IntenseWebs/nginx
3
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2026-07-30 08:08:24 -05:00
Code Issues Packages Projects Releases Wiki Activity
5,389 Commits 23 Branches 593 Tags
96507dabcc7c0a32cfaaa80582e3542771c357fe
Commit Graph
5389 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Roman Arutyunyan 96507dabcc Style. 2015-07-29 14:36:36 -07:00
Roman Arutyunyan 3c8aaf830f Stream: added proxy_buffer_size to set the size of data buffers. 
Both download and upload buffers now have the same size.  The old directives
proxy_downstream_buffer and proxy_upstream_buffer are removed.
 2015-07-29 13:46:26 -07:00
Ruslan Ermilov 6dc03bf1a4 Fixed strict aliasing warnings with old GCC versions. 2015-07-16 14:20:48 +03:00
Andrew Hutchings a2a8bd3bdb Modify changes doc to acknowledge Lu is from Intel 2015-07-15 20:43:41 +01:00
Maxim Dounin 3cc6000879 Version bump. 2015-07-15 22:56:03 +03:00
Maxim Dounin c540e32a07 release-1.9.3 tag 2015-07-14 19:46:05 +03:00
Maxim Dounin 801c5875f4 nginx-1.9.3-RELEASE release-1.9.3 2015-07-14 19:46:05 +03:00
Maxim Dounin 4f83488a34 Updated PCRE used for win32 builds. 2015-07-14 19:44:19 +03:00
Roman Arutyunyan f1dbcf61a2 Stream: renamed rate limiting directives. 
The directive proxy_downstream_limit_rate is now called proxy_upload_rate.
The directive proxy_upstream_limit_rate is now called proxy_download_rate.
 2015-07-14 09:38:13 -07:00
Maxim Dounin 47b6817411 Updated OpenSSL used for win32 builds. 2015-07-14 10:13:51 +03:00
Maxim Dounin 3ac176fb86 OCSP stapling: fixed segfault without nextUpdate. 
OCSP responses may contain no nextUpdate.  As per RFC 6960, this means
that nextUpdate checks should be bypassed.  Handle this gracefully by
using NGX_MAX_TIME_T_VALUE as "valid" in such a case.

The problem was introduced by 6893a1007a7c (1.9.2).

Reported by Matthew Baldwin.
 2015-07-14 01:10:25 +03:00
Maxim Dounin 573810ce36 OCSP stapling: fixed ssl_stapling_file (ticket #769). 
Broken by 6893a1007a7c (1.9.2) during introduction of strict OCSP response
validity checks.  As stapling file is expected to be returned unconditionally,
fix is to set its validity to the maximum supported time.

Reported by Faidon Liambotis.
 2015-07-07 16:38:49 +03:00
Valentin Bartenev cd17f869cf Stream: fixed possible integer overflow in rate limiting. 2015-07-02 17:20:29 +03:00
Roman Arutyunyan 035732696d Stream: fixed MSVC compilation warning. 
Thanks to itpp2012.
 2015-07-02 17:15:32 +03:00
Roman Arutyunyan f81ae4e392 Stream: upstream "connected" flag. 
Once upstream is connected, the upstream buffer is allocated.  Previously, the
proxy module used the buffer allocation status to check if upstream is
connected.  Now it's enough to check the flag.
 2015-06-25 12:36:52 +03:00
Roman Arutyunyan 74942045d5 Stream: upstream and downstream limit rates. 2015-06-23 20:17:48 +03:00
Roman Arutyunyan 62959c9133 Stream: common handler for upstream and downstream. 2015-06-23 20:17:47 +03:00
Piotr Sikora 130396928a Stream: avoid SSL_CTX_set_tmp_rsa_callback() call with LibreSSL. 
Signed-off-by: Piotr Sikora <piotr@cloudflare.com>
 2015-06-18 03:36:41 -07:00
Ruslan Ermilov 1e94ab0db0 Upstream: fixed shared upstreams on win32. 2015-06-16 00:43:00 +03:00
Vladimir Homutov 14ff3d4f87 Stream: connection limiting module. 
stream {
    limit_conn_zone $binary_remote_addr zone=perip:1m;
    limit_conn_log_level error;

    server {
        ...
        limit_conn perip 1;
    }
}
 2015-06-18 14:17:30 +03:00
Sergey Kandaurov f470cd2b89 Resolver: canceled resend timer on empty resend queues. 
This is specifically useful on graceful shutdown.
 2015-06-17 17:57:34 +03:00
Piotr Sikora 58957fa3fc Configure: create missing intermediates for build directory. 
Signed-off-by: Piotr Sikora <piotr@cloudflare.com>
 2015-06-10 19:18:19 -07:00
Ruslan Ermilov 72c3706bc5 Configure: fix tests with multi-level relative build directory. 
Based on a patch by Piotr Sikora.
 2015-06-17 14:15:27 +03:00
Vladimir Homutov b7a8f2a08f Disabled duplicate http, mail, and stream blocks. 
Such configurations have very limited use, introduce various problems and
are not officially supported.
 2015-06-16 23:28:38 +03:00
Vladimir Homutov 9efe6c2243 Version bump. 2015-06-16 23:31:31 +03:00
Maxim Dounin a96bdd922c release-1.9.2 tag 2015-06-16 17:49:40 +03:00
Maxim Dounin 4b768adc2e nginx-1.9.2-RELEASE release-1.9.2 2015-06-16 17:49:39 +03:00
Ruslan Ermilov c9089c2de8 Polished the recent change to the manpage. 2015-06-16 16:52:13 +03:00
Vladimir Homutov 9bd637659a Documentation: added -T option description to the man page. 2015-06-16 16:28:56 +03:00
Vladimir Homutov 4e83d3f7b5 Core: store and dump processed configuration. 
If the -T option is passed, additionally to configuration test, configuration
files are output to stdout.

In the debug mode, configuration files are kept in memory and can be accessed
using a debugger.
 2015-05-14 18:54:27 +03:00
Vladimir Homutov 42c32b733b Core: added support for writing to stdout. 2015-06-16 15:47:40 +03:00
Roman Arutyunyan 4404c3fd6d Core: renamed ngx_proxy_protocol_parse to ngx_proxy_protocol_read. 
The new name is consistent with the ngx_proxy_protocol_write function.
 2015-06-16 13:45:19 +03:00
Roman Arutyunyan 3ed1b3b5b0 Stream: client-side PROXY protocol. 
The new directive "proxy_protocol" toggles sending out PROXY protocol header
to upstream once connection is established.
 2015-06-16 13:45:16 +03:00
Vladimir Homutov f50f83a2cf Stream: the "proxy_bind" directive. 2015-06-16 09:02:45 +03:00
Maxim Dounin ff0e31d7c7 Updated OpenSSL used for win32 builds. 2015-06-15 20:20:12 +03:00
Maxim Dounin cb3dcbb81e OCSP stapling: avoid sending expired responses (ticket #425). 2015-06-11 20:42:39 +03:00
Maxim Dounin 9984f3053f Moved ngx_http_parse_time() to core, renamed accordingly. 
The function is now called ngx_parse_http_time(), and can be used by
any code to parse HTTP-style date and time.  In particular, it will be
used for OCSP stapling.

For compatibility, a macro to map ngx_http_parse_time() to the new name
provided for a while.
 2015-06-11 20:42:31 +03:00
Maxim Dounin dd41bfd47a Removed unused ngx_http_get_time() declaration. 2015-06-11 20:42:24 +03:00
Valentin Bartenev 93874766db Configure: added gcc5 to the list of known GCC versions. 2015-06-10 19:18:20 +03:00
Ruslan Ermilov 72125c7a22 Configure: search OpenSSL in a bunch of standard places. 2015-06-10 12:25:45 +03:00
Ruslan Ermilov 76be6f5d70 Configure: moved NGX_SBIN_PATH variable initialization. 
It's now initialized in auto/options like the rest of variables
for system paths.

As a side effect, the currently unused macro NGX_SBIN_PATH now
gets the correct value.
 2015-06-10 12:25:31 +03:00
Vladimir Homutov 8ab1aa612d Stream: access module. 
stream {
    server {
        ...
        allow 127.0.0.1;
        deny all;
    }
}
 2015-06-04 13:04:12 +03:00
Vladimir Homutov d56b84b783 Stream: added postconfiguration method to stream modules. 2015-06-09 13:00:45 +03:00
Ruslan Ermilov c81d7ec158 Mail: listen backlog=. 2015-06-08 23:13:56 +03:00
Ruslan Ermilov 60c654ddf5 Stream: listen backlog=. 2015-06-08 23:13:33 +03:00
Ruslan Ermilov b72a7b0df3 Mail: embed ngx_mail_listen_t into ngx_mail_conf_addr_t. 2015-06-08 23:11:58 +03:00
Ruslan Ermilov bfbd0aabd4 Stream: embed ngx_stream_listen_t into ngx_stream_conf_addr_t. 2015-06-08 23:11:42 +03:00
Ruslan Ermilov 14ddadb9ac Stream: fixed "reuseport" to actually work. 2015-06-05 23:03:13 +03:00
Maxim Dounin 413158330a Added the REQUEST_SCHEME parameter. 
The REQUEST_SCHEME parameter was introduced in Apache 2.3.11 and seems
to be used by some scripts now.  It looks more logical than previously
used HTTPS.
 2015-06-05 22:23:26 +03:00
Roman Arutyunyan f5d79ffb82 Upstream keepalive: reduced diffs to the plus version of nginx. 2015-06-04 23:46:44 +03:00