On Thu, Apr 14, 2016 at 10:45:36PM -0400, CJ Ess wrote:

Hi there,

> In my environment I have Nginx terminating connections, then sending them
> to an HAProxy upstream. We've noticed that whenever HAProxy emts a 403
> error (Forbidden, in response to our ACL rules), NGINX reports a 503 result
> (service unavailable) and I believe is logging an "upstream prematurely
> closed connection while reading response header from upstream" error
> message in the nginx error log.
>
> What I'd really like to do is pass the 403 code back to the user - what do
> I need to do?

Can you provide a small config that shows the problem?

===
http {
upstream haproxy {
server 127.0.0.1:8080;
}
server {
listen 127.0.0.1:8080;
server_name haproxy;
return 403;
}

server {
listen 8080;
location / {
proxy_pass http://haproxy;
}
}
}
===

seems to suggest that nginx does what you want.

So - have you a different config; or is your haproxy not issuing a
"clean" 403, or is something else happening on the wire?

f
--
Francis Daly francis@daoine.org

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx