I'm facing exactly same issue when modsec rule engine is turned ON and the request content-length is above 1mb Which version of Nginx are you using ?