Show all posts by user
Discussions in Russian
Re: Deny processing of `php.ini` files for PHP-FPM - 2 months ago
Your taking the wrong approach, the nginx process should not have any write/modify rights anywhere other than log location(s), the same for php. Both should be process separated.by itpp2012 - Nginx Mailing List - English
Supply Chain Compromise Affecting XZ Compression Library - 6 months ago
https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094 This may become a backdoor targeting nginx instances.by itpp2012 - Nginx Mailing List - English
Re: The relative path to the Windows root folder - 8 months ago
Use root set abs path, anything else will be relative to abs. https://nginx.org/en/docs/http/ngx_http_core_module.html#rootby itpp2012 - How to...
Re: The relative path to the Windows root folder - 8 months ago
server { listen ....; [...] root 'h:/websites/www.yoursite.com'; location /items/ { # adds to root setting try_files $uri $uri/ =404; [...] } } In php.ini you have stuff like, open_basedir = H:/Websites/www.yoursite.com doc_root = H:/Websites/www.yoursite.comby itpp2012 - How to...
Re: nginx ssl proxy for mysql - 8 months ago
BMX Wrote: ------------------------------------------------------- > The initial idea was this: MySQL client initiates SSL connection. > Instead of direct connection with MySQL server, it connects to Nginx > stream proxy with SSL and then Nginx redirects plain MySQL protocol to > MySQL server. This works for other services like MQTT, etc. If SSL from MySQL client <> how nby itpp2012 - How to...
Re: nginx ssl proxy for mysql - 8 months ago
BMX Wrote: ------------------------------------------------------- > OK, but this does not work. It seems that start of MySQL SSL handshake > is not standard and cannot be replaced by nginx SSL session. From the client side you access 127.0.0.1:3306 which is captured by something like stunnel, stunnel connects to your SSL terminating nginx (port forwarding mysql traffic), nxing passesby itpp2012 - How to...
Re: nginx allows TLS 1.1 connection even though configuration only permits TLSv1.2 - 8 months ago
ssl_protocols TLSv1.2 TLSv1.3; and all ssl_* settings should be part of your server {} blocks, not at http {} block level.by itpp2012 - Other discussion
Re: Can we blocked Headless browsers in Nginx? - 1 year ago
map $http_user_agent $browser_id { default 1; ~Mozilla/.*Chrome/ 0; ~Mozilla/.*Safari/ 0; ~Mozilla/.*Edg/ 0; } [...] location / { if ($browser_id) { return 403; }by itpp2012 - Nginx Mailing List - English
Re: Re-balancing Upstreams in TCP Loadbalancer - 1 year ago
You can do all of this with Lua (ea. Openresty).by itpp2012 - Nginx Mailing List - English
Re: 103 Early Hints support in NGINX - 1 year ago
dimasites Wrote: ------------------------------------------------------- > Hi all! > > We're laggards now! Crome removed HTTP/2 Server Push support and we > lost about 30% page load time! > Pruflink: https://developer.chrome.com/blog/removing-push/ > > We need 103 Early Hints emergency! Loosing loadtime without Push or EH indicates a serious issue with your websitby itpp2012 - Ideas and Feature Requests
Re: Content Negotiation For Nginx for multilingual website. - 1 year ago
If this 'default http://XYZ.cloudfront.net;' is also for EN, add such line explicitly, ~en http://XYZ.wpengine.com/;by itpp2012 - How to...
Re: Nginx as a MS RD Gateway reverse proxy - 1 year ago
No, HTTP is not the same as Stream (raw).by itpp2012 - How to...
Re: Nginx as a MS RD Gateway reverse proxy - 1 year ago
Only with the Stream module: http://nginx.org/en/docs/stream/ngx_stream_core_module.htmlby itpp2012 - How to...
Re: Future of QUIC in Stream - 1 year ago
Roman Arutyunyan Wrote: ------------------------------------------------------- > We are open for feedback about QUIC in Stream, application protocols > and the features you expect in Stream. Hi Roman, Maybe a dead mouse but I would expect this to work in a QUIC tls stream: map $ssl_preread_server_name $sslhservice {}by itpp2012 - Nginx Mailing List - English
Re: NGINX Reverse proxy with basic auth in windows - 1 year ago
server { [...] location / { auth_basic "User/Pass needed"; auth_basic_user_file access.txt; proxy_pass http://127.0.0.1:8080; } [...]by itpp2012 - How to...
Re: Build Issue with NGINX for Windows - 1 year ago
https://stackoverflow.com/questions/54695248/building-openssl-for-windows-x64by itpp2012 - Nginx Mailing List - English
Re: Open-sourcing periodic upstream server resolution and implementing a dedicated service worker. - 2 years ago
An easy Lua based solution designed 7 years ago and still works today for any OS https://forum.nginx.org/read.php?2,257019,257019#msg-257019 https://github.com/bedowi/nginx/tree/master/conf/EBLBby itpp2012 - Nginx Development
Re: Nginx ssl 443 conf help ! - 2 years ago
>> proxy_pass http://0.0.0.0:2300;by itpp2012 - How to...
[News] Igor Sysoev leaving nginx - 2 years ago
@Igor Sysoev, thanks for all your work and a wonderful product, we all hope you enjoy whatever you do next.by itpp2012 - Nginx Mailing List - English
Re: Preserve only specific query string params - 2 years ago
https://stackoverflow.com/questions/65716736/how-to-get-a-part-of-url-nginx-rewrite-luaby itpp2012 - Other discussion
Re: Nginx - ssl_preread for http/https/ssh - 3 years ago
Ssh does not pass SNI, and thats the only difference with https, after (or before) you could split for http but clients will get confused. Ea. you have to use a mix of $ssl_preread_protocol and $ssl_preread_server_name to get all 3 working.by itpp2012 - How to...
Re: Nginx - ssl_preread for http/https/ssh - 3 years ago
Technically that should work, but you are mixing 2 different types of traffic on a none standard port and you don't have a ssh redirect.by itpp2012 - How to...
Re: Nginx - ssl_preread for http/https/ssh - 3 years ago
alen.loncaric Wrote: ------------------------------------------------------- > But i don't know how to combine SSH, HTTPS(TLS) and HTTP on same port? > Is this even possible ? So I have one "service port" for serving iot Possible but not going to work as http is not encrypted.by itpp2012 - How to...
Re: path based routing as a reverse proxy - 3 years ago
Your google keywords for today are: Lua, Redis, Openresty.by itpp2012 - How to...
Re: nginx is considering only .html files with the name "index" - 3 years ago
Whats in the log files?by itpp2012 - Other discussion
Re: nginx is considering only .html files with the name "index" - 3 years ago
Within the location block you will see: index index.html index.htm; There you can edit/add whatever you like.by itpp2012 - Other discussion
Re: rewrite by script - 3 years ago
Not possible with stock nginx but you can with Lua (openresty), here we use it to map any.dom.com where 'any' has aliases stored in a cached database which gets refreshed daily.by itpp2012 - How to...
Re: Provide better way to quiesce servers in a TCP Stream farm as part of taking them out of rotation - 3 years ago
Lua (openresty) is your friend here, no reload needed.by itpp2012 - Ideas and Feature Requests
 |
 |
 |
 |
|