:443 matches all addresses except explicitly specified in listen >> directives with the same port 443. > > Ah! Thank you very much! This statement cleared up my confusion.

Re: Multiple SSL listen statements and SNI

2016-11-11 Thread Igor Sysoev
On 11 Nov 2016, at 20:29, Dave Hayes wrote: > On 11/11/2016 00:02, Igor Sysoev wrote: >> Please read this: >> http://nginx.org/en/docs/http/request_processing.html#mixed_name_ip_based_servers > > Thanks very much for your reply. I have read this before, but maybe I mi

Re: Multiple SSL listen statements and SNI

2016-11-11 Thread Igor Sysoev
.com on the 127.0.0.81 interface return 444 > > I would love to know exactly what is going on here. Would anyone be so kind > as to point out what is happening? Thanks in advance. Please read this: http://nginx.org/en/docs/http/request_processing.html#mixed_name_ip_based_server

Re: most efficient way to return on everything but a single directory?

2016-11-07 Thread Igor Sysoev
# proxy to client > } > location / { > return 301 https://www.example.com$request_uri; > } > } > > Is there a more efficient way to accomplish the above or is the above the > best way? This is the

Re: location regex

2016-11-02 Thread Igor Sysoev
h the longest match regardless of their order. If you will have a lot of locations then prefix locations are much easier to maintain: you can add, change and delete prefix locations without worrying how this will affect other locations. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: location regex

2016-11-01 Thread Igor Sysoev
> > > could you point me to good practice? The good practice is not to use regex at all. location /apple/ { } locaiton /pear/ { } etc. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginScript + nginx 1.11.4, js_run unknown directive ?

2016-09-13 Thread Igor Sysoev
On 14 Sep 2016, at 05:35, George wrote: > and examples in wiki for nginxScript for js_run > https://www.nginx.com/resources/wiki/nginScript/#section-1-overview The examples are obsolete, we will update them soon. -- Igor Sysoev http://ngi

Re: nginScript + nginx 1.11.4, js_run unknown directive ?

2016-09-13 Thread Igor Sysoev
: function hw(req, res) { var res; ... } Then include the file with js_include file.js; Then use the function to generate content: location /njs { js_content hw; } -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginScript (njs) feedback

2016-06-24 Thread Igor Sysoev
necessary if I > could access to a nginx var like $v.cookie_XXX). We consider another interface: req.cookies object. > Logging function would be nice to help debugging. > Hope it can be helpful Thank you for your feedback! The full String object support, global objects, logging, and files are on the way. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Mapping non-empty $query_string

2016-06-14 Thread Igor Sysoev
ip_cache { > "~.+" "1"; > } > > For some reason it doesn't work as intended. It starts bypassing cache on > ALL pages except main page. map $query_string $skip_cache { ""0; default 1; } -- Igor Sysoev http://nginx.

Re: Port redirect in URL

2016-04-21 Thread Igor Sysoev
On 21 Apr 2016, at 17:41, Jim Ohlstein wrote: > Hello, > > On 4/21/16 10:17 AM, Igor Sysoev wrote: >> On 21 Apr 2016, at 17:14, Igor Sysoev wrote: >> >>> On 21 Apr 2016, at 17:09, Jim Ohlstein wrote: >>> >>>> Hello, >>>> >&g

Re: Port redirect in URL

2016-04-21 Thread Igor Sysoev
On 21 Apr 2016, at 17:14, Igor Sysoev wrote: > On 21 Apr 2016, at 17:09, Jim Ohlstein wrote: > >> Hello, >> >> I'm going a bit crazy here and hoping for some help. I've set up a new >> Mailman installation on FreeBSD. The system is set as follows:

Re: Port redirect in URL

2016-04-21 Thread Igor Sysoev
t;proxy_set_header Connection ""; >proxy_redirect off; >proxy_set_header Host $host; > > [snip] >} > > Backend server uses fastcgi for Python via fcgiwrap. Any help would be > appreciated. proxy_redirect on; -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: $ssl_client_verify not working?

2016-04-14 Thread Igor Sysoev
http_ssl_module.html#errors error_page 495 496 =403 /403.html; -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: TLS session resumption (identifier)

2016-03-04 Thread Igor Sysoev
On 04 Mar 2016, at 13:30, B.R. wrote: > On Fri, Mar 4, 2016 at 11:19 AM, Igor Sysoev wrote: > Sorry, I meant there is no performance difference between “none” and “off” > settings. > > ​Well, the client believes he should remember every session ID and store it > som

Re: TLS session resumption (identifier)

2016-03-04 Thread Igor Sysoev
On 04 Mar 2016, at 12:55, B.R. wrote: > On Fri, Mar 4, 2016 at 10:33 AM, Igor Sysoev wrote: >> But still, advertising something without actually supporting it must lead to >> cases where sessions reuse is believed to take place without ever happening, >> harming pe

Re: TLS session resumption (identifier)

2016-03-04 Thread Igor Sysoev
er security policy, 2) and server has limited session storage so old sessions are removed. > Maybe the docs should be more explicit about the reason of the existence of > 'none'? Code comments are clearer than the docs on this matter. Yes, probably. -- Igor Sysoev http://nginx.c

Re: TLS session resumption (identifier)

2016-03-03 Thread Igor Sysoev
* but it does not actually store any session. */ -- Igor Sysoev http://nginx.com > On Thu, Mar 3, 2016 at 2:29 PM, Maxim Dounin wrote: > Hello! > > On Thu, Mar 03, 2016 at 12:42:55PM +0100, B.R. wrote: > > > Based on the default value of ssl_session_cac

Re: Nginx Javascript Configuration

2015-09-23 Thread Igor Sysoev
23 сент. 2015 г., в 12:29, itpp2012 написал(а): > > Is there any module loading order advice? ea. should it be before or after > Lua? does/should it matter? It doesn't matter. -- Igor Sysoev http://nginx.com ___ nginx mailing list n

Re: Nginx Javascript Configuration

2015-09-23 Thread Igor Sysoev
ack on JS interface to nginx internals. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx Javascript Configuration

2015-09-23 Thread Igor Sysoev
It will be announced today. -- Igor Sysoev > 23 сент. 2015 г., в 8:20, Danomi Czaski написал(а): > > I read quite a while ago that Nginx plans to move towards a Javascript > style configuration file that may have similar functionality to > ngx_lua. I'm wonderi

Re: [Announcement] New book about Nginx

2015-08-29 Thread Igor Sysoev
Hi, please clam down. This mailing list has been created to discuss and announce anything related to nginx. This book certainly has relation to nginx so Valery did well when he announced it here. -- Igor Sysoev Discover best practices for building & delivering apps at scale. nginx.conf

Free O’Reilly animal book about nginx

2015-07-30 Thread Igor Sysoev
web applications * How to tune nginx for optimal performance and security * And more! I hope you enjoy the book. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: tell nginx to stay inside same location?

2015-07-30 Thread Igor Sysoev
don't need. > > what could I do in this situation? Just add slash in upstream: location /njs/ { proxy_pass http://localhost:5501/; .. } -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Supporting special characters in URI for location block

2015-05-29 Thread Igor Sysoev
characters including chinese). Is this functionality supported? > Thanks Both URI and configuration should be in UTF-8. Then location /año/ { } will match "GET /a%C3%B1o/..." -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@

Re: Using NGINX in non-fork mode

2015-04-13 Thread Igor Sysoev
rk? When master_process is set to off, then master process does not fork any child processes and all requests are processed by the master process. However, this mode is intended only for development but for productions. There are issues with graceful reload, e

Re: Understanding locations (multiple locations that do different things)

2015-04-07 Thread Igor Sysoev
tting... location /admin { ...AUTH settings... location ~* \.php$ { ...AUTH PHP settings... } } location ~* \.php$ { ...generic PHP settings... } You can also look my presentation on this topic: http://www.youtube.com/watch?v=YWRYbLKsS0I http://sysoev.ru/tmp/nginx.c

Re: G-WAN assumptions: Part of truth/lies?

2015-02-10 Thread Igor Sysoev
ttp://nginx.org/en/docs/ngx_core_module.html#multi_accept routes almost all requests just to one worker in this 100-bytes micro-benchmark. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Multiple proxy_pass destinations from a single location block

2015-02-05 Thread Igor Sysoev
com; > } > > proxy_pass https://proxies/api/; > > Notice the proxy pass defines only a single scheme (https). No easy way. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Multiple proxy_pass destinations from a single location block

2015-02-04 Thread Igor Sysoev
domain.io; server bar.mydomain.com; } server { ... location /v1/ { proxy_pass http://mydomain/api/; ... } -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: 13: Permission denied while connect server using https through nginx

2015-02-02 Thread Igor Sysoev
equest: "GET / HTTP/1.1", upstream: > "https://10.1.1.1:9443/carbon";, host: "mgt.wso2bps.malintha.com" > > I tried run server/stop server but both incidents gives same error in nginx > side. What may be the reason for this error? I

Re: Matching multiple endpoints in location of nginx.conf

2014-11-23 Thread Igor Sysoev
bcd/ { [ some configuration ] } location /api/efgh/ { [ and yes, copy paste the configuration above ] } -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Regex positional capture in map

2014-11-03 Thread Igor Sysoev
apture wins > default$foo; > } default $host; -- Igor Sysoev http://nginx.com > On Mon, Nov 3, 2014 at 3:03 PM, B.R. wrote: > map's documentation states: > A regular expression can contain named and positional captures that can later > be used in ot

Re: map within a map

2014-10-23 Thread Igor Sysoev
lt 0; > ~*string 1; > $myvar1 1; > $myvar2 1; > } > > This way I would only have one IF $myvar3 ., but obviously this example > doesn't work, is this possible ? You can try other path: map $ngxvar1 $myvar1 { default $myvar2; ~*string 1; } map $ngxvar2

Re: Safe log rotation

2014-10-02 Thread Igor Sysoev
On 03 Oct 2014, at 01:31, jmobile wrote: > Thanks Igor for pointing this out. > > If file is renamed, would it guarantee that nginx continues writing to it > without interruption? This is guaranteed by OS. -- Igor Sysoev Join us for nginx.conf 2014, October 20-22, San Francisco.

Re: Safe log rotation

2014-10-02 Thread Igor Sysoev
ired, it is just to see that nothing is lost during the sleep. -- Igor Sysoev Join us for nginx.conf 2014, October 20-22, San Francisco. Get 25% off with code NGINXUG: http://nginx.com/nginxconf/ ___ nginx mailing list nginx@nginx.org http://mailman.ngi

Re: Safe log rotation

2014-10-01 Thread Igor Sysoev
tion but log removal. Try this: mv /mnt/vg0-lv0/access.log /mnt/vg0-lv0/access.log.OLD sleep 15; sudo kill -USR1 `cat /var/run/nginx.pid` sleep 2 head -n 5 /mnt/vg0-lv0/access.log -- Igor Sysoev Join us for nginx.conf 2014, October 20-22, San Francisco. Get 25% off with code NGINXUG: http://n

Re: Request for a "no capture" rewrite directive enhancement

2014-05-28 Thread Igor Sysoev
re right, I have mistaken. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Request for a "no capture" rewrite directive enhancement

2014-05-28 Thread Igor Sysoev
ent_root/path/to/$1/$2; would be perfect). > > Alas, I think what I have (storing the captures in temp vars) is the only > real solution thus far. > > Unless the penny hasn't dropped in my head? :) Then you can set these variable directly in regex: locat

Re: Request for a "no capture" rewrite directive enhancement

2014-05-27 Thread Igor Sysoev
works well) but the need to use "set" to save > copies of $1/$2 seems a little wasteful. > > Digging through the documentation I can't seem to find a way of using rewrite > without blowing away/not capturing the current URI. location ~ "^/[a-f0-9]{16}/(css|js)/(.+)&

Re: Unexpected SSL Behavior with Virtual Hosts

2014-05-15 Thread Igor Sysoev
on; > > server_name www.domain3 domain3; > > # more stuff > } > > A browser request for https://www.domain1.org/ returns the certificate for > domain 2 and the content found in the root for domain2. Why is that and how > can I get the server to redirect to http://www.domain1.org/ instead? Thank > you… http://nginx.org/en/docs/http/configuring_https_servers.html#name_based_https_servers -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: misunderstood regex location

2014-05-05 Thread Igor Sysoev
quot;, then it will search regex location inside this location and finally "location ~ .+\.(js|" will be used. Your solution: location /banniere_rotative/ { is right. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: X-Real-Proto ?

