Re: I can't use TLS1.3 only in my site,please help
TLS 1.3 requires that you specify the following AEAD (Authenticated Encryption with Associated Data) ciphers: Try remove from nginx configuration ECDHE-ECDSA-CHACHA20...
View ArticleRe: I can't use TLS1.3 only in my site,please help
This i found on github from user kaduk when i google your error message from openssl command. The TLS 1.3 ciphersuites are qualitatively different than ciphersuites prior to TLS 1.3 (e.g., in that the...
View Articlenginx reverse proxy certificate
Hello this is my topology: client(my laptop)--https-->reverse proxy(vm1)--https-->upstream(10.X.X.X vm2) client (public ip 1.2.3.4) reverse proxy (public ip 5.6.7.8 , nginx, trusted certificates...
View Article--without-http_charset_module - ngx_http_charset_module
Hi all; I am running Nginx which was installed from an Ubuntu OS package the challenge now is ngx_http_charset_module is now required. When I run nginx -t I do not see the module listed meaning its not...
View ArticlePerformance Problem with Proxy Buffering Enabled
Hello, I hope everyone is doing well and staying healthy!! I recently found this forum while investigating a performance issue I'm having when proxy buffering is enabled. I've been looking and trying...
View Articlehealth check URI type rest (json)
Good afternoon. I currently have a server configured with balancing via / locale and / upstream. In / upstream I have a file declared for each backend group and in / locale my referenced operations...
View ArticleReverse proxy + Blynk
Hello, I use an nginx reverse proxy and I need to create a rule to allow communication with the IoT server Blynk. The website works smoothly, but Android applications do not. I read somewhere that it...
View ArticleNginx losing about 50% of requests
Hi all. We got server A that redirects requests to server B. Server B has primitive nginx configuration like: server { #proxy_connect_timeout 600; #proxy_send_timeout 600; #proxy_read_timeout 600;...
View ArticleNGINX proxy to Ingress Controller with Client Certificate Authentication
On my production env, I have a configuration with two Nginx and the communication between the two servers is secured with this config like this:...
View ArticleRe: NGINX proxy to Ingress Controller with Client Certificate Authentication
Attacched the ingress controller logs
View ArticleRe: NGINX proxy to Ingress Controller with Client Certificate Authentication
I need to enable SNI support on the NGINX client: proxy_ssl_server_name on; http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_server_name
View ArticleLogging to AWS Cloudwatch from Nginx Container
According to documentation for Nginx container "By default, the NGINX image is configured to send NGINX access log and error log to the Docker log collector". When we configure the logs to show up in...
View ArticleLimiting connections based on subnet
Hi I am new to NGINX and want to know if this is even feasible. We have a server running a warehouse application where users can connect to a webpage on port 9060 or connect with an RF gun on port 9380...
View ArticleLogging client IP on invalid request
I'm running nginx behind a proxy and use the real IP module along with the X-Forwarded-For header to log the real client address in access.log. This works fine for normal requests, but fails with an...
View ArticleWhat directory & file permissions do you recommend?
What directory and file permissions do you recommend for a basic website? At some point, I will be adding additional websites as subdirectories of the /etc/nginx/html path. I'm installing Nginx 1.18.0...
View ArticleRe: Limiting connections based on subnet
Use 'map' to identify each subnet and this to limit: https://docs.nginx.com/nginx/admin-guide/security-controls/controlling-access-proxied-http/#limit_conn
View Articleerror dynamic module nginx 1.10.3 ngx_http_headers_more_filter_module
Hi all) add dynamic module nginx 1.10.3 ngx_http_headers_more_filter_module #nginx -V nginx version: nginx/1.10.3 built by gcc 4.4.7 20120313 (Red Hat 4.4.7-23) (GCC) built with OpenSSL 1.0.1e-fips 11...
View ArticleRe: Reverse proxy + Blynk
If you didn't advise me, I did it myself. For those who want to solve it, I have a working but bad solution: To access the web administration, I use a reverse proxy according to the settings above. For...
View Articlereverse proxy websockets
Hi All, I hope you can help me. I have multiple sites and in front of this i have an nginx revers proxy to handle all the requests. Now with every site that is using websockets its not working for me...
View Article