Re: Did anybody sucessfully compiled Nginx with Modsecurity V3.0 and...
Is this step correct for nginx configure? ./configure --with-compat --add-dynamic-module="/local/nginxbuild/modsecurity-nginx"
View ArticleRe: Did anybody sucessfully compiled Nginx with Modsecurity V3.0 and...
mkuser143 Wrote: ------------------------------------------------------- > Did anybody sucessfully compiled Nginx with Modsecurity V3.0 and > Modsecurity-Nginx connector recently ? > Since I...
View ArticleGzip not work with public IP and port-mapping
Hi We are runing nginx on a host which IP is 10.25.1.26(private network IP), and there is a public IP such as 1.2.3.4(not real) and port 8090. We do the ip-port mapping 1.2.3.4:8090 to 10.25.1.26:8090...
View ArticleIntermittent SSL errors (upstream certificate verify error)
Hello, We have setup NGINX as a network proxy and performs 2-way TLS on either side, upstream and downstream. We noticed that randomly the container is giving 502s when connecting to upstream. The...
View ArticleTrying to normalize apps that pass either header or querystring based value
I'm trying to normalize the way a couple applications access a web resource and have come up with what is a very ugly solution and am curious as to if anyone else have a better, cleaner one. In this...
View ArticleRe: Slow load testing via apachebench 1 per second
Slow load testing using ApacheBench (ab) at a rate of 1 request per second can be a useful way to assess the performance of a web server or application under low and steady traffic conditions. Slow...
View ArticleExtract SHA256 certificate thumbprint in Nginx
Hi, I have used Nginx as a proxy infront of my authorization server (IDP) which handles mtls. We have a requirement to extract SHA256 fingerprint from client certificate in Nginx and forward it to the...
View Articleare these nginx books worth it?
nginx from beginner to pro nginx cookbook I will purchase one udemy course by zeal vora to learn nginx. But I am wondering if purchasing 2 courses is more worth than purchasing these 2 books( Cost...
View Articleadd_header X-Content-Type-Options nosniff;
https://www.keycdn.com/support/x-content-type-options Reading this and got really confused. What does this mean?
View Articlenginx making a POST method to GET
I have configured nginx for my PeopleSoft application as a reverse proxy server to convert TLS 1.0 to TLS1.2 to send the mesages to Azure APIM I have nginx debug enabled and my access,log shows that...
View Articlecve-2023-4863 - open-source libwebp library
Just info if NGINX including docker images or reverse proxy is affected by the last vulnerability discovered in open-source libwebp library
View ArticleNginx Service is not Starting on Rocky Linux
Operating System: Rocky Linux 9.2 (Blue Onyx) Nginx version: nginx-1.16.0-1.el7.ngx.x86_64.rpm Nginx installed on rocky linux successfully, However, service is not starting with command " systemctl...
View ArticleCan we use PCH with GCC out of the box?
Looking at the code there are reverences to USE_PCH, but there is no initialisation for cc/gcc. Is that due to any specific reason can this be used with GCC? I tried to hack the code around and got...
View ArticleMail proxy doesn't work
Hello! I want to set up a proxy for Exchange Server 2016. I can’t understand why NGINX doesn’t send authentication data. Help me figure it out, please. When I try to authenticate I get the error:...
View ArticleRe: Extract SHA256 certificate thumbprint in Nginx
The code which performs this digest is located in src/event/ngx_event_openssl.c - This is presently hard-coded to return a SHA1 fingerprint.
View ArticleHTTP 400 error on reverse prxy
Hello all, I get an 400 error when i try to forward ssl traffic from my subdomain to my docker container on the same machine. My conf file in nginx: server { large_client_header_buffers 4 64k; if...
View ArticleNginx Very slow if i use proxy pass in HTTPS via reverse proxy
Hi, i've implemented a Reverse proxy with nginx but i've a problem, when i connect into my device via reverse proxy the device is very slow, i've tried to set the keepalive but the problem persists,...
View Articlenginx allows TLS 1.1 connection even though configuration only permits TLSv1.2
I am testing my website using ssllabs and getting a **B ** grade because TLS 1.0 and TLS 1.1 are allowed. However, to the best of my understanding my nginx configuration should not allow TLS 1.0 and...
View ArticleRe: nginx allows TLS 1.1 connection even though configuration only permits...
ssl_protocols TLSv1.2 TLSv1.3; and all ssl_* settings should be part of your server {} blocks, not at http {} block level.
View ArticleRe: nginx allows TLS 1.1 connection even though configuration only permits...
Thanks. However, I've tried adding TLSv1.3 but it didn't help. Plus, as I mentioned in my question I have this setting also in the server section. I tried putting it only in the server section and is...
View Article