effect of bcrypt hash $cost on HTTP Basic authentication's login performance?

2019-06-29 Thread PGNet Dev
When generating hashed data for "HTTP Basic" login auth protection, using bcrypt as the hash algorithm, one can vary the resultant hash strength by varying specify bcrypt's $cost, e.g. php -r "echo password_hash('$my_pass', PASSWORD_BCRYPT, ['cost' => $cost]) . PHP_EOL;" Of course, inc

Re: Bug in ngx_http_slice_filter_module ngx_http_slice_parse_content_range function

2019-06-29 Thread Maxim Dounin
Hello! On Thu, Jun 27, 2019 at 02:01:27AM +, Carey Gister wrote: > The ngx_http_slice_parse_content_range function assumes that the > parsed buffer is null terminated. Since the buffer is an > ngx_str_t, that assumption is false. If, by chance, the buffer > is null terminated it is simply

Re: HTTP/2: allow unlimited number of requests in connection

2019-06-29 Thread Maxim Dounin
Hello! On Wed, Jun 26, 2019 at 07:41:27PM +0200, Michael Würtinger wrote: > Hello, > > we're running a gRPC service behind an NGINX load balancer and we > often see that the connection gets shut down with a GOAWAY message. > Since our request deadlines are quite small and it takes some time to >