Show all posts by user

Re: (draft) Privacy by design - offer more convenient way to anonymize IPs in access log by default - Today

The idea is noble but irl. this is not going to do much / remain unused. Logging is one thing, being able to react to logging is another, reacting is important when handling attacks of any kind which is often based on logging (regardless if this is internal or external code-wise). Fully automated attack handling systems need full information, having gdpr logging might be nice but will become

by itpp2012 - Nginx Development

Re: nginx last version on windows - 19 days ago

There's no point in trying, that module's code is full of errors and too many hacks. Your better of with Lua which is embedded in our version, see https://www.gakhov.com/articles/implementing-api-based-fileserver-with-nginx-and-lua.html

by itpp2012 - Nginx Mailing List - English

Re: nginx last version on windows - 19 days ago

I will have a look to see if this can be included in our next version.

by itpp2012 - Nginx Mailing List - English

Re: Is there a way yo use Nginx to build web app only with C++ - 2 months ago

That is what Lua is for, why re-invent the wheel when Lua is almost pure C++

by itpp2012 - How to...

Re: Is there a way yo use Nginx to build web app only with C++ - 2 months ago

Nope, but you can get close enough with (embedded) Lua.

by itpp2012 - How to...

Re: How to delete Account from forum.nginx.org - 2 months ago

I'll deactivate it, it means the same but without removal of posts.

by itpp2012 - Other discussion

Re: Nginx proxy with multiple ips behind VPN - 3 months ago

Such dynamics are better solved with Lua by keeping the actual state in memory pulled from a database. Drop this into google: "nginx lua dynamic proxy"

by itpp2012 - How to...

Re: How to delete Account from forum.nginx.org - 3 months ago

I can deactivate it.

by itpp2012 - Other discussion

Re: HLS stream issue - 3 months ago

Drop "Cannot load M3U8: Crossdomain access denied" in Google, plenty of solutions.

by itpp2012 - Nginx Mailing List - English

Re: Rtmp streams sometimes connects and sometimes doesn't - 3 months ago

You first need to investigate the logfiles before looking for a solution, is the stream still connected to obs when the client disconnects? what if you use 2 workers is one of them busy and with a reconnect switches over to the other worker? if thats the case does this free the other busy worker? etc,etc,etc... Because there are thousands of solutions you need to narrow them down by investigating

by itpp2012 - Other discussion

Re: Rtmp streams sometimes connects and sometimes doesn't - 3 months ago

Drop this into google "rtmp stream player keeps buffering"

by itpp2012 - Other discussion

Re: Load Balancing TCP directive mail {} - 3 months ago

andersonsserra Wrote: ------------------------------------------------------- > nginx: "stream" directive is not allowed here in /etc/nginx/email/balanceador.conf:1

by itpp2012 - Nginx Mailing List - English

Re: Switch between upstream server - 3 months ago

Sam Henaghan Wrote: ------------------------------------------------------- > Please stop emailing me and delete anything or any information you > have about me or even accounts please this wasn’t me whatever has been > made so please delete You have joined a public mailing list with the email address you are receiving these posts on, weather you or someone else done this you ne

by itpp2012 - Nginx Mailing List - English

Re: `if` or `include` for mode-specific `server` directives? - 4 months ago

https://blog.devcloud.hosting/configuring-nginx-for-quickly-switching-to-maintenance-mode-e4136cf497f3 https://forum.openresty.us/d/4770-c84503afcecd42ad08f3ec457c0948b7

by itpp2012 - Nginx Mailing List - English

Re: Limiting connections based on subnet - 4 months ago

Use 'map' to identify each subnet and this to limit: https://docs.nginx.com/nginx/admin-guide/security-controls/controlling-access-proxied-http/#limit_conn

by itpp2012 - How to...

Re: Print current running connections in nginx - 5 months ago

Best sample code: https://github.com/vozlt/nginx-module-vts

by itpp2012 - Nginx Mailing List - English

Re: auth_basic issue, won't protect full directory - 5 months ago

See the bottom (comments) of that article, your php block looks like it is not a part of the main location block.

by itpp2012 - How to...

Re: auth_basic issue, won't protect full directory - 5 months ago

https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

by itpp2012 - How to...

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n - 5 months ago

Thomas Stephen Lee Wrote: ------------------------------------------------------- > Hi, > > does > > OpenSSL 1.1.1f. > > fix the issue ? Yes.

by itpp2012 - Nginx Mailing List - English

Re: NGINX on windows - 5 months ago

Look at this version, per-compiled, high performance http://nginx-win.ecsds.eu/

by itpp2012 - Nginx Mailing List - English

Re: SSL_read() failed on Nginx built with new OpenSSL 1.1.1e - 5 months ago

See https://forum.nginx.org/read.php?2,287377 Revert back to 1.1.1d

by itpp2012 - Nginx Mailing List - English

Re: Install http_charset_module - 6 months ago

Not all components are modules, using a viewer in hex-mode you could view the binary and search for the options. Or just try to use it and run -T to see if this feature is giving an error or not.

by itpp2012 - How to...

Re: Install http_charset_module - 6 months ago

It's added by default, see also http://nginx.org/en/docs/configure.html

by itpp2012 - How to...

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n - 6 months ago

It doesn't and there are a few more for which this doesn't work either, it needs a lot more work and testing. I had a new concept patch but today decided to roll back to 1.1.1d and back port 1.1.1e (de) patches only. Only NGX_ERROR mitigates a truncation attack, not NGX_DONE (which is open for debate).

by itpp2012 - Nginx Mailing List - English

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n - 6 months ago

How about this as this catches all 3 while conditions: +++ src/event/ngx_event_openssl.c @@ -2318, c->ssl->no_wait_shutdown = 1; c->ssl->no_send_shutdown = 1; if (sslerr == SSL_ERROR_ZERO_RETURN || ERR_peek_error() == 0) { ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0, "peer shutdown SSL cleanly"); return NGX

by itpp2012 - Nginx Mailing List - English

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n - 6 months ago

Others not as often as the primary but all related to 1.1.1e: All : SSL_read() failed (SSL: error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading) while processing HTTP/2 connection SSL_read() failed (SSL: error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading) while keepalive SSL_read() failed (SSL: error:14095126:SSL routines:ssl3_read_n:unexpected eof while re

by itpp2012 - Nginx Mailing List - English

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n - 6 months ago

Maxim Dounin Wrote: ------------------------------------------------------- > On Fri, Mar 20, 2020 at 10:41:32AM +0300, Sergey Kandaurov wrote: > > > On 18 Mar 2020, at 14:17, itpp2012 <nginx-forum@forum.nginx.org> wrote: > > > Question: does this need to resolved in openssl or nginx ? > > So, they deliberately changed existing behaviour, known since > &

by itpp2012 - Nginx Mailing List - English

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n - 6 months ago

After using 1.1.1e, see also the commit where an explicit entry has been added. nginx just reports back what openssl passes, if this was unexpected (none critical) nginx needs to be patched, if not this openssl workaround (10880) needs to be changed.

by itpp2012 - Nginx Mailing List - English

openssl 1.1.1e 14095126:SSL routines:ssl3_read_n - 6 months ago

Logging getting swamped with: 1808#2740: *20747 SSL_read() failed (SSL: error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading) while keepalive Related to: https://github.com/openssl/openssl/issues/10880 and this commit: https://github.com/openssl/openssl/commit/db943f43a60d1b5b1277e4b5317e8f288e7a0a3a Question: does this need to be resolved in openssl or nginx ? 22-3-2

by itpp2012 - Nginx Mailing List - English

Re: Accessing local servers using local IP as sufix to public IP - 10 months ago

Use a local DNS (or hosts file).

by itpp2012 - Ideas and Feature Requests