Timeline



12/12/18:

17:58 Ticket #1690 (Add MITM detection) updated by Fabian Franz BSc
njs sounds like a good solution so i think it may work as the …
15:32 text.txt attached to Ticket #1689 by Nar
nginx -T
15:08 Ticket #68 (Include larger speed units for HttpLimitReqModule) updated by Maxim Dounin
The patch is wrong, it does not take into account that rates use fixed …
15:03 Ticket #1691 (ngx_http_browser_module treats amazon web service health checker as ...) updated by malarres@…
Thank you very much for the clarification
14:46 Ticket #1691 (ngx_http_browser_module treats amazon web service health checker as ...) closed by Maxim Dounin
invalid: The ancient_browser directive …
14:18 Ticket #1690 (Add MITM detection) updated by Maxim Dounin
I see at least two problems with this: 1. Detection of various TLS …
13:03 Ticket #1691 (ngx_http_browser_module treats amazon web service health checker as ...) created by malarres@…
Amazon Load Balancer performs a series of Health checks, and as user …
10:32 Ticket #68 (Include larger speed units for HttpLimitReqModule) updated by xdmitry@…
can we give it a go please? change is straightforward: […]
00:15 Ticket #1687 (Overrides system default minimum TLS version) updated by Kurt Roeckx
The nginx documentation currently says you can enable SSLv2 and SSLv3, …

12/11/18:

19:45 Ticket #1690 (Add MITM detection) created by Fabian Franz BSc
Caddy has a feature to detect TLS MITM attacks by comparing …
17:24 Ticket #1689 (Writing connections leak with http/2) updated by Maxim Dounin
Ok, so you observe open socket ... left in connection ... alerts on …
16:33 Ticket #1689 (Writing connections leak with http/2) created by Nar
Writing connections counter is gradually grow up as shown on munin …
15:29 Ticket #714 (Writing connection leak while SPDY enabled) closed by Maxim Dounin
duplicate: For most recent tickets about HTTP/2 issues, please refer to #1610, …
14:54 Ticket #1688 (want to get the socket port which use in nginx and upstream servers) updated by Maxim Dounin
Priority, Type changed
How do you expect to use such a variable?
03:11 Ticket #1688 (want to get the socket port which use in nginx and upstream servers) created by liutanrong@…
i can not log the backend_source_port,why nginx doesn't have a …

12/10/18:

22:04 Ticket #714 (Writing connection leak while SPDY enabled) reopened by Nar
Have same issue with nginx 1.15.7 [[Image(...)]] uname -a …
22:03 nginx_leak.jpg attached to Ticket #714 by Nar
14:54 Ticket #1687 (Overrides system default minimum TLS version) updated by Maxim Dounin
In theory. In practice, there are number of problems with this …

12/09/18:

16:56 Ticket #1687 (Overrides system default minimum TLS version) updated by Kurt Roeckx
The point of system wide defaults is so that there actually is 1 place …
00:37 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) updated by gdrbyKo1@…
Replying to mdounin: That makes sense, thank you. …

12/08/18:

19:41 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) updated by Maxim Dounin
Replying to gdrbyKo1@…: > Thanks for your response. I just …
18:57 Ticket #1687 (Overrides system default minimum TLS version) closed by Maxim Dounin
wontfix: Thank you for your feedback. Allowed SSL protocol versions are …
10:10 Ticket #1687 (Overrides system default minimum TLS version) created by Kurt Roeckx
In https://hg.nginx.org/nginx/rev/7ad0f4ace359
03:35 Ticket #1686 (Log files ownership) closed by Maxim Dounin
invalid: On startup and on reload, log files are opened by the master process …
02:27 Ticket #1686 (Log files ownership) created by https://stackoverflow.com/users/573152/bernard-rosset
On log rotation, nginx seems to process …

12/06/18:

22:10 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) updated by gdrbyKo1@…
Replying to mdounin: > This seems to be a bug in the geo …
16:45 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) updated by Maxim Dounin
This seems to be a bug in the geo module, it doesn't know that there …
13:34 Ticket #1243 (Add primary media type for font) updated by Maxim Dounin
See also #1685.
13:33 Ticket #1685 (Update fonts mime types refer to IANA) closed by Maxim Dounin
duplicate: The only fonts in nginx's conf/mime.types are font/woff and …
08:37 Ticket #1685 (Update fonts mime types refer to IANA) created by bes.internal@…
Please update nginx/conf/mime.types refer to IANA. All fonts move to …

12/05/18:

09:46 Ticket #1057 (Google QUIC - statement) updated by maxim
Hello, We are planning to have this feature in our 2019 roadmap. …
09:39 Ticket #1057 (Google QUIC - statement) updated by raul.peixoto@…
Can someone on Nginx please take a look at supporting QUIC already?

12/04/18:

15:01 Milestone nginx-1.14.2 completed
Status: scheduled Trunk: stable * Bug fixes merge from the …
14:20 fetch_values.py attached to Ticket #1684 by gdrbyKo1@…
14:19 nginx.conf attached to Ticket #1684 by gdrbyKo1@…
14:19 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) created by gdrbyKo1@…
The documentation for ngx_http_geo_module states that "By default, the …
13:40 Ticket #1654 (nginx does not honor ssl_protocols for TLSv1.3) updated by Maxim Dounin <mdounin@…>
In [changeset:"11be3c0723bd808b03a1781a96e0b2cc09897fe9/nginx"
13:40 Ticket #1605 (nginx does not compile with LibreSSL 2.8.0) updated by Maxim Dounin <mdounin@…>
In [changeset:"2cf1d945bbb31b1c8294ad2533673753ff989305/nginx"
13:40 Ticket #1565 (Prematurely deleting request body temp files on fast response) updated by Maxim Dounin <mdounin@…>
In [changeset:"17ee239ae2e6caa8ec24d7626f5cc91b197e79cb/nginx"
13:40 Ticket #1469 (nginx won't build under libxcrypt due to missing 'current_salt' in ...) updated by Maxim Dounin <mdounin@…>
In [changeset:"b1a166ab7f04efc4205afc0bf56b89aab4e0d457/nginx"
13:40 Ticket #1546 (nginx/1.14.0 compilation with gcc 8.1.0 fails) updated by Sergey Kandaurov <pluknet@…>
In [changeset:"ed5b3c4c128421c13350a81978487c5c884626b1/nginx"
11:12 Ticket #1683 (ngx_parent in ngx_daemon() can not work properly?) closed by Maxim Dounin
invalid: The ngx_parent variable is expected to contain PID or original parent …
01:59 Ticket #1683 (ngx_parent in ngx_daemon() can not work properly?) created by chronolaw@…
In function ngx_daemon(), after fork the child would run ngx_parent = …

11/30/18:

19:04 Ticket #1682 (Nginx tries to open the html file and through error 404. I expected ...) updated by Maxim Dounin
Description changed
I've tested the configuration in question, and it seems to work fine …
18:48 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) closed by Maxim Dounin
wontfix: Thanks for testing. I'm not sure there is a good way to document all …
17:53 Ticket #1682 (Nginx tries to open the html file and through error 404. I expected ...) created by dertin@…
Hi, Nginx tries to open the html file and through error 404. I …
09:11 Ticket #1534 (OCSP client certificate validation) updated by boardbloke@…
+1 We have a number of use cases that require Mutual TLS with OCSP …

11/28/18:

13:19 Ticket #1681 (Default_type) updated by Maxim Dounin
> This isn't actually true right, if most installations are using the …
08:11 Ticket #1681 (Default_type) updated by Olaf van der Spek
> As for the keepalive_timeout, the default is 75s, and this is what …

11/27/18:

15:08 Milestone njs-0.2.6 completed
Planned features: * Stability fixes
15:07 Milestone nginx-1.15.7 completed
Status: scheduled Trunk: mainline * upstream_requests …
14:44 Ticket #1650 (Active connections not clear close session) closed by Maxim Dounin
invalid: Ok, thanks for confirming this.
10:48 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) updated by Ondřej Nový
Using larger buffers helps. Setting higher CONFIG_HZ or disabling …
06:46 Ticket #1650 (Active connections not clear close session) updated by kfir.snunit.org.il@…
I confirm that the bug was created because I used an old vesion of …

11/26/18:

13:14 Ticket #1677 (nginx does not resolve hostnames if there is no route) closed by Maxim Dounin
wontfix: When you write a name in the proxy_pass directive, nginx uses all …
10:55 Ticket #1677 (nginx does not resolve hostnames if there is no route) reopened by wanneut@…
The for-loop is wrong if you want to use connect. How do you connect …

11/24/18:

14:09 Ticket #1681 (Default_type) updated by Olaf van der Spek
Having two different nginx defaults is confusing..
12:49 Ticket #1681 (Default_type) updated by Maxim Dounin
It is. And one of the goals of any stock conf is to show how to tune …
06:33 Ticket #1681 (Default_type) updated by Olaf van der Spek
So that file isn't supposed to be used as the stock conf for nginx?

