Re: Client certificate based AUTH (ssl_client_certificate vs...
Although this is an old post, I landed on it when asking myself the same type of question, so I am posting this reply in case it helps. I wanted to avoid and send a list of trusted CAs to the client...
View ArticleHow to resume TLS sessions with SSL session ticket on a different server?
When using SSL session tickets for TLS session persistence no session state is supposed to be maintained by a server. In a configuration with multiple Nginx reverse proxies behind a load balancer,...
View ArticleReverse Proxy Configurations
Hi NGINX Team, I am new to this tool and urgently need help on this issue.Please help 1. We have a BPM server associated with inbuilt UI for workitem reation and implementation of reverse proxy is in...
View Articlenginx .htpasswd
Hi, I've a question. I have created a protected dir with a htpasswd file on server (centos 7, apache/nginx, plesk) I want to protect the dir /cms and all what comes after that. Only when I login on...
View ArticleWhat is best way of hiding server IP?
I have a domain name that I use with Nginx 1.13 and don't want to to have IP resolvable via browser. I was trying to do this in the /etc/nginx/conf.d/default.conf but was stilling getting 403 error...
View ArticleRe: What is best way of hiding server IP?
Our web-servers have multiple IPs so we do it using: if ( $http_host ~* "^([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})$" ) { return 444; }
View ArticleRe: What is best way of hiding server IP?
Thanks. I only have one IP for the VPS server.
View ArticleRewrite-like algorithm
Hello. I have the website running with Nginx 1.12.0. Since I started the development I don't think about folders сlean and tidy arrangement. So now i have a few pages on my website and they displays as...
View Articleauth_basic question/issue
I have set up the following on an Ubuntu LTS server installation, using the "default" nginx site configuration file. From what I have found so far, this should work -- and it does, sort of. If I know...
View ArticleWordPress: CSP Header
Hi everyone, I'm using nginx/1.6.2 on a GNU/Linux Debian (Jessie) system and hosting a WordPress site. The 'generel' CSP header I use is: add_header Content-Security-Policy "default-src 'self'; img-src...
View ArticleRe: Loadbalance a website that only support https
I think you should change proxy_pass value from https://myapp1; to myapp1; and add ssl on; parameter server section.
View ArticleStrange Caching issue
Hi team I have strange issue with reverse proxy configuration. I'm using reverse proxy configuration due to SSL from sha1 to sha256 transformation with proxy pass configuration "proxy_pass...
View ArticleRe: Strange Caching issue
Hi team Issue sort out. It's by desing. when nginx starting it's load all records own memory. if you can solve this issue you can use dynamic upstream's or resolver configuration http,server or...
View ArticleOptimizing images before caching them using proxy_cache
Hi I have setup Nginx s.domain.com to act as an image cache for my IIS-servers on www.domain.com (the IIS-servers are upstreams). I'm very new to Nginx but as far as I've understood this is what...
View ArticleAddress already in use
Hi all. Using nginx 1.10.3-0ubuntu0.16.04.2 I get several messages : aug. 07 20:43:07 ubuntu nginx[9578]: nginx: [emerg] listen() to 0.0.0.0:80, backlog 511 failed (98: Address already in use) my conig...
View ArticleNginx Reverse Proxy with HTTPS not working
I had successfully got the cert of my SSL and now I was trying to implement it into my AWS server with NGINX reserve proxy setup, here is the config file: server { listen 80; server_name example.com;...
View Article[Help] Custom error_page is not working. Why?
I'm using latest nginx(sid) on Debian, and my nginx server's config is like this: server { server_.... error_page 400 401 403 404 405 408 500 502 503 504 /_an_error_page_.html; ... (misc 403 rules,...
View ArticleHow to disable TLSv1 in Nginx?
I have this virtual host config in Nginx. TLSv1 is not configured in ssl_protocols but I'm still getting a response when doing curl or openssl s_client -tls1 -connect. # OS and Nginx version OS: Amazon...
View Article