Welcome! Log In Create A New Profile

Advanced

SSL NGINX + SSL IIS Update

November 14, 2011 06:14AM
Здравствуйте, в логах сново появились такие строчки:

- - [14/Nov/2011:12:04:53 +0300] "GET / HTTP/1.1" 302 154 "-" "Mozilla/5.0 (Windows NT 5.1; rv:8.0) Gecko/20100101 Firefox/8.0" "-"
- - [14/Nov/2011:12:04:58 +0300] "-" 400 0 "-" "-" "-"
- - [14/Nov/2011:12:05:20 +0300] "GET / HTTP/1.1" 200 4142 "-" "Mozilla/5.0 (Windows NT 5.1; rv:8.0) Gecko/20100101 Firefox/8.0" "-"

- - [14/Nov/2011:13:12:14 +0300] "-" 400 0 "-" "-" "-"
- - [14/Nov/2011:13:12:37 +0300] "GET / HTTP/1.1" 200 4144 "-" "Mozilla/5.0 (Windows NT 5.1; rv:8.0) Gecko/20100101 Firefox/8.0" "-"

- - [14/Nov/2011:12:04:53 +0300] "GET / HTTP/1.1" 302 154 "-" "Mozilla/5.0 (Windows NT 5.1; rv:8.0) Gecko/20100101 Firefox/8.0" "-"
- - [14/Nov/2011:12:04:58 +0300] "-" 400 0 "-" "-" "-"
- - [14/Nov/2011:12:05:20 +0300] "GET / HTTP/1.1" 200 4142 "-" "Mozilla/5.0 (Windows NT 5.1; rv:8.0) Gecko/20100101 Firefox/8.0" "-"

2011/11/14 14:02:24 [crit] 11819#0: *26 rename() "/var/www/0000000013" to "/var/www/" failed (20: Not a directory) while reading upstream, client: 111.222.333.444, server: www.test.com, request: "GET / HTTP/1.1", upstream: "https://IIS:500/", host: "www.test.com"

Установка соединения с сайтом идет очень долго, потом контент отдается за пару секунд.
Можете подсказать какие есть ошибки в конф файлах? И что можно еще подправить для ускорения отклика.
IIS на Win2008

nginx.conf:

user nginx;
worker_processes 4;
worker_rlimit_nofile 100000;
timer_resolution 100ms;


error_log /var/log/nginx/error.log;
#error_log /var/log/nginx/error.log notice;
#error_log /var/log/nginx/error.log info;

pid /var/run/nginx.pid;


events {
worker_connections 5024;
use epoll;
}


http {
include /etc/nginx/mime.types;
default_type application/octet-stream;

log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';

access_log /var/log/nginx/access.log main;

sendfile on;
tcp_nopush on;
tcp_nodelay on;
server_tokens off;
gzip on;
gzip_static on;
gzip_comp_level 5;
gzip_min_length 1024;
keepalive_timeout 25;
limit_zone myzone $binary_remote_addr 10m;

# Load config files from the /etc/nginx/conf.d directory
include /etc/nginx/conf.d/*.conf;

server {
listen 80 default;
rewrite ^ https://www.test.com/;
}
}

#
# HTTPS server configuration
#
upstream backend-secure {
server www.test.com:443;
}

server {
listen 443 default;
server_name www.test.com ;
server_tokens off;
##########################
# GZIP
##########################
gzip on;
gzip_min_length 15;
gzip_buffers 16 8k;
gzip_proxied any;
gzip_disable "msie6";
gzip_comp_level 5;
#########################
# SSL
#########################
keepalive_timeout 60s;
sendfile on;
tcp_nodelay on;
expires 10s; #сколько хранить кэш
ssl on;
ssl_certificate /etc/nginx/conf.d/certificate.cer;
ssl_certificate_key /etc/nginx/conf.d/rsa.key;

ssl_session_cache shared:SSL:10m;
ssl_session_timeout 20m;

ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
ssl_prefer_server_ciphers on;

if ($host = "test.com" ) {
rewrite ^ https://www.test.com/;
}
location / {
proxy_pass https://IIS:500/;
proxy_redirect off;
proxy_ignore_client_abort off;
proxy_connect_timeout 600;
proxy_send_timeout 600;
proxy_read_timeout 600;
proxy_ignore_headers Expires Cache-Control;
proxy_hide_header Vary;
proxy_ssl_session_reuse on;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# кэш ответа бэкэнда
proxy_store on;
proxy_store_access user:rw group:rw all:r;
proxy_temp_path /var/www/;
root /var/www/;
########################
# proxy
#######################
#proxy_cache on;
}

#######################
# Statistic
#######################
location = /stat {
stub_status on;
access_log off;
allow 111.222.333.444;
deny all;
}
}
Subject Author Posted

SSL NGINX + SSL IIS Update

Fixid November 14, 2011 06:14AM

Re: SSL NGINX + SSL IIS Update

mva November 14, 2011 06:34AM

Re: SSL NGINX + SSL IIS Update

Fixid November 14, 2011 06:37AM

Re: SSL NGINX + SSL IIS Update

Roman Vasilyev November 14, 2011 12:20PM

Re: SSL NGINX + SSL IIS Update

Fixid November 14, 2011 12:28PM

Re: SSL NGINX + SSL IIS Update

Roman Vasilyev November 14, 2011 12:30PM

Re: SSL NGINX + SSL IIS Update

Fixid November 14, 2011 12:29PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 262
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready