Welcome! Log In Create A New Profile

Advanced

Re: SPDY: nginx/1.6.2: proxy_pass does not work when https is used

Yury Kirpichev
December 16, 2014 03:50AM
Hi,

Here is full config, I tried to make it as small as possible.

worker_processes 12;

events {
worker_connections 8192;
use epoll;
}

http {
server {
listen [::]:6121 spdy;
listen [::]:80;

client_body_buffer_size 100k;
client_max_body_size 100k;

server_name *.maps.dev.yandex.net;

location /https/test {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_pass https://www.google.com/test;
}
}
}

Also, I've found that if I comment out line with worker_processes then
problem will disappear.

Here is output from /usr/sbin/nginx -V
nginx version: nginx/1.6.2
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --conf-path=/etc/nginx/nginx.conf
--error-log-path=/var/log/nginx/error.log
--http-client-body-temp-path=/var/lib/nginx/body
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi
--http-log-path=/var/log/nginx/access.log
--http-proxy-temp-path=/var/lib/nginx/proxy
--http-scgi-temp-path=/var/lib/nginx/scgi
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi
--lock-path=/var/lock/nginx.lock --pid-path=/var/run/nginx.pid --with-debug
--with-http_addition_module --with-http_flv_module --with-http_dav_module
--with-http_geoip_module --with-http_gzip_static_module
--with-http_gunzip_module --with-http_image_filter_module
--with-http_perl_module --with-http_realip_module
--with-http_stub_status_module --with-http_ssl_module
--with-http_spdy_module --with-http_sub_module --with-http_xslt_module
--with-ipv6 --with-sha1=/usr/include/openssl
--with-md5=/usr/include/openssl --with-mail --with-mail_ssl_module
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-echo
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-headers-more
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-development-kit
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-lua
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-upstream-fair
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-flv-filter
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-ip-tos-filter
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-addtag-exe
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-speedtest
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-eblob
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-request-id
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-favicon
--add-module=/home/buildfarm/teamcity/projects/nginx-stable/debian/modules/nginx-auth-sign

Unfortunately, I can not collect debug logs right now.
However, I did captured tcpdump on server with nginx and was able to see
that nginx established SSL connection with google.com, however, after that
it got stuck somewhere (can provide logs if you need it)

BR/ Yury

2014-12-16 3:18 GMT+03:00 Valentin V. Bartenev <vbart@nginx.com>:
>
> On Tuesday 16 December 2014 00:05:03 Yury Kirpichev wrote:
> > Hi,
> >
> > I've got a problem when tried to proxy spdy traffic to host via https
> > protocol.
> >
> > My config is simple like that:
> >
> >
> > location /https/test {
> >
> > proxy_set_header X-Real-IP $remote_addr;
> >
> > proxy_set_header Host $host;
> >
> > proxy_pass https://www.something.com/test;
> >
> > }
> >
> >
> > When request is performed through HTTP protocol, everything works fine
> > without any problem.
> >
> > However, when incoming request is done through SPDY, there is no response
> > from remote peer in about 10 seconds and connection is closed after that
> by
> > client.
> [..]
>
> I can't reproduce the problem with your simple config.
> It just works in both cases with or w/o SPDY.
>
> Could you please provide more information like "nginx -V" output
> and debug log: http://nginx.org/en/docs/debugging_log.html
>
> wbr, Valentin V. Bartenev
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

SPDY: nginx/1.6.2: proxy_pass does not work when https is used

Yury Kirpichev December 15, 2014 03:06PM

Re: SPDY: nginx/1.6.2: proxy_pass does not work when https is used

Valentin V. Bartenev December 15, 2014 07:20PM

Re: SPDY: nginx/1.6.2: proxy_pass does not work when https is used

unclepieman December 15, 2014 08:18PM

Re: SPDY: nginx/1.6.2: proxy_pass does not work when https is used

Yury Kirpichev December 16, 2014 03:50AM

Re: SPDY: nginx/1.6.2: proxy_pass does not work when https is used

Valentin V. Bartenev December 16, 2014 05:10AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 172
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready