Quantcast
Channel: Nginx Forum - Nginx Mailing List - English
Viewing all 7229 articles
Browse latest View live

DTLS patches (no replies)

$
0
0
Hello all,

For all those interested in testing DTLS support, experimental patch
is now available at http://nginx.org/patches/dtls/

Check the README.txt for details .

If you have any feedback, please report to this thread.
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

killed child process (no replies)

$
0
0
Hi

so I have lots of clients on long lived tcp connections , getting rp into 2
back end app servers

I had a line in my error log, saying one of the upstream was failed caused
it timeout -


then I got this

2017/05/18 13:30:42 [notice] 2662#2662: exiting
2017/05/18 13:30:42 [notice] 2662#2662: exit
2017/05/18 13:30:42 [notice] 2661#2661: signal 17 (SIGCHLD) received
2017/05/18 13:30:42 [notice] 2661#2661: worker process 2662 exited with
code 0
2017/05/18 13:30:42 [notice] 2661#2661: signal 29 (SIGIO) received


I am not sure what initiated this ? there are no cron jobs running at that
time

and it looks like a lot of my long lived tcp session where TCP-FIN'ed.


I also checked my audit logs to see what command / process run at that time
.... nothing that signaled or initiated a nginx reload ...

Alex
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

How to restrict acces to specific friendly URL by IP in Wordpress site? (no replies)

$
0
0
Hi!
I've got a server with nginx and a wordpress website running on it.

On the web-site, I have a wordpress page, i.e. domain.com/secret-page/, that I want to restrict access to everybody but 1 specific IP address of my other server.

As this page is not a real physical directory, but just a friendly URL - I got stuck. I don't have previous experience configuring nginx, but I tried hard to google the possible solution.

What I tried so far in my website config:
[code]
location ~* ^/secret-page/ {
allow 1.1.1.1;
deny all;
}
[/code]

But this didn't work. It returns 404 error when I try to open this page from allowed IP. Looks like it tried to find the real file or directory /secret-page/ rather than return a friendly URL page if I got it right.

Can you help me please?

WordPress pingback mitigation (no replies)

$
0
0
Reading a blog from the person that set up the website for Emmanuel Macron, I came across this nginx tip. I would return 444 and add it to my user agent map. But in the simplest form:

---------
# Block WordPress Pingback DDoS attacks
        if ($http_user_agent ~* "WordPress") {
            return 403;
        }
-------
The conf file:

https://github.com/EnMarche/en-marche.fr/blob/master/docker/prod/nginx.conf#L59

The blog:
https://symfony.com/blog/an-open-source-web-platform-for-the-new-president-of-france
 
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

nginx reverser proxy tomcat with tomcat not working (no replies)

$
0
0
I am trying to proxy tomcat using nginx. I have this configuration below. Now the problem I am facing is if I access the url by IP(192.168.2.6) then it gets redirected to /auth_app is tomcat which is perfectly fine. The tomcat url redirect to a third party SAML2 provider and once it authenticated it redirected to http://localhost:8080/auth_app/ instead of http://192.168.2.6/auth_app/ and because of that my application doesn't open as tomcat is running on 192.168.2.6 and not localhost.

server {
listen 80 default_server;
server_name _;
error_log /var/log/nginx/abc_error.log;
access_log /var/log/nginx/abc_access.log;
rewrite ^/?$ /auth_app;
location /auth_app {
proxy_redirect off;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://localhost:8080/auth_app/;
}
}

Conference nginx.conf 2017 CFP deadline is May 25 (no replies)

$
0
0
There are just a few days left to submit your talk proposals for nginx.conf 2017, and we want to hear from you!

How are you using NGINX or NGINX Plus to help you achieve performance, security, reliability, and scale?
Whether you're deploying your app in the cloud, on bare metal, or somewhere in between, tell us about your
application delivery architecture and how you supercharge your systems; then let us put you on stage to share your story.

Proposals are due by 11:59PM Pacific Time on May 25, 2017. Submit here: https://nginxconf17.busyconf.com/proposals/new

Conference details:
• nginx.conf 2017 will be held in Portland, OR
• Conference website: https://www.nginx.com/nginxconf/
• Venue: The Nines Hotel
• Dates: September 6–8, 2017
• Twitter: #nginxconf

We look forward to your submission.


--
Nick Shadrin / Sr. Product Manager / nick@nginx.com


_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

client sent invalid request while reading client request line (1 reply)

$
0
0
Hi,

I have a node.js based ide running nginx reverse proxy behind.
When I try to upload a file with a Turkish characters,
nginx gives "client sent invalid request while reading client request line"
and I see 400 Bad Request on browser console.


request: "PUT /mypath/ismail123/1/9c3qajZ3mt5G35tt/ar%u0131c%u0131lar.txt

How can I let nginx to allow filename with encoding %uXXXX?

Thanks.

Load balancer without sending traffic through (no replies)

$
0
0
hey guys,

Would be possible to load balance traffic to different servers without
sending traffic through?
I'd like to upload files, and the frontend servers are several, so using
round robin, I'd like to send the first request to the first, second to
second...
Client will request to nginx to upload, and Nginx would redirect to one of
the frontends...something like a redirection...

thanks
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

Nginx PID file missing (1 reply)

$
0
0
Hi,

In our environments we are intermittently facing an issue where the nginx.pid file goes missing, due to which whenever we try to do a reload of nginx, it fails saying "no pid file exists". Is there any known scenarios due to which the nginx.pid file goes missing?

Does the nginx reload has any effect on the pid file? Ideally it should not, isn't ?

Also, what we have noticed is, sometimes whenever we tried to do a restart of nginx, i.e quit nginx and then start it again, at times, the nginx master and worker processes start but there is no pidfile written by nginx at the expected location?

Could anyone help on this issue?

Rewrite to a different host (round robin) (no replies)

$
0
0
Hey guys,

I have a pool of host where I'd like to do a rewire to, following a round
robin algorithm. I can ot make nginx or nginx plus accept upstream
hosts..or a variable set by set_random like here
https://serverfault.com/questions/597671/load-balancing-in-nginx-with-redirect-rather-than-proxy

Any idea how to do it?
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

Why fastcgi_temp, scgi_temp, uwsgi_temp directories getting created under home dir (1 reply)

$
0
0
Hello,

We see following directories getting created in our home directory when we
install nginx:

- fastcgi_temp
- scgi_temp
- uwsgi_temp

Can someone please tell me what are these directories and how can I
configure nginx not to create these or create at a different location?

At first I thought these are some sort of caching directory but we don't
have caching enabled so I am hoping it has nothing to do with caching.

We are using nginx mail module with http proxy. We don't have fastcgi, scgi
and uwsgi modules so not sure why are these directories being created? Here
is our nginx config:
https://gist.github.com/prabhash1785/fe7bd1f4da4f63503135bd296fc77633

Other details:
nginx version: 1.7
GCC 4.4.7
OS - RHEL 6.8

Appreciate your help!
Prabhash Rathore
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

performance: static or dynamic modules (no replies)

$
0
0
Is any performance difference between using static or dynamic modules?
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

Upstream module usage to process data (no replies)

$
0
0
Hi All,
I'm developing NGINX module which should read some binary data from upstream server, process it an send response to the user.
So to do it i'm using ngx_http_upstream API to create upstream request and get data. So the question is where is the right point to start processing of received chain of buffers and how to avoid call to ngx_http_output_filter from ngx_http_upstream_process_non_buffered_request?
I'm going to cal it by myself when data processing is finished.

During research i've tried to enable subrequest_in_memory flag to save all needed data for later processing
In upstream ngx_http_upstream_process_header there is a validation if subrequest is in memory
if (!r->subrequest_in_memory) {
ngx_http_upstream_send_response(r, u);
return;
}
When i enabled subrequest_in_memory flag i got an error "upstream buffer is too small to read response"
But in debugger i see that data are available in the upstream buffer. It looks for me that response is already saved. So how to explain such inconsistency?

Thank you in advance.

Params by PHP (no replies)

$
0
0
Hi,

I'm noob with nginx and I use a module named nginx rtmp.

Is it possible get params from the php script? (no by $_GET)

Thank you

Prebuilt nginx modules (configuration)? (3 replies)

$
0
0
hello, I have a few questions:

A. I want to install nginx on a seperate directory on my Ubuntu 14.04 LTS. Can I use the pre built version for that? How do it? Download the deb and run the command from terminal with the --prefix=/home/wibmoapp/apps/ngx/n1_12_0 option?

B. Else do I need to build from source? I'm able to build from source, but I want to know what are the exact modules that are included in the pre built Ubuntu version, where can I see that?

C. If I want to use debug option with pre built, installed on a seperate directory, what are the steps? In the Packages file (http://nginx.org/packages/mainline/ubuntu/dists/trusty/nginx/binary-amd64/Packages) I see
Filename: pool/nginx/n/nginx/nginx-dbg_1.9.0-1~trusty_amd64.deb
Size: 1217282

So is this a fresh install or an add on?
Need to back up config, install this and then re apply config?

thank you very much.

Modules folder not created (no replies)

$
0
0
I am running centos7 and am compiling the lua module and the ndk http
module. Everything seems to be configured correctly but after I do a make
and make install, the modules directory doesn't exist and there are no sign
of the shared libraries :

ndk_http_module.so
ngx_http_ula_module.so

Here is my configure command :

./configure --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx
--conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log
--http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid
--lock-path=/var/run/nginx.lock
--http-client-body-temp-path=/var/cache/nginx/client_temp
--http-proxy-temp-path=/var/cache/nginx/proxy_temp
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
--http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx
--with-http_ssl_module --with-http_realip_module
--with-http_addition_module --with-http_sub_module --with-http_dav_module
--with-http_flv_module --with-http_mp4_module --with-http_gunzip_module
--with-http_gzip_static_module --with-http_random_index_module
--with-http_secure_link_module --with-http_stub_status_module
--with-http_auth_request_module --with-mail --with-mail_ssl_module
--with-file-aio --with-ipv6 --with-stream --with-stream_ssl_module
--add-module='/root/proxy/ngx_devel_kit-0.3.0'
--add-module='/root/proxy/lua-nginx-module-0.10.8'
--with-ld-opt='-Wl,-rpath,/usr/local/lib' --with-cc-opt='-O2 -g -pipe
-Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector
--param=ssp-buffer-size=4 -m64 -mtune=generic'

In the directory /root/proxy/
ngx_devel_kit-0.3.0
lua-nginx-module-0.10.8

I exported these two variables:

export LUA_LIB=/usr/local/lib
export LUA_INC=/usr/local/include

and these directories do include the headers and libs.

The configure command fails without error and finds the directories under
/root/proxy. The make and make install generate no errors but the shared
objects are nowhere to be found.

Here is nginx version: nginx version: nginx/1.11.2
OS: Centos 7

nothing found in :

/etc/nginx/ (not even modules folder)
/usr/share/ (no nginx folder)
/usr/app/ (doesn't exist on Centos 7)

what am I doing wrong ?
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

nginx-1.13.1 (no replies)

$
0
0
Changes with nginx 1.13.1 30 May 2017

*) Feature: now a hostname can be used as the "set_real_ip_from"
directive parameter.

*) Feature: vim syntax highlighting scripts improvements.

*) Feature: the "worker_cpu_affinity" directive now works on DragonFly
BSD.
Thanks to Sepherosa Ziehau.

*) Bugfix: SSL renegotiation on backend connections did not work when
using OpenSSL before 1.1.0.

*) Workaround: nginx could not be built with Oracle Developer Studio
12.5.

*) Workaround: now cache manager ignores long locked cache entries when
cleaning cache based on the "max_size" parameter.

*) Bugfix: client SSL connections were immediately closed if deferred
accept and the "proxy_protocol" parameter of the "listen" directive
were used.

*) Bugfix: in the "proxy_cache_background_update" directive.

*) Workaround: now the "tcp_nodelay" directive sets the TCP_NODELAY
option before an SSL handshake.


--
Maxim Dounin
http://nginx.org/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

no modules found after compiling (3 replies)

$
0
0
I am running centos7 and am compiling the lua module and the ndk http
module. Everything seems to be configured correctly but after I do a make
and make install, the modules directory doesn't exist and there are no sign
of the shared libraries :

ndk_http_module.so
ngx_http_ula_module.so

Here is my configure command :

./configure --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx
--conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log
--http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid
--lock-path=/var/run/nginx.lock
--http-client-body-temp-path=/var/cache/nginx/client_temp
--http-proxy-temp-path=/var/cache/nginx/proxy_temp
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
--http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx
--with-http_ssl_module --with-http_realip_module
--with-http_addition_module --with-http_sub_module --with-http_dav_module
--with-http_flv_module --with-http_mp4_module --with-http_gunzip_module
--with-http_gzip_static_module --with-http_random_index_module
--with-http_secure_link_module --with-http_stub_status_module
--with-http_auth_request_module --with-mail --with-mail_ssl_module
--with-file-aio --with-ipv6 --with-stream --with-stream_ssl_module
--add-module='/root/proxy/ngx_devel_kit-0.3.0'
--add-module='/root/proxy/lua-nginx-module-0.10.8'
--with-ld-opt='-Wl,-rpath,/usr/local/lib' --with-cc-opt='-O2 -g -pipe
-Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector
--param=ssp-buffer-size=4 -m64 -mtune=generic'

In the directory /root/proxy/
ngx_devel_kit-0.3.0
lua-nginx-module-0.10.8

I exported these two variables:

export LUA_LIB=/usr/local/lib
export LUA_INC=/usr/local/include

and these directories do include the headers and libs.

The configure command fails without error and finds the directories under
/root/proxy. The make and make install generate no errors but the shared
objects are nowhere to be found.

Here is nginx version: nginx version: nginx/1.11.2
OS: Centos 7

nothing found in :

/etc/nginx/ (not even modules folder)
/usr/share/ (no nginx folder)
/usr/app/ (doesn't exist on Centos 7)

what am I doing wrong ?
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

Active/Active NginX configuration (no replies)

$
0
0
I current have configured 2 NginX running on Red Had Enterprise Linux 7.3. Both NginX will load balance a set of 4 application servers. The current configuration for both of the NginX is active / passive by using keepalived with a single virtual IP.

I would like to know how to make the 2 NginX into an active/active configuration without using round-robin DNS approach.

Re: [nginx-announce] nginx-1.13.1 (no replies)

$
0
0
Hello!

I am getting this error when trying to build on Cygwin:

-o objs/src/os/unix/ngx_udp_send.o \
src/os/unix/ngx_udp_send.c
cc -c -pipe -O -W -Wall -Wpointer-arith -Wno-unused-parameter -Werror -g
-D FD_
SETSIZE=2048 -I src/core -I src/event -I src/event/modules -I src/os/unix
-I /us
r/include/libxml2 -I objs \
-o objs/src/os/unix/ngx_udp_sendmsg_chain.o \
src/os/unix/ngx_udp_sendmsg_chain.c
src/os/unix/ngx_udp_sendmsg_chain.c: In function `ngx_sendmsg':
src/os/unix/ngx_udp_sendmsg_chain.c:274:16: error: `struct in_pktinfo' has
no me
mber named `ipi_spec_dst'
pkt->ipi_spec_dst = sin->sin_addr;
^
objs/Makefile:847: recipe for target
'objs/src/os/unix/ngx_udp_sendmsg_chain.o'
failed
make[1]: *** [objs/src/os/unix/ngx_udp_sendmsg_chain.o] Error 1
make[1]: Leaving directory '/home/kevin.worthington/nginx-1.13.1'
Makefile:8: recipe for target 'build' failed
make: *** [build] Error 2

Any help is greatly appreciated. Thanks.

Best regards,
Kevin
--
Kevin Worthington
kworthington AT gmail DOT com
https://kevinworthington.com/
https://twitter.com/kworthington

On Tue, May 30, 2017 at 11:12 AM, Maxim Dounin <mdounin@mdounin.ru> wrote:

> Changes with nginx 1.13.1 30 May
> 2017
>
> *) Feature: now a hostname can be used as the "set_real_ip_from"
> directive parameter.
>
> *) Feature: vim syntax highlighting scripts improvements.
>
> *) Feature: the "worker_cpu_affinity" directive now works on DragonFly
> BSD.
> Thanks to Sepherosa Ziehau.
>
> *) Bugfix: SSL renegotiation on backend connections did not work when
> using OpenSSL before 1.1.0.
>
> *) Workaround: nginx could not be built with Oracle Developer Studio
> 12.5.
>
> *) Workaround: now cache manager ignores long locked cache entries when
> cleaning cache based on the "max_size" parameter.
>
> *) Bugfix: client SSL connections were immediately closed if deferred
> accept and the "proxy_protocol" parameter of the "listen" directive
> were used.
>
> *) Bugfix: in the "proxy_cache_background_update" directive.
>
> *) Workaround: now the "tcp_nodelay" directive sets the TCP_NODELAY
> option before an SSL handshake.
>
>
> --
> Maxim Dounin
> http://nginx.org/
> _______________________________________________
> nginx-announce mailing list
> nginx-announce@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx-announce
>
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Viewing all 7229 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>