11/23/18:

21:58 Ticket #1681 (Default_type) updated by Maxim Dounin
Because one of the goals of the example configuration is to show how …
20:48 Ticket #1681 (Default_type) updated by Olaf van der Spek
> and this is what most installations would normally use Then why …
15:24 Ticket #1681 (Default_type) closed by Maxim Dounin
wontfix: Thank you for your suggestion. You can use `default_type …
14:07 Ticket #1681 (Default_type) updated by Olaf van der Spek
Same for keepalive_timeout.
13:56 Ticket #1681 (Default_type) created by Olaf van der Spek
docs: Default: default_type text/plain; nginx.conf: default_type …
13:10 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) updated by Maxim Dounin
Well, CONFIG_HZ=100 explains what you observe, as …
10:46 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) updated by Ondřej Nový
It's LXC container on bare metal. CONFIG_HZ=100 I will try …

11/22/18:

21:09 Ticket #1680 (Nginx HTTP Proxy Module) closed by Maxim Dounin
invalid: For questions on how to configure nginx, please use …
19:46 Ticket #1680 (Nginx HTTP Proxy Module) created by adolfo.vivendo.com.mx@…
NGINX Reverse Proxy: How to download from referenced server, save and …

11/21/18:

15:46 Ticket #1677 (nginx does not resolve hostnames if there is no route) closed by Maxim Dounin
wontfix: While on some systems getaddrinfo() indeed does not return IPv6 …
14:25 Ticket #1679 (Possible infinite loop in function ngx_cache_manager_process_cycle and ...) closed by Maxim Dounin
invalid: The ngx_worker_process_cycle() function is not used in cache loader …
14:01 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) updated by Maxim Dounin
Could you please provide details on the system you are testing with, …
02:30 Ticket #1679 (Possible infinite loop in function ngx_cache_manager_process_cycle and ...) created by 92siuyang@…
Hi, There are two possible infinite loop vulnerabilities in function …

11/20/18:

17:22 Ticket #1677 (nginx does not resolve hostnames if there is no route) reopened by wanneut@…
[…] This is wrong. getaddrinfo dosen't return IPv6-addresses if …
11:54 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) created by Ondřej Nový
Hello, I have a problem with directives limit_rate and …

11/19/18:

15:05 Ticket #1677 (nginx does not resolve hostnames if there is no route) closed by Maxim Dounin
wontfix: It looks like due to no IPv4 connectivity getaddrinfo() on your OS …
14:33 Ticket #1677 (nginx does not resolve hostnames if there is no route) created by wanneut@…
In my configuration is the following line: {{{proxy_pass …
14:19 Ticket #1671 (nginx-tests fail in docker container) closed by thresh
invalid
10:03 Ticket #1676 (nginx.service for tmpfs /var/log) closed by thresh
wontfix: /var/log/nginx is created when the packages are installed, and the …
02:42 Ticket #1676 (nginx.service for tmpfs /var/log) created by lucserre@…
Description: When running /var/log on a tmpfs, the /var/log/nginx …

11/18/18:

08:49 Ticket #1650 (Active connections not clear close session) updated by kfir.snunit.org.il@…
Hello, After a thorough review of the problem I was able to find the …
01:17 Ticket #812 (Fetch OCSP responses on startup, and store across restarts) updated by Maxim Dounin
Replying to [comment:7

11/17/18:

18:30 Ticket #1675 (OCSP stapling not working in stream area) created by Tributh@…
I have set up a mail-proxy setup and wanted to use OCSP stapling for …

11/15/18:

17:56 Ticket #1673 (Nginx don't read upstream response in case upstream close connection.) closed by Maxim Dounin
invalid: Once the connection was reset, it is not possible to read anything …
16:17 Milestone unit-1.6 completed
Planned features: * nodejs support fixes
15:45 Ticket #812 (Fetch OCSP responses on startup, and store across restarts) updated by https://stackoverflow.com/users/6250649/johannesb
Replying to mdounin: > Replying to [comment:5
13:08 Ticket #1674 (SSL session ID is not reused when other server disable session cache) closed by Maxim Dounin
invalid: Session caching/restoring happens in the context of the default …
07:19 Ticket #1674 (SSL session ID is not reused when other server disable session cache) created by ruoshan@…
the following command failed to reuse the SSL session ID, when nginx …

11/14/18:

15:32 Tickets #1528,​1585,​1670,​1533,​1534,​1612,​1656 batch updated by maxim
Milestone changed
Milestone renamed
09:50 nginx.conf attached to Ticket #1673 by akayunov@…
nginx.conf
09:49 Ticket #1673 (Nginx don't read upstream response in case upstream close connection.) created by akayunov@…
Hi, we have very usual configuration nginx + uwsgi, and out tests …

11/13/18:

17:13 Ticket #1672 (expose ngx_http_v2_push_resource in ngx_http_v2_filter_module) closed by Maxim Dounin
wontfix: There are no plans to made this API public. See detailed responses to …
04:02 Ticket #1672 (expose ngx_http_v2_push_resource in ngx_http_v2_filter_module) created by windjian@…
At now, nginx server push is implemented in header filter module, and …

11/12/18:

18:15 Ticket #1057 (Google QUIC - statement) updated by shibumi@…
HTTP/3 has been announced as HTTP over QUIC by the IETF: …
13:43 Ticket #1423 (response vary headers not used in the cache key) updated by Maxim Dounin
> Was there any movement on this over the past year? I haven't seen …
Note: See TracTimeline for information about the timeline view.