summaryrefslogtreecommitdiffhomepage
path: root/src/http/modules (unfollow)
AgeCommit message (Collapse)AuthorFilesLines
2011-09-30Merging r4086, r4087, r4088, r4090, r4094, r4095, r4096, r4097, r4099, r4100,Igor Sysoev1-0/+2854
r4106, r4107, r4108, r4113, r4156, r4157: *) ngx_http_mp4_module. *) "video/mp4" mime type added.
2011-09-30Merging r4114, r4129:Igor Sysoev1-31/+68
Buffers reuse in chunked filter. There were 2 buffers allocated on each buffer chain sent through chunked filter (one buffer for chunk size, another one for trailing CRLF, about 120 bytes in total on 32-bit platforms). This resulted in large memory consumption with long-lived requests sending many buffer chains. Usual example of problematic scenario is streaming though proxy with proxy_buffering set to off. Introduced buffers reuse reduces memory consumption in the above problematic scenario. See here for initial report: http://mailman.nginx.org/pipermail/nginx/2010-April/019814.html
2011-09-30Merging r4137:Igor Sysoev1-2/+4
Fixed loss of chain links in fastcgi module.
2011-09-30Merging r4036, r4055, r4056, r4057, r4058, r4059, r4060, r4061, r4062, r4063,Igor Sysoev1-49/+56
r4064: Ranges related fixes: The "max_ranges" directive. "max_ranges 0" disables ranges support at all, "max_ranges 1" allows the single range, etc. By default number of ranges is unlimited, to be precise, 2^31-1. If client requests more ranges than "max_ranges" permits, nginx disables ranges and returns just the source response. If total size of all ranges is greater than source response size, then nginx disables ranges and returns just the source response. This fix should not affect well-behaving applications but will defeat DoS attempts exploiting malicious byte ranges. Now unsatisfiable ranges are processed according to RFC 2616.
2011-09-30Merging r4010, r4065:Igor Sysoev1-2/+1
SSL related fixes: *) Fixing proxy_set_body and proxy_pass_request_body with SSL. Flush flag wasn't set in constructed buffer and this prevented any data from being actually sent to upstream due to SSL buffering. Make sure we always set flush in the last buffer we are going to sent. See here for report: http://nginx.org/pipermail/nginx-ru/2011-June/041552.html *) Proper SSL shutdown handling. If connection has unsent alerts, SSL_shutdown() tries to send them even if SSL_set_shutdown(SSL_RECEIVED_SHUTDOWN|SSL_SENT_SHUTDOWN) was used. This can be prevented by SSL_set_quiet_shutdown(). SSL_set_shutdown() is required nevertheless to preserve session.
2011-09-30Merging r3933, r4154:Igor Sysoev1-0/+2
A new fix for the case when ssl_session_cache defined, but ssl is not enabled in any server. The previous r1033 does not help when unused zone becomes used after reconfiguration, so it is backed out. The initial thought was to make SSL modules independed from SSL implementation and to keep OpenSSL code dependance as much as in separate files.
2011-09-30Version bump.Igor Sysoev1-1/+1
2011-08-29Merge of r4016:Igor Sysoev3-3/+27
Fix ignored headers handling in fastcgi/scgi/uwsgi. The bug had appeared in r3561 (fastcgi), r3638 (scgi), r3567 (uwsgi).
2011-08-29Merge of r3964, r3977, r3978:Igor Sysoev4-4/+14
Proxy related fixes: *) finalizing with rc == 0 in unbuffered proxy mode caused nginx to wait for another send_timeout before actually closing client's connection if client timed out while still talking to upstream server *) update r3945 with more descriptive error message *) test length of proxy_pass with variables; patch by Lanshun Zhou
2011-08-29Merge of r3960, r3961, r3962, r3963, r3965:Igor Sysoev2-3/+18
SSL related fixes: *) MSIE export versions are rare now, so RSA 512 key is generated on demand and is shared among all hosts instead of pregenerating for every HTTPS host on configuraiton phase. This decreases start time for configuration with large number of HTTPS hosts. *) ECDHE support; patch by Adrian Kotelba *) fix build by gcc46 with -Wunused-value option *) fix SSL connection issues on platforms with 32-bit off_t *) do not try to reuse and save a SSL session for a peer created on the fly by ngx_http_upstream_create_round_robin_peer(), since the peer lives only during request so the saved SSL session will never be used again and just causes memory leak
2011-08-29Version bump.Igor Sysoev1-1/+1
2011-07-19$uid_resetIgor Sysoev1-18/+63
2011-06-28referer_hash_max_size and referer_hash_bucket_size directivesIgor Sysoev1-2/+32
patch by Witold Filipczyk
2011-06-27use !aNULL to disable all anonymous cipher suitesIgor Sysoev1-1/+1
patch by Rob Stradling
2011-06-27bump versionIgor Sysoev1-1/+1
2011-05-30revert r3875 since now map uses case sensetive regexes by defaultIgor Sysoev1-0/+6
2011-05-30change ngx_http_map_find(): use case sensitive regexesIgor Sysoev1-4/+1
2011-05-26bump versionIgor Sysoev1-1/+1
2011-05-16"$apr1", "{PLAIN}", and "{SSHA}" password methods in auth basic moduleIgor Sysoev1-0/+1
patch by Maxim Dounin
2011-05-16fix testing IPv4 address mapped to IPv6, when only