2,397 reputation
1513
bio website vbart.info
location Moscow, Russia
age 27
visits member for 2 years, 3 months
seen Aug 22 at 7:10

Guys, I'm often disappointed with the questions I see here:

  • Please check the official documentation first, because 3rd party tutorials often aren't accurate enough (albeit "might work").
  • Please always check the error log when something doesn't work for you.
  • Google Search is typically very helpful.
  • Neuroscience has proven there's no learning without errors and correcting errors yourself the hard way. =)
  • Try to make your questions challenging not boring.

Jun
16
awarded  Good Answer
May
11
awarded  Yearling
Apr
15
comment Do HTTP reverse proxies typically enable HTTP Keep-Alive on the client side of the proxied connection and not on the server side?
@CMCDragonkai If your backends are located on dedicated servers then it can be useful to avoid connection latency which depends on your network. There's no golden mean, the optimal number mainly depends on your setup, your environment, your application and request pattern.
Apr
11
comment SSL Certificate implementation for a stack that has varnish and multiple NGINX webservers
Why do you need Varnish at all? Nginx has a great cache too.
Apr
10
answered nginx fastcgi rewrite: primary script unknown
Apr
8
answered My server is still vulnerable to heartbleed even after I update OpenSSL
Apr
8
revised An upstream response is buffered to a temporary file
added 8 characters in body
Apr
8
revised An upstream response is buffered to a temporary file
added 112 characters in body
Apr
8
answered An upstream response is buffered to a temporary file
Mar
21
answered Should `keepalive_timeout` be removed from Nginx config?
Feb
21
comment Chroot master process Nginx 1.2.1
Chrooting master process doesn't introduce better security, instead it introduces only pain for you. There are two reasons for that: 1. nginx master doesn't accept connections and doesn't process any requests, so it's secure and isolated by default, and 2. chrooting isn't security tool and never was, it can be easily escaped, see: lwn.net/Articles/252794.
Feb
21
comment Chroot master process Nginx 1.2.1
What is the purpose?
Feb
12
comment NGINX SSL termination slow
keepalive_timeout and keepalive_requests also are irrelevant to upstream HTTP keepalive. The fact that all these directives have "keepalive" word in name doesn't mean that they do right thing to you. And your lingering_time 240 value just looks wrong, I advise do not touch directives that you do not fully understand.
Feb
12
comment NGINX SSL termination slow
It is not adequate, instead it have so_keepalive in listen that is about TCP_KEEPALIVE and have nothing to do with HTTP keepalive, and your value for so_keepalive looks very strange. Just remove it. As I've already said you should read documentation on the link, it has full example: nginx.org/r/keepalive (For HTTP, ...)
Feb
12
comment NGINX SSL termination slow
All ssl_* directives have nothing to do with https connections to upstream. HTTPS support in proxy module is very limited. Also please read keepalive documentation carefully, just keepalive 32 in upstream block - isn't enough to enable HTTP/1.1 keeplive (not to mention that they barely help in bench with ab -c 100).
Feb
11
answered NGINX SSL termination slow
Feb
9
comment Varnish, Nginx & SSL
You don't need Varnish, since nginx itself has pretty rich caching functionality.
Jan
22
awarded  Unsung Hero
Dec
18
comment Clear NGINX cache using FTP
You don't need full root access for certain action under sudo.
Dec
17
answered Nginx Reverse proxy leading to Redirect loop