nginx.git, branch release-1.3.0

nginx-1.3.0-RELEASE

2012-05-15T14:23:49+00:00

Updated OpenSSL used for win32 builds.

2012-05-15T14:20:06+00:00

Fixed win32 build after changes in r4624.

2012-05-15T08:10:59+00:00

Update c->sent in ngx_ssl_send_chain() even if SSL buffer is not used.

2012-05-14T16:30:33+00:00

Reverted previous attempt to fix complation warning introduced in

2012-05-14T15:52:37+00:00

r4624 and actually fixed it.

geoip: trusted proxies support and partial IPv6 support.

2012-05-14T14:00:17+00:00

The module now supports recursive search of client address through the
chain of trusted proxies (closes #100), in the same scope as the geo
module.  Proxies are listed by the "geoip_proxy" directive, recursive
search is enabled by the "geoip_proxy_recursive" directive.  IPv6 is
partially supported: proxies may be specified with IPv6 addresses.

Example:
    geoip_country .../GeoIP.dat;
    geoip_proxy 127.0.0.1;
    geoip_proxy ::1;
    geoip_proxy 10.0.0.0/8;
    geoip_proxy_recursive on;

geo: chains of trusted proxies and partial IPv6 support.

2012-05-14T13:53:22+00:00

The module now supports recursive search of client address through
the chain of trusted proxies, controlled by the "proxy_recursive"
directive in the "geo" block.  It also gets partial IPv6 support:
now proxies may be specified with IPv6 addresses.

Example:
    geo $test {
        ...
        proxy 127.0.0.1;
        proxy ::1;
        proxy_recursive;
    }

There's also a slight change in behavior.  When original client
address (as specified by the "geo" directive) is one of the
trusted proxies, and the value of the X-Forwarded-For request
header cannot not be parsed as a valid address, an original client
address will be used for lookup.  Previously, 255.255.255.255 was
used in this case.

Fixed compilation warning introduced in r4624.

2012-05-14T13:15:22+00:00

realip: chains of trusted proxies and IPv6 support.

2012-05-14T12:41:03+00:00

The module now supports recursive search of client address through
the chain of trusted proxies, controlled by the "real_ip_recursive"
directive (closes #2).  It also gets full IPv6 support (closes #44)
and canonical value of the $client_addr variable on address change.

Example:
    real_ip_header X-Forwarded-For;
    set_real_ip_from 127.0.0.0/8;
    set_real_ip_from ::1;
    set_real_ip_from unix:;
    real_ip_recursive on;

New function ngx_http_get_forwarded_addr() to look up real client address.

2012-05-14T12:27:41+00:00

On input it takes an original address, string in the X-Forwarded-For format
and its length, list of trusted proxies, and a flag indicating to perform
the recursive search.  On output it returns NGX_OK and the "deepest" valid
address in a chain, or NGX_DECLINED.  It supports AF_INET and AF_INET6.
Additionally, original address and/or proxy may be specified as AF_UNIX.