summaryrefslogtreecommitdiffhomepage
path: root/src/http/modules/ngx_http_geo_module.c (follow)
AgeCommit message (Collapse)AuthorFilesLines
2012-08-16Geo: fixed handling of ranges without default set.Maxim Dounin1-4/+4
The bug had appeared in 0.8.43 (r3653). Patch by Weibin Yao.
2012-06-08Fixed spelling of "endianness", and called it "byte ordering" in theRuslan Ermilov1-1/+1
user visible part.
2012-05-14geo: chains of trusted proxies and partial IPv6 support.Ruslan Ermilov1-74/+62
The module now supports recursive search of client address through the chain of trusted proxies, controlled by the "proxy_recursive" directive in the "geo" block. It also gets partial IPv6 support: now proxies may be specified with IPv6 addresses. Example: geo $test { ... proxy 127.0.0.1; proxy ::1; proxy_recursive; } There's also a slight change in behavior. When original client address (as specified by the "geo" directive) is one of the trusted proxies, and the value of the X-Forwarded-For request header cannot not be parsed as a valid address, an original client address will be used for lookup. Previously, 255.255.255.255 was used in this case.
2012-04-12Fixed grammar in error messages.Ruslan Ermilov1-3/+3
2012-01-18Copyright updated.Maxim Konovalov1-0/+1
2011-05-16support IPv4 mapped to IPv6 in geo moduleIgor Sysoev1-4/+28
2011-04-12use memmove() in appropriate placesIgor Sysoev1-5/+5
2010-06-30style fix: remove tabsIgor Sysoev1-10/+10
2010-06-30test binary geo range base sizeIgor Sysoev1-1/+1
2010-06-30test the second binary geo range base existenceIgor Sysoev1-0/+8
2010-06-30test binary geo ranges base only for rangesIgor Sysoev1-9/+11
2010-06-30test binary gep range base mtimeIgor Sysoev1-1/+20
2010-06-29binary geo ranges base cacheIgor Sysoev1-52/+407
2010-06-29change duplicate default geo range processingIgor Sysoev1-12/+9
2010-06-24eliminate a number of ranges: about 18,000 /16 networks are empty,Igor Sysoev1-27/+22
this change saves about 70K/140K on 32/64-bit platforms
2010-06-24break cycle earlyIgor Sysoev1-2/+2
2010-06-23style fixIgor Sysoev1-2/+2
2010-06-23change ngx_http_variable_value_node_t to more generic ngx_str_node_tIgor Sysoev1-14/+22
2010-02-25fix a geo range if the range includes two or more /16 networksIgor Sysoev1-1/+1
and does not begin at /16 network boundary
2009-09-11style fixIgor Sysoev1-1/+1
2009-07-22geo module supports trusted proxiesIgor Sysoev1-27/+130
2009-02-24prepare ngx_ptocidr() for IPv6Igor Sysoev1-12/+19
2009-02-21a prelimiary IPv6 support, HTTP listenIgor Sysoev1-0/+4
2009-01-19fix segfault when geo range replaces starting part of another rangeIgor Sysoev1-2/+2
2009-01-16allow insertion range if its start or end is the same as existent oneIgor Sysoev1-0/+48
2009-01-16fix single address rangeIgor Sysoev1-2/+2
2009-01-16fix range deletionIgor Sysoev1-0/+3
2009-01-16repeat r2448 for range deletionIgor Sysoev1-1/+6
2009-01-16log both overrlaped rangesIgor Sysoev1-1/+7
2009-01-16fix range start for ranges those spread in two or more slotsIgor Sysoev1-1/+6
2009-01-16*) fix duplicate geo rangesIgor Sysoev1-4/+44
*) split existent range and insert a new one
2008-12-11style fix: remove tabsIgor Sysoev1-12/+12
2008-12-11$geo variable supportIgor Sysoev1-56/+122
2008-12-11remove before nginx-0.1.25 compatibility codeIgor Sysoev1-13/+2
2008-12-02fix "delete CIDR"Igor Sysoev1-1/+2
2008-11-28create empty radix tree for "geo $geo { }" caseIgor Sysoev1-0/+7
2008-11-25*) descrease geo configuration memory usageIgor Sysoev1-75/+532
*) geo delete *) geo ranges
2008-11-22use value rbtree instead of array in geo configurationIgor Sysoev1-42/+34
2007-10-14fix English grammarIgor Sysoev1-2/+2
2007-08-20use %v for ngx_variable_value_t in ngx_sprintf(),Igor Sysoev1-5/+4
this fixes nginx on FreeBSD/sparc64
2007-08-10ignore meaningless bits in CIDR and warn about themIgor Sysoev1-1/+9
2007-07-29--sysconfdir=DIRIgor Sysoev1-1/+1
2006-04-19nginx-0.3.40-RELEASE importrelease-0.3.40Igor Sysoev1-1/+1
*) Feature: the ngx_http_dav_module supports the MKCOL method. *) Feature: the "create_full_put_path" directive. *) Feature: the "$limit_rate" variable.
2005-12-16nginx-0.3.16-RELEASE importrelease-0.3.16Igor Sysoev1-24/+23
*) Feature: the ngx_http_map_module. *) Feature: the "types_hash_max_size" and "types_hash_bucket_size" directives. *) Feature: the "ssi_value_length" directive. *) Feature: the "worker_rlimit_core" directive. *) Workaround: the connection number in logs was always 1 if nginx was built by the icc 8.1 or 9.0 compilers with optimization for Pentium 4. *) Bugfix: the "config timefmt" SSI command set incorrect time format. *) Bugfix: nginx did not close connection to IMAP/POP3 backend for the SSL connections; the bug had appeared in 0.3.13. Thanks to Rob Mueller. *) Bugfix: segmentation fault may occurred in at SSL shutdown; the bug had appeared in 0.3.13.
2005-12-05nginx-0.3.13-RELEASE importrelease-0.3.13Igor Sysoev1-7/+3
*) Feature: the IMAP/POP3 proxy supports STARTTLS and STLS. *) Bugfix: the IMAP/POP3 proxy did not work with the select, poll, and /dev/poll methods. *) Bugfix: in SSI handling. *) Bugfix: now Solaris sendfilev() is not used to transfer the client request body to FastCGI-server via the unix domain socket. *) Bugfix: the "auth_basic" directive did not disable the authorization; the bug had appeared in 0.3.11.
2005-11-15nginx-0.3.10-RELEASE importrelease-0.3.10Igor Sysoev1-5/+2
*) Change: the "valid_referers" directive and the "$invalid_referer" variable were moved to the new ngx_http_referer_module from the ngx_http_rewrite_module. *) Change: the "$apache_bytes_sent" variable name was changed to "$body_bytes_sent". *) Feature: the "$sent_http_..." variables. *) Feature: the "if" directive supports the "=" and "!=" operations. *) Feature: the "proxy_pass" directive supports the HTTPS protocol. *) Feature: the "proxy_set_body" directive. *) Feature: the "post_action" directive. *) Feature: the ngx_http_empty_gif_module. *) Feature: the "worker_cpu_affinity" directive for Linux. *) Bugfix: the "rewrite" directive did not unescape URI part in redirect, now it is unescaped except the %00-%25 and %7F-%FF characters. *) Bugfix: nginx could not be built by the icc 9.0 compiler. *) Bugfix: if the SSI was enabled for zero size static file, then the chunked response was encoded incorrectly.
2005-11-09nginx-0.3.8-RELEASE importrelease-0.3.8Igor Sysoev1-32/+25
*) Security: nginx now checks URI got from a backend in "X-Accel-Redirect" header line or in SSI file for the "/../" paths and zeroes. *) Change: nginx now does not treat the empty user name in the "Authorization" header line as valid one. *) Feature: the "ssl_session_timeout" directives of the ngx_http_ssl_module and ngx_imap_ssl_module. *) Feature: the "auth_http_header" directive of the ngx_imap_auth_http_module. *) Feature: the "add_header" directive. *) Feature: the ngx_http_realip_module. *) Feature: the new variables to use in the "log_format" directive: $bytes_sent, $apache_bytes_sent, $status, $time_gmt, $uri, $request_time, $request_length, $upstream_status, $upstream_response_time, $gzip_ratio, $uid_got, $uid_set, $connection, $pipe, and $msec. The parameters in the "%name" form will be canceled soon. *) Change: now the false variable values in the "if" directive are the empty string "" and string starting with "0". *) Bugfix: while using proxied or FastCGI-server nginx may leave connections and temporary files with client requests in open state. *) Bugfix: the worker processes did not flush the buffered logs on graceful exit. *) Bugfix: if the request URI was changes by the "rewrite" directive and the request was proxied in location given by regular expression, then the incorrect request was transferred to backend; the bug had appeared in 0.2.6. *) Bugfix: the "expires" directive did not remove the previous "Expires" header. *) Bugfix: nginx may stop to accept requests if the "rtsig" method and several worker processes were used. *) Bugfix: the "\"" and "\'" escape symbols were incorrectly handled in SSI commands. *) Bugfix: if the response was ended just after the SSI command and gzipping was used, then the response did not transferred complete or did not transferred at all.
2005-10-19nginx-0.3.3-RELEASE importrelease-0.3.3Igor Sysoev1-0/+1
*) Change: the "bl" and "af" parameters of the "listen" directive was renamed to the "backlog" and "accept_filter". *) Feature: the "rcvbuf" and "sndbuf" parameters of the "listen" directive. *) Change: the "$msec" log parameter does not require now the additional the gettimeofday() system call. *) Feature: the -t switch now tests the "listen" directives. *) Bugfix: if the invalid address was specified in the "listen" directive, then after the -HUP signal nginx left an open socket in the CLOSED state. *) Bugfix: the mime type may be incorrectly set to default value for index file with variable in the name; the bug had appeared in 0.3.0. *) Feature: the "timer_resolution" directive. *) Feature: the millisecond "$upstream_response_time" log parameter. *) Bugfix: a temporary file with client request body now is removed just after the response header was transferred to a client. *) Bugfix: OpenSSL 0.9.6 compatibility. *) Bugfix: the SSL certificate and key file paths could not be relative. *) Bugfix: the "ssl_prefer_server_ciphers" directive did not work in the ngx_imap_ssl_module. *) Bugfix: the "ssl_protocols" directive allowed to specify the single protocol only.
2005-10-04nginx-0.2.5-RELEASE importrelease-0.2.5Igor Sysoev1-12/+28
*) Change: the duplicate value of the ngx_http_geo_module variable now causes the warning and changes old value. *) Feature: the ngx_http_ssi_module supports the "set" command. *) Feature: the ngx_http_ssi_module supports the "file" parameter in the "include" command. *) Feature: the ngx_http_ssi_module supports the variable value substitutions in expressions of the "if" command.
2005-09-30nginx-0.2.2-RELEASE importrelease-0.2.2Igor Sysoev1-1/+1
*) Feature: the "config errmsg" command of the ngx_http_ssi_module. *) Change: the ngx_http_geo_module variables can be overridden by the "set" directive. *) Feature: the "ssl_protocols" and "ssl_prefer_server_ciphers" directives of the ngx_http_ssl_module and ngx_imap_ssl_module. *) Bugfix: the ngx_http_autoindex_module did not show correctly the long file names; *) Bugfix: the ngx_http_autoindex_module now do not show the files starting by dot. *) Bugfix: if the SSL handshake failed then another connection may be closed too. Thanks to Rob Mueller. *) Bugfix: the export versions of MSIE 5.x could not connect via HTTPS.
generated by cgit (git 2.34.1) at 2025-12-18 07:51:15 +0000