2014-04-21 Thread Igor Sysoev
On Apr 21, 2014, at 15:47 , Igor Sysoev wrote: > On Apr 21, 2014, at 15:03 , etienne.champet...@free.fr wrote: > >> Hi, >> >> There is ngx_http_realip_module to have the real ip in nginx when you are >> behind a load balancer >> If the load balancer is also

Re: X-Real-Proto ?

2014-04-21 Thread Igor Sysoev
set the real proto ? proxy_set_header X-Real-Proto $scheme; http://nginx.org/r/$scheme -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx ssl handshake vs apache

2014-04-21 Thread Igor Sysoev
On Apr 21, 2014, at 12:46 , Igor Sysoev wrote: > On Apr 20, 2014, at 21:17 , Lukas Tribus wrote: > >>> Hi >>> >>> I was watching this video by fastly ceo http://youtu.be/zrSvoQz1GOs?t=24m44s >>> he talks about the nginx ssl handshake versus apache and c

Re: nginx ssl handshake vs apache

2014-04-21 Thread Igor Sysoev
hen the chances that another process/thread is able to run on the same CPU are 25%. The lesser handshake time the lesser chances. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: map v/s rewrite performance

2014-04-06 Thread Igor Sysoev
302 max; > > That is: Putting load in config file v/s fastcgi-cache? Exact locations are faster. -- Igor Sysoev ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: map v/s rewrite performance

2014-03-25 Thread Igor Sysoev
every rewrite is checked for incoming requests unless it is surrounded by > location. > > Please let me know if more details are needed. location = old-url-1 { return 301 new-url-1; } ... -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx stop function in service file

2014-03-20 Thread Igor Sysoev
'fast shutdown' whereas SIGQUIT would provoke a 'graceful > shutdown'. > > Why is not SIGQUIT being used? What is the difference between those > termination signals, speaking of nginx behavior? Graceful shutdown means that nginx does not close active client conne

Re: Nginx getting last variables on exploded uri

2014-03-15 Thread Igor Sysoev
3/2/409232-750-0-257506 > out_head2: supra > out_head3: ayakkabi > out_head4: resimleri > > I want to : > > out_head1: 4/0/9/2/3/2/409232 > out_head2: 750 > out_head3: 0 > out_head4: 257506-supra-ayakkabi-resimleri > > T

Re: Include Performance

2014-03-13 Thread Igor Sysoev
t; > In domain_configs.conf: > include domain_config_list.conf; > > In domain_config_list.conf: > include domain_config_1.conf; > include domain_config_2.conf; No impact. — Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Redirect host

2014-03-06 Thread Igor Sysoev
~* 'webmail.example.com' ) { >rewrite ^/(.*)$ http://example.com/$1 permanent; >} > > > nginx version: nginx/1.4.5 (Ubuntu) http://nginx.org/en/docs/http/converting_rewrite_rules.html -- Igor Sysoev http://nginx.com ___

Re: High CPU Usage and NGINX Hangup

2014-03-04 Thread Igor Sysoev
N, {u32=404296080, > u64=140007748211088}}}, 512, 4695) = 1 nginx does not use mutexes. It seems you run 3rd-party modules. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Proxy pass location inheritance

2014-02-18 Thread Igor Sysoev
and will become maintenance nightmare when configuration would eventually grow. If configuration has to have regex locations it is better to isolate them inside static prefix locations. -- Igor Sysoev http://nginx.com On Feb 18, 2014, at 22:12 , Brian Hill wrote: > Are there any performa

Re: 500 error when posting, no message in error logs

2014-02-14 Thread Igor Sysoev
"http://piwigo.domain.com/install.php?language=en_US"; > "Mozilla/5.0 (X11; OpenBSD amd64) AppleWebKit/537.36 (KHTML, like Gecko) > Chrome/28.0.1500.45 Safari/537.36" "-" > > No other information, nothing in the error_log. Try to log $upstream_status t

Re: Performance penalty when using regular expressions in server_name?

2014-01-29 Thread Igor Sysoev
ession >will also appear in the error_log. Is it possible to see the actual >name instead the expression in the log? > > > I am using nginx-1.4.x with pcre-jit enabled. $host. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Issue with multipart response compression.

2014-01-26 Thread Igor Sysoev
ase. > gzip_types'multipart/mixed; boundary="Ajm,e3pN"' ; > > Can someone suggest solution for this? If you can limit these responses in location then location /uri { gzip_types *; .. } -- Igor Sysoev http://nginx.com __

Re: username mapping for imap/pop

2014-01-12 Thread Igor Sysoev
nnecting. I can to that in my mailauth.pm module but > don't know how to return the updated username. You can return it via header: Auth-User: u...@domain.org -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailm

Re: One link/area on a https site with a different SSL config?

2014-01-10 Thread Igor Sysoev
over SSL works, and it should become > clear. It is actually possible, at least Apache can do this with SSL renegotiation. But nginx currently does not support this. -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: ngx_ssl_dhparam and dh1024_p

2013-12-09 Thread Igor Sysoev
where that prime and generator came from? > > Does anyone know the subgroup order (or what is the q)? Is q at least > 160-bits (or 2k, where k is 80-bits for the security level offered in > the 1024-bit DH prime)? > > Thanks in advance. This parameters were obtained using "

Re: Drainstop/Graceful stop?

2013-09-23 Thread Igor Sysoev
> service restart with a new .conf that don't have the server in question in > it, or is there a nicer way of doing it? http://nginx.org/en/docs/control.html#reconfiguration -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.

Re: multiple listen directives

2013-09-16 Thread Igor Sysoev
isten *:443 ssl; listen 192.168.178.20:443 ssl; listen 192.168.178.30:443 ssl; listen 192.168.178.40:443 ssl; -- Igor Sysoev http://nginx.com ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Recommendations for safeguarding against BREACH ?

2013-08-18 Thread Igor Sysoev
On Aug 12, 2013, at 21:32 , offmind wrote: > And what if we are using gzip_static? > As far as I understand, we have to block gzipping page code. But what about > .js .css with no secure content? Statically gzipped files do not depend on user input so they are not subject to BREACH.

Re: How to turn off gzip compression for SSL traffic

2013-08-18 Thread Igor Sysoev
On Aug 19, 2013, at 9:56 , B.R. wrote: > On Mon, Aug 19, 2013 at 12:41 AM, Igor Sysoev wrote: > > These are different vulnerabilities: SSL compression is subject to > CRIME vulnerability while HTTP/SSL compression is subject to BREACH > vulnerability. > > ​Incorrect.

Re: How to turn off gzip compression for SSL traffic

2013-08-18 Thread Igor Sysoev
rvers require to duplicate the rules like rewrite, > which is cumbersome. I believe that dual mode server block may be subject to vulnerabilities due to site map, so BREACH is the least of them. -- Igor Sysoev http://nginx.com/services.html > On Sat, Aug 17, 2013 at 8:43 PM, Igor Sysoe

Re: How to turn off gzip compression for SSL traffic

2013-08-18 Thread Igor Sysoev
On Aug 18, 2013, at 21:09 , itpp2012 wrote: > Igor Sysoev Wrote: > --- >> Yes, modern nginx versions do not use SSL compression. > [...] >> You have to split the dual mode server section into two server server >>

Re: How to turn off gzip compression for SSL traffic

2013-08-17 Thread Igor Sysoev
two servers section, is it possible to turn off > gzip when we are using SSL? You have to split the dual mode server section into two server server sections and set "gzip off" SSL-enabled on. There is no way to disable gzip in dual mode server section, but if you really worry about se

Re: Recommendations for safeguarding against BREACH ?

2013-08-06 Thread Igor Sysoev
ps-protected-pages/ "gzip off" от SSL-enabled sites. -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Hide raw regular expression from $_SERVER['server_name']

2013-08-04 Thread Igor Sysoev
$server_name; to fastcgi_param SERVER_NAME$host; -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: listen directive

2013-07-25 Thread Igor Sysoev
> Is it some bug I stepped on, or is this normal, or, may be I just see things > that aren't there ? http://nginx.org/en/docs/http/request_processing.html#mixed_name_ip_based_servers -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Why Nginx Doesn't Implement FastCGI Multiplexing?

2013-07-20 Thread Igor Sysoev
nds but only together with a flow control. -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Why Nginx Doesn't Implement FastCGI Multiplexing?

2013-07-19 Thread Igor Sysoev
uffered and when it goes to file. This is what could > be used for that case. If buffer overflow happens close client, abort > backend, drop records for that request. Keep connection and keep receiving > and de-multiplexing records for good requests. Yes, but it is useless to buffer a lo

Re: Why Nginx Doesn't Implement FastCGI Multiplexing?

2013-07-19 Thread Igor Sysoev
l send to the slow client. -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Why Nginx Doesn't Implement FastCGI Multiplexing?

2013-07-19 Thread Igor Sysoev
nd knows a real speed of the client. -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Why Nginx Doesn't Implement FastCGI Multiplexing?

2013-07-19 Thread Igor Sysoev
ient and a backend, since HTTP lacks both flow control and multiplexing. -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Why Nginx Doesn't Implement FastCGI Multiplexing?

2013-07-19 Thread Igor Sysoev
backend continues to send data to it. At some point nginx should say the backend to stop sending to the client but the only way to do it is just to close all multiplexed connections. -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list

Re: Wrong server used in SSL request

2013-07-10 Thread Igor Sysoev
/example2.com the server of https://shop.example.com is > used. http://nginx.org/en/docs/http/configuring_https_servers.html#name_based_https_servers -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx cache loader process

2013-07-04 Thread Igor Sysoev
O intensive and take a long time > to finish. Is there anyway to get around the problem? What nginx version do you use? Cache loader runs better since 1.1.0. -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http:/

Re: listen backlog

2013-04-18 Thread Igor Sysoev
will be > applied to all vhost or not? Yes, it is applied to all vhost listening on the same port. This is property of a port. -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: IPv4 & IPv6

2013-04-06 Thread Igor Sysoev
1 while on Linux they are enabled: >cat /proc/sys/net/ipv6/bindv6only 0 -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: IPv4 & IPv6

2013-04-06 Thread Igor Sysoev
server { listen 80; listen [::]:80 ipv6only=on; server_name one; ... } server { listen 443 ssl; listen [::]:443 ssl ipv6only=on; server_name one; ... } -- Igor Sysoev http://nginx.com/services.html On Apr 6, 2013, at 19:01 , B.R. wrote: > Add

Re: reset_timedout_connection

2013-04-04 Thread Igor Sysoev
On Apr 4, 2013, at 12:46 , Дмитрий Шалашов wrote: > Heeey :-) > > Is it safe to enable it? Yes, it is safe. Probably, it should be enabled by default. -- Igor Sysoev > 2013/3/29 Дмитрий Шалашов > Hi. > > Why is this parameter disabled by default? > > Best r

Re: "bug in glibc"

2013-03-31 Thread Igor Sysoev
crypt_util.c (__init_des_r): Initialize current_salt and current_saltbits. https://groups.google.com/forum/?fromgroups=#!topic/linux.debian.maint.glibc/Q88bwAp222w -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Why use haproxy now ?

2013-03-31 Thread Igor Sysoev
On Mar 31, 2013, at 14:11 , Reinis Rozitis wrote: >> How much the cache's size is larger than the host's physical memory? > > 32Gb ram and 240Gb (fits on a ssd) mapped file (no swapping involved). Did you try previously nginx cache also on SSD or on usual hard

Re: Why use haproxy now ?

2013-03-30 Thread Igor Sysoev
torage bad > side effects/bugs. How much the cache's size is larger than the host's physical memory? -- Igor Sysoev http://nginx.com/services.html ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Why use haproxy now ?

2013-03-29 Thread Igor Sysoev
y > tree with few milion files versus storing them all in a single mmaped file. Did you try nginx cache since version 1.1.0? Changes with nginx 1.1.0 01 Aug 2011 *) Feature: cache loader run time decrease. BTW, do you use Varnish persistent cach

  1   2   >