Http2 enable on all virtul host settings automatically

2017-09-14 Thread Junaid Malik
Hello Guys, We recently upgraded Nginx from nginx/1.9.12 - nginx/1.13.2, details of nginx/1.13.2 supported modules are given below. We are facing problem of automatic enabling of HTTP2 protocol on bsa1.example.com as we only enabled http2 on dsa1.example.com. Nginx configurations of both sites

Re: Http2 enable on all virtul host settings automatically

2017-09-14 Thread Maxim Dounin
Hello! On Thu, Sep 14, 2017 at 11:06:30AM +, Junaid Malik wrote: > We recently upgraded Nginx from nginx/1.9.12 - nginx/1.13.2, > details of nginx/1.13.2 supported modules are given below. We > are facing problem of automatic enabling of HTTP2 protocol on > bsa1.example.com as we only enab

Too many redirects

2017-09-14 Thread tseveendorj
Hi, I configured http (www, non-www) to https (non-www) and https (www) to https (non-www). It is working fine. But I need to add geoip redirection in location / but I got Too many redirect. This server is behind load balancer. LB is redirecting 80 to 81 and 443 to 80. server { liste

nginx cache growing well above max_size threshold

2017-09-14 Thread Lucas Rolff
Hi guys, I have a minor question, so I have an nginx box using proxy_cache, it has a key zone of 40 gigabyte (so it can cache 320 million files), a max_size of 1500 gigabyte for the cache and the inactive set to 30 days. However we experience that nginx goes well above the defined limit - in

Re: nginx cache growing well above max_size threshold

2017-09-14 Thread Maxim Dounin
Hello! On Thu, Sep 14, 2017 at 04:34:09PM +, Lucas Rolff wrote: > I have a minor question, so I have an nginx box using > proxy_cache, it has a key zone of 40 gigabyte (so it can cache > 320 million files), a max_size of 1500 gigabyte for the cache > and the inactive set to 30 days. > > H

Re: nginx cache growing well above max_size threshold

2017-09-14 Thread Lucas Rolff
Okay cool, I'll give it a try In our case we do not run http2 on the machines since haproxy runs in front as well (which doesn't support http2) I'll also try enable a bit more verbose logging on one of the machines to see what the logs say Thanks a lot Maxim! Best regards, Lucas Rolff Get Ou

Re: nginx cache growing well above max_size threshold

2017-09-14 Thread Jeff Dyke
You can actually can run H/2 through HAProxy, using ALPN to determine if the client understands H/2 I have the following (snippet of a) config that sends to different nginx ports based on the ALPN response. frontend https mode tcp bind 0.0.0.0:443 ssl crt /etc/haproxy/certs alpn h2,http/1.1 e

empty user-agent and logs

2017-09-14 Thread Christos Chatzaras
curl -A "-" https://hostname/index.php and curl -A "" https://hostname/index.php are logged with: xxx.xxx.xxx.xxx - - [14/Sep/2017:22:47:09 +0300] "GET /index.php HTTP/1.1" 200 26039 "-" "-" There is not difference if there is an empty

Re: Too many redirects

2017-09-14 Thread Francis Daly
On Thu, Sep 14, 2017 at 11:54:23PM +0800, tseveendorj wrote: Hi there, > location / { > index index.html; > if ($geoip_country_code != "JP") { return 301 > https://example.com/en/; } > } > location = /en/ { Change that to "location /en/ {"

Re: empty user-agent and logs

2017-09-14 Thread Francis Daly
On Thu, Sep 14, 2017 at 10:57:39PM +0300, Christos Chatzaras wrote: Hi there, > xxx.xxx.xxx.xxx - - [14/Sep/2017:22:47:09 +0300] "GET /index.php HTTP/1.1" > 200 26039 "-" "-" > > There is not difference if there is an empty user-agent or a user-agent with > a dash. > > Any idea it shows the e

Re: Too many redirects

2017-09-14 Thread Tseveendorj Ochirlantuu
Thank you Francis Daly. It works. On 15 Sep 2017 5:45 am, "Francis Daly" wrote: On Thu, Sep 14, 2017 at 11:54:23PM +0800, tseveendorj wrote: Hi there, > location / { > index index.html; > if ($geoip_country_code != "JP") { return 301 > https://example.co

Re: No Upstream Proxy Headers

2017-09-14 Thread Francis Daly
On Mon, Sep 04, 2017 at 08:46:48PM +, Kilian Ries wrote: Hi there, > i'm running a nginx (version: nginx/1.13.1) with two vhosts with exact the > same configuration. The only difference is the upstream section: each vhosts > points to a different upstream server / ip. > "nginx -T" will sh

Re: Modules needed to reverse proxy

2017-09-14 Thread Francis Daly
On Thu, Sep 07, 2017 at 02:37:24AM +0200, Jose Carlos Sánchez wrote: Hi there, > Hi, i need to recompile nginx to include modsecurity module and i want to > take advantage of not compiling unnecessary modules. > Someone has the list of modules needed to do reverse proxy? ./configure --help |