Show all posts by user

Re: Remote Desktop Gateway behind NGINX Reverse Proxy - 8 years ago

You can't share a https and stream on the same port, either only use stream or use a different port with stream. RDP needs stream as its TCP and not HTTP(s). # load balance your rdp servers via port 444 worker_processes 2; error_log logs/error.log; events { worker_connections 16384; } # http { # ... your usual http block ... # } # http end stream { error_log logs/st

by itpp2012 - How to...

Re: nginx application error 0xC0000142 on Windows shutdown - 8 years ago

papertape Wrote: ------------------------------------------------------- > when it's service is stopped, it is adviced to add this line: > TASKKILL /F /IM "nginx*" > > This looks promising, even though 'ngx_stop.cmd' does not appear to be > in the download. > > FYI: nginx is installed as part of our application's automated > installer, which uses In

by itpp2012 - Other discussion

Re: Change default SSL port from 443 to other port? - 8 years ago

That is correct, make sure you use that port with the browser, https://bla:444/

by itpp2012 - How to...

Re: Change default SSL port from 443 to other port? - 8 years ago

You should change the listen directive for ssl to some other port, use some port listen command/tool to see if nginx is listening after changing it.

by itpp2012 - How to...

Re: Blocking large list of IP addresses - 8 years ago

Lua and it's shared dictionary (in memory) can do this.

by itpp2012 - How to...

Re: Intranet "Reverse Proxy" aka http://sonarr goes to my sonarr program - 8 years ago

With an internal DNS server you can do that.

by itpp2012 - How to...

Re: Issue with proxy_pass, request URI's, and upstream servers - 8 years ago

Try the direct IP address in upstream, if that works (port is kept) then it is for sure a dns issue. It might be an application issue, for example you get data on port 8000 and proxy this to 9000 but the application expects data on 8000 so after the first connect the application removes 9000 and re-inserts 8000, this is typical tomcat behavior until you tell the tomcat application data is comin

by itpp2012 - How to...

Re: Issue with proxy_pass, request URI's, and upstream servers - 8 years ago

Some google results: https://tenzer.dk/nginx-with-dynamic-upstreams/ http://stackoverflow.com/questions/24350124/port-number-getting-stripped-out-of-url https://forum.nginx.org/read.php?2,239790,239794#msg-239794

by itpp2012 - How to...

Re: Issue with proxy_pass, request URI's, and upstream servers - 8 years ago

> "C:\nginx-1.9.15/html/arcgis/home/index.html" is not found Your 'root' is set wrong, obviously what you want returned doesn't live there.

by itpp2012 - How to...

Re: Issue with proxy_pass, request URI's, and upstream servers - 8 years ago

It should not direct to nginx but change the request path and pass that on to the backend(s), in combination with 'root' being set accordingly.

by itpp2012 - How to...

Re: Issue with proxy_pass, request URI's, and upstream servers - 8 years ago

Don't use proxy_redirect. Adjust proxypass / rewrite to make sure they point to folders that exist.

by itpp2012 - How to...

Re: Override HTTP-Method - 8 years ago

Maybe with Lua, otherwise you need to hack the code to not handle a 400, a grep for 400 and a grep for some other code which works as desired may give you an idea what to do. nginx does not waste time with broken clients hence the 400 handling, it may cost you performance when you actually handle it as a lot of basic attacks result in 400's (ea. a DROP).

by itpp2012 - Other discussion

Re: Override HTTP-Method - 8 years ago

Correct, a 400 is handled internally before any other handler, see also https://forum.nginx.org/read.php?2,158557,158557#msg-158557

by itpp2012 - Other discussion

Re: Override HTTP-Method - 8 years ago

Try with Curl, check what it reports back including the headers and check the logfiles to see what Curl reports can be found in the logs.

by itpp2012 - Other discussion

Re: Issue with proxy_pass, request URI's, and upstream servers - 8 years ago

Then you need to do some rewriting, ea. rewrite /portal/([^/]+) /arcgis/$1 break; proxy_pass ........

by itpp2012 - How to...

Re: Issue with proxy_pass, request URI's, and upstream servers - 8 years ago

location /portal { proxy_pass http://conHTTP/portal; proxy_set_header X-Forwarded-Host nlb.com; } Or; location /portal { proxy_pass http://conHTTP; proxy_set_header X-Forwarded-Host nlb.com; }

by itpp2012 - How to...

Re: Override HTTP-Method - 8 years ago

Look at the 'map' example on that site, standard nginx stuff.

by itpp2012 - Other discussion

Re: Override HTTP-Method - 8 years ago

Maybe this is helpful http://stackoverflow.com/questions/15362038/nginx-change-request-from-put-to-post

by itpp2012 - Other discussion

Re: issue with Oracle HTTP Server 10.1.3 - 8 years ago

You can try the mailing list at https://forum.nginx.org/list.php?2 or the openssl forum on google groups, a detailed wireshark capture might be helpful for some to figure out what is going on.

by itpp2012 - Other discussion

Re: nginx 1.11.0: client sent stream with data before settings were acknowledged while processing HTTP/2 connection - 8 years ago

eiji-gravion Wrote: ------------------------------------------------------- > I'm seeing the same thing happen in Firefox 46. Nb. there is currently an issue with 46 and TLS. ea. don't use 46 for testing.

by itpp2012 - Nginx Mailing List - English

Re: SSL handshake failure - 8 years ago

Maybe this http://stackoverflow.com/questions/33806038/nginx-error-no-shared-cipher-but-there-are

by itpp2012 - Other discussion

Re: issue with Oracle HTTP Server 10.1.3 - 8 years ago

Could be, the idea was once a cipher is forced it either works or you get some other error pointing to the real problem. However you need to translate that cipher value into what nginx configuration understands; See also https://blog.qualys.com/ssllabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy http://security.stackexchange.com/questions/87326/what-is-the-impact-of

by itpp2012 - Other discussion

Re: issue with Oracle HTTP Server 10.1.3 - 8 years ago

Try a forced setting of only TLS_RSA_WITH_RC4_128_SHA for nginx front and backend.

by itpp2012 - Other discussion

Re: issue with Oracle HTTP Server 10.1.3 - 8 years ago

Then you must have some return/rewrite doing a 302 in your nginx configuration. If this is intended then its ok.

by itpp2012 - Other discussion

Re: Windows php cgi perfomance - 8 years ago

No, there is no service install support other then the installer we have online. A program running normally or as a service is no more then a flag at kernel level which we control anyway. There are always additional things that need to be done before starting and stopping which a regular service is unable to do, using a batchfile launched as a service allows everything and it won't effect ngin

by itpp2012 - Other discussion