Custom Query (2311 matches)

Nginx controller is accessed via external 3rd party proxy (then AWS ELB) for most locations paths. For monitoring tools Nginx controller ignores the 3rd party proxy and goes directly to ELB. Config (real-ip module enabled).

real_ip_header proxy_protocol;

real_ip_recursive on;

set_real_ip_from 0.0.0.0/0;

deny <ip_addr>/32;

The deny works for the monitoring paths but not others.

Hi, using the limit_req_module i've found a possible bug. the variable $limit_req_status is not filled, i guess because the same pointer, (variable) was used to set the http return code directive "limit_req_status code; as wrote in the documentation. unfortunately i'm not a good C devel so i can't provide a working patch. This behavior are present both in the source code compiled and also in the official deb.

I tried to put multiple virtual hosts in the nginx config while enabling quic, but nginx.conf will have validation error if I specify "listen 443 quic resueport" on multiple server blocks:

server {

listen 443 ssl; listen [::]:443 ssl; listen 443 quic reuseport; listen [::]:443 quic reuseport; http2 on; http3 on; http3_hq on; server_name vhost1;

... }

server {

listen 443 ssl; listen [::]:443 ssl; listen 443 quic reuseport; # ----> validation error listen [::]:443 quic reuseport; # ----> validation error http2 on; http3 on; http3_hq on; server_name vhost2;

... }

# nginx -t

nginx: [emerg] duplicate listen options for 0.0.0.0:443 [...]

If I comment out "listen 443 quic reuseport" in the second server block, then http/3 will only work for vhost1, not working for vhost2, even if "http3 on" is used. I tested this using a Chromium-based browser and curl with http3 enabled at compile time (curl3 --http3-only -v -k ​https://ip.address/ -H "Host: vhost2").

On the other hand, removing "reuseport" can let the config pass validation but QUIC connection cannot be established at all, http/3 is not working for neither vhost1 nor vhost2.

The nginx binary is downloaded from ​http://nginx.org/packages/mainline/debian