Hardening Your Web Server’s SSL Ciphers
There are many wordy articles on configuring your web server’s TLS ciphers. This is not one of them. Instead, I will share a configuration that scores a straight “A” on Qualys’s SSL Server Test in 2023. Disclaimer: I’m updating this post continually to represent what I consider the best practice at the moment – there are way too many dangerously outdated articles about TLS-deployment out there alr
agentzh's Nginx Tutorials (version 2020.03.19)
agentzh's Nginx Tutorials (version 2020.03.19) Table of Contents Foreword Writing Plan for the Tutorials Nginx Variables (01) Nginx Variables (02) Nginx Variables (03) Nginx Variables (04) Nginx Variables (05) Nginx Variables (06) Nginx Variables (07) Nginx Variables (08) Nginx Directive Execution Order (01) Nginx Directive Execution Order (02) Nginx Directive Execution Order (03) Nginx Directive
Using Nginx as reverse proxy
It’s common knowledge that when you’re serving a web application you shouldn’t use a standard Apache install to serve static assets, as it comes with too much overhead. I won’t go into the details of why here, as it’s been covered by many other people better qualified than I. What I can do, however, is tell you how I set up Nginx, which is a super light–weight web server, on my VPS here on Sliceho
matt blags
found things(197 days)hazards of love(708 days)iworkforapple(539 days)javascript(573 days)slippycomics(396 days)startup(389 days)technobabble(6 hours) background What do you use to serve content over SSL? mod_ssl? nginx compiled with ssl support? stunnel? A hardware accelerator-jigger? I benchmarked a few SSL terminators in front of haproxy last week. The results may (or may not) surprise you. ini
Brane Dump: SSL Session Caching (in nginx)
SSL Session Caching (in nginx) Posted: Tue, 28 June 2011 | permalink | 17 Comments Given that I was responsible for putting together the system architecture for Github when they moved away from their previous services provider to Anchor Systems, I keep an eye on what's going on there even though I've gotten out of professional IT. Recently(ish), Ryan Tomayko blogged about some experiments in using
Useful Rewrites for Nginx
I enjoy working in Rails but also believe in using the right tool for the job. Many developers will add redirects to a Rails app, which is great on the development box but can end up hurting when the production traffic starts coming. We use the Nginx web server as a front end reverse proxy and it’s easy to move some common redirects up into Nginx freeing Rails to do what it does best. In the initi
フロント/バックのreverse proxy構成で、指定秒数以内に必ずレスポンスを返す方法 - （ひ）メモ
目的 フロントがHTTPリクエストを受けて、バックエンドのアプリケーションサーバにreverse proxyするような構成において、指定秒数以内に何かしらのレスポンスを返したい。 200が返せない場合は、処理を打ち切って500を返したい。 背景 フロントでApacheやNginxをreverse proxyとして使っている場合、バックエンドが無応答になってしまうと、クライアントにレスポンスが返るのはデフォルトで数十〜数百秒後(ApacheのTimeoutのデフォルトは300秒、Nginxのproxy_read_timeoutのデフォルトは60秒)になってしまいます。 通常のWebサービスではこのオーダーのタイムアウトでもいいのかもしれませんが、数秒以内に(エラーでもいいので)レスポンスを返すことが求められる環境も存在します。(最近、特に多いのではないでしょうか:P) もちろんバックエンドが
NginxHttpCoreModule
Enables or disables the use of asynchronous file I/O (AIO) on FreeBSD and Linux: location /video/ { aio on; output_buffers 1 64k; } On FreeBSD, AIO can be used starting from FreeBSD 4.3. Prior to FreeBSD 11.0, AIO can either be linked statically into a kernel: options VFS_AIO or loaded dynamically as a kernel loadable module: kldload aio On Linux, AIO can be used starting from kernel version 2.6.2
JustinBKay.org - Nginx - enable directory listing
Nginx - enable directory listing written by justin on December 22nd, 2007 @ 07:22 PM When setting up webdav using nginx I was having difficulties with access denied. It turned out to be the denial of a directory listing. This solved it: autoindex on; webdav config for nginx: server { listen 80; server_name miniserv; autoindex on; location / { root /home/public; client_body_temp_path /tmp/
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
nginx JSON hacks
How to handle 1000's of concurrent users on a 360MB VPS - mmmm