1

See this clarification. The ngx_brotli developer mentions that something like brotli_proxied isn't required, as it will compress proxied requests by default. server { ... gzip on; gzip_comp_level 5; gzip_min_length 256; gzip_proxied any; gzip_vary on; gzip_types *; brotli on; ... } Should be sufficient. If the upstream (Cloudfront, in ...


1

In general there is absolutely no security benefit to encrypting traffic between services running on the same host. (Localhost traffic can only be intercepted by an attacker that has full access to the server. When they can do that they can already access all data stored on your server directly (from the file system) and won't need to bother with ...


1

You should be able to transform your hash key using one or more map blocks. Not tested: map $cookie_my_cookie_name $my_hash_key { "" $remote_addr; default $cookie_my_cookie_name; } upstream { hash $my_hash_key consistent; } I do not think what you describe in your question really serves most purposes well, though. As soon as the ...


1

So the backend server is the target of the proxy, so the Proxy directive is not relevant there. To restrict access to the backend, something like this in the virtualhost of your backend conf file would limit access to only the front-end server making proxied requests... <VirtualHost *:80> DocumentRoot "/var/www/example.com" ServerName ...


1

I suggest you to use subdomain to do this. ex- https://example.example.com


Only top voted, non community-wiki answers of a minimum length are eligible