Hi,

we’re getting random SSL_write() failed errors on seemingly legitimate requests. The common denominator seems to be they are all for static files (images, js, etc.).

Can anyone help me debug the issue?

Here’s a debug log paste for one incident: https://pastebin.com/ZsbLuD5N

Our architecture is: Amazon ALB > Nginx 1.14 > PHP-FPM 7.3

Some of our possibly relevant nginx config parameters:

upstream php73 {
server unix:/run/php/php7.3-fpm.sock max_fails=20 fail_timeout=60;
}

ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 120m;
ssl_dhparam /etc/nginx/dhparam.pem;
ssl_ciphers !aNULL:!eNULL:FIPS@STRENGTH; # http://blog.chrismeller.com/configuring-and-optimizing-php-fpm-and-nginx-on-ubuntu-or-debian


# Caching configuration using 30 days expiration delay for static served files.
location ~ \.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|css|rss|atom|js|jpe?g|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf|cur)$ {
set $location_name static; # Location name
expires 30d;
log_not_found off;
access_log off;
}

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx