Welcome! Log In Create A New Profile

Advanced

Re: NGINX TLS Behavior

Sergey Kandaurov
December 26, 2018 07:24AM
> On 26 Dec 2018, at 14:56, bhaktaonline <nginx-forum@forum.nginx.org> wrote:
>
> Thanks for the quick response, Sergey,
>
> I set:
> postpone_output 200;
>
> killed/restarted the server
>
> this should have postponed writing output until 200 bytes is available. The
> HTTP header is 244 bytes and it should have triggered an output.. I however
> still see on single TLS record which has both header and data:
>
> Any suggestions?

Ok, that's due to SSL buffering in nginx that isn't configurable.
You can turn it off though by recompiling with this patch.

diff --git a/src/http/ngx_http_request.c b/src/http/ngx_http_request.c
--- a/src/http/ngx_http_request.c
+++ b/src/http/ngx_http_request.c
@@ -725,7 +725,7 @@ ngx_http_ssl_handshake(ngx_event_t *rev)
sscf = ngx_http_get_module_srv_conf(hc->conf_ctx,
ngx_http_ssl_module);

- if (ngx_ssl_create_connection(&sscf->ssl, c, NGX_SSL_BUFFER)
+ if (ngx_ssl_create_connection(&sscf->ssl, c, 0)
!= NGX_OK)
{
ngx_http_close_connection(c);


--
Sergey Kandaurov

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

NGINX TLS Behavior

bhaktaonline December 26, 2018 05:17AM

Re: NGINX TLS Behavior

Sergey Kandaurov December 26, 2018 05:42AM

Re: NGINX TLS Behavior

bhaktaonline December 26, 2018 06:56AM

Re: NGINX TLS Behavior

Sergey Kandaurov December 26, 2018 07:24AM

Re: NGINX TLS Behavior

bhaktaonline December 26, 2018 07:44AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 285
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready