Can’t comment on what’s best for your company. If you plan to do what you described, sounds like a reasonable plan, though many others exist. You can do this using nginx + vouch to hook into an idp like Okta, and introduce an identity layer into your connection to secure authentication and authorization up. Ldap over internet is a horrible idea. Good luck, Payam On Sun, Mar 12, 2023 at 12by unclepieman - Nginx Mailing List - English
It may be worthwhile for you to take a step back and read about the technologies and better understand the capabilities that these software solutions provide. It appears as if you are looking to this nginx list ad your own personal self help repository. Regards, Payam On Sat, Feb 25, 2023 at 12:49 PM Saint Michael <venefax@gmail.com> wrote: > what would it be the right tool? > &gby unclepieman - Nginx Mailing List - English
+1 Francis Saint, I wonder if this might satisfy your ask indirectly. Assign a secondary ip address to a nic, and redirect to that ip for your iframe processing. Then you can apply a more specific ACL at host or nginx level to control iframe reachability, or even use a ip address thats only reachable to your internal users. The more correct way of doing all of this is through secure user sessiby unclepieman - Nginx Mailing List - English
You need to be more clear on what you are trying to do so we can help you. Draw a diagram or something with the details. You can use authentication and use that to protect and use at the same time but again, you have left out some critical details as to what you are tying to accomplish. Nginx is powerful, you can write rules to do almost anything, but first you need to figure out what you want tby unclepieman - Nginx Mailing List - English
Yes it does, but you are not providing enough on what you are doing, only what you want to do. Run developer tools and see what your ip address is reported as. On Sun, Feb 19, 2023 at 7:54 PM Saint Michael <venefax@gmail.com> wrote: > I also tried > > deny 192.168.1.1; > allow 192.168.1.0/24; > allow 10.1.1.0/16; > allow 2001:0db8::/32; > deny all; &by unclepieman - Nginx Mailing List - English
You need to learn two things: 1- learn to read the page and understand what the expected result should be 2- google! Your problem has been well covered thousands of times before. Your 404 is expected error code when you are accessing the website from external. Also, read https://nginx.org/en/docs/http/ngx_http_access_module.html On Sun, Feb 19, 2023 at 6:34 AM Saint Michael <venefax@gmaiby unclepieman - Nginx Mailing List - English
Nice job! Though I think what you mean is that you found the answer by searching, chatgpt or otherwise :) Keep in mind, chatgpt is trained on 2y old data :) On Fri, Feb 3, 2023 at 9:14 AM Saint Michael <venefax@gmail.com> wrote: > I won already. > Thanks to chatgpt. > I asked the question and it gave the answer. > > On Fri, Feb 3, 2023, 11:22 AM Payam Chychi <pchychi@gmaby unclepieman - Nginx Mailing List - English
Lol, that is the point…. Proxies do stuff to the connection that makes it easy to detect if you know what you are looking for :) As it stands… you are not going to win this one. On Fri, Feb 3, 2023 at 3:57 AM Saint Michael <venefax@gmail.com> wrote: > I am sure that it can be done. I am just passing everything to them. > > On Fri, Feb 3, 2023, 4:39 AM Manuel <manuel.baeslby unclepieman - Nginx Mailing List - English
On Wed, Jan 4, 2023 at 12:33 PM Eduardo Kortright <ekortright@ewtn.com> wrote: > I have several servers hosting multiple Rails sites, using nginx as a > reverse proxy. All sites have unique host names and, at least at first, > nginx returns the content for each site correctly (dynamic content from > Rails as well as static assets such as images, javascript and CSS). > > Boby unclepieman - Nginx Mailing List - English
On Sun, Nov 20, 2022 at 1:07 PM masber masber <masber@hotmail.com> wrote: > dear nginx community, > > I would like to communicate with a client with a server application, they > can't see each other directly and I would like to use an nginx server to > solve this. The communication goes through HTTPS which is already set up on > the server. I was wondering whether it wouldby unclepieman - Nginx Mailing List - English
Lol On Sat, Apr 28, 2018 at 9:17 AM Danny Horne via nginx <nginx@nginx.org> wrote: > On 28/04/18 17:15, ScotGram wrote: > > STOP EMAILING > > _______________________________________________ > > nginx mailing list > > nginx@nginx.org > > http://mailman.nginx.org/mailman/listinfo/nginx > > If you want to unsubscribe, just follow the link in this emailby unclepieman - Nginx Mailing List - English
On Sun, Feb 25, 2018 at 1:18 PM Francis Daly <francis@daoine.org> wrote: > On Sun, Feb 25, 2018 at 11:34:17AM -0500, sonpg wrote: > > Hi there, > > > i using nginx to reverse proxy for sharepoint site: ecm.test.com:80 and > > redirect test.com:80 to https://test.com:443. > > it show "nginx: bind() to 0.0.0.0:80 failed (98: Address > already in > >by unclepieman - Nginx Mailing List - English
On Fri, Feb 23, 2018 at 4:32 AM Francis Daly <francis@daoine.org> wrote: > On Fri, Feb 23, 2018 at 04:15:31AM -0500, sonpg wrote: > > Hi there, > > > myserver requires NTLM authentication. I access myserver through nginx > proxy > > and provide correct auth info,but the browser prompt auth again. > > http://nginx.org/r/ntlm > > nginx does not support Nby unclepieman - Nginx Mailing List - English
On Wed, Jan 24, 2018 at 10:50 AM B.R. via nginx <nginx@nginx.org> wrote: > 500 requests max sounds very much like the default max_requests parameter > from PHP-FPM process manager. > > Btw, the configuration snippet you provided is incomplete (include > [...]/*.conf). How can people help you? > Have a look at nginx -T. > --- > *B. R.* > > On Wed, Jan 24, 2018 aby unclepieman - Nginx Mailing List - English
On Tue, Jan 23, 2018 at 9:22 PM agriz <nginx-forum@forum.nginx.org> wrote: > Sir, > > I can see any message there. > Additionally, There are the sysctl.conf file i modified > > net.ipv6.conf.all.accept_ra=2 > net.core.rmem_max = 16777216 > net.core.rmem_default = 31457280 > net.ipv4.tcp_rmem = 4096 87380 16777216 > net.core.wmem_max = 16777216 > net.ipv4.tcpby unclepieman - Nginx Mailing List - English
On Mon, Jan 22, 2018 at 6:02 AM Sékine Coulibaly <scoulibaly@gmail.com> wrote: > Hi, > > I'm evaluating Nginx Plus for a UDP Load Balancer but can't make it work. > The packets are spoofed correctly on the LB side (as seen with tcpdump, > where I can see packets created, the source IP being the one of the client, > the destination the one of the selected upstream). Howeveby unclepieman - Nginx Mailing List - English
On Fri, Jan 19, 2018 at 9:30 PM blason <nginx-forum@forum.nginx.org> wrote: > Hi there, > > I guess it was not an issue with NTLM where I am successfully able to > authenticate with sharepoint the front page loads successfully while > sub-site pages does not load up and I am not able to figure out the issue.. > > Will soon share the config and logs I would really apprecby unclepieman - Nginx Mailing List - English
On Fri, Jan 19, 2018 at 7:14 AM Jason Whittington < Jason.Whittington@equifax.com> wrote: > I haven’t done it for sharepoint but I have done it for TFS. If I had to > guess you are probably being bitten by NTLM. > > NTLM authentication authenticates connections instead of requests, and > this is somewhat contradicts HTTP protocol, which is expected to be > stateless. Asby unclepieman - Nginx Mailing List - English
On Thu, Jan 18, 2018 at 10:18 PM blason <nginx-forum@forum.nginx.org> wrote: > Wow man!! Thanks I am struggling with configuration as Subsites does not > show anything it shows blank page i.e only for blank page while Front page > gets open successfully. > > Posted at Nginx Forum: > https://forum.nginx.org/read.php?2,278193,278195#msg-278195 > > _____________________by unclepieman - Nginx Mailing List - English
On Thu, Jan 18, 2018 at 10:11 PM blason <nginx-forum@forum.nginx.org> wrote: > Hi Guys, > > Keen to know if there was any success rate for implementing Nginx as a > reverse proxy for Sharepoint? I mean I did implement however I am finding > issues with Sub-sites and wanted to know if there is any solution for the > same? > > Posted at Nginx Forum: > https://forum.by unclepieman - Nginx Mailing List - English
set your worker_process to 1 and try again _______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginxby unclepieman - Nginx Mailing List - English
Are you seeing any errors in your php log? are you connecting to the hostname or ip? Also, make sure your interface is connected at full duplex. whats the output of "ethtool eth0" replace eth0 with your nic in use. not sure what else really... id say to check dns but its all local to you - Payam On Wed, Jun 28, 2017 at 9:01 PM Anoop Alias <anoopalias01@gmail.com> wrote: >by unclepieman - Nginx Mailing List - English
On Wed, Jun 28, 2017 at 8:41 AM Andrea Soracchi <soracchi@multidialogo.it> wrote: > Hi, > could you please help me solve this issue? I'm getting crazy! > > Before the nginx update my client worked perfectly: it posted files to my > website without any delay. > > How, after nginx update (ubuntu 16.04 LTS) I've got this issue: > > - the client posts files successfulby unclepieman - Nginx Mailing List - English
You can also use ulimit but simple iptable/ipfw/pf will do the job On Tue, Apr 4, 2017 at 3:13 PM <lists@lazygranch.com> wrote: > You would probably want to also limit the number of connections per IP > address, else one IP could lock up the entire site. > > > Original Message > From: Valentin V. Bartenev > Sent: Tuesday, April 4, 2017 1:58 PM > To: nginx@nginx.oby unclepieman - Nginx Mailing List - English
On Apr 18, 2016, 6:25 PM -0700, Maxim Dounin<mdounin@mdounin.ru>, wrote: > Hello! > > On Mon, Apr 18, 2016 at 02:28:19PM -0700, Payam Chychi wrote: > > > > Maxim Dounin: > > > > > > > Just a side note: NTLM auth is broken by design and violates HTTP > > > > basic rules. Avoid using it if you can. > > > > > > to be clby unclepieman - Nginx Mailing List - English
> Maxim Dounin: > >> Just a side note: NTLM auth is broken by design and violates HTTP >> basic rules. Avoid using it if you can. > > to be clear: I don't care if it's named NTLM or ugly_voodoo > > The goal is a nginx accesses by a IE/edge browser. Users should not be > bothered with authentication > as they are already logged on into the windows account. >by unclepieman - Nginx Mailing List - English
Look at your proxy cache path... (proxy_cache_path /var/www/test_cache)Are you sure the path exists and had proper perms/ownership? Payam On Feb 29, 2016, 11:03 AM -0800, CJ Ess<zxcvbn4038@gmail.com>, wrote: > Hello! I'm testing out a new configuration and there are two issues with the proxy cacheing feature I'm getting stuck on. > > 1) Everything is a cache miss, and I'm not suby unclepieman - Nginx Mailing List - English
Hi If your http server is on linux, why not simply use iptables to limit the speed per request? Anyways, yes, you can use nginx to limit transfer speeds. Nginx has several examples on the wiki Cherrs, Payam chychi On Feb 28, 2016, 10:52 AM -0800, vampeta<nginx-forum@forum.nginx.org>, wrote: > Hi guys, > i would like to understand if nginx can be used for my request, i try to >by unclepieman - Nginx Mailing List - English
Yep, im certain this is not an nginx problem as others have also pointed out. Two ways of solving an interface limitation problem. 1. Change ur load balancing algo to per packet load balancing. This will split up te traffic much more evenly on multiple interfaces however, i would not recommend this as you run the risk of dropped/ out of state pkt and errors... There are only few conditions that tby unclepieman - Nginx Mailing List - English
Hi, Forget the application layer being the problem until you have successfully replicated the problem in several different setups. Are you monitoring both links utilization levels? Really sounds like a network layer problem or something with your ip stack. Can you replicate using ftp, scp? How is your switch configured? How are the links negotiated, make sure both sides of both links are fullby unclepieman - Nginx Mailing List - English
![]() |
![]() |
![]() |
![]() |
![]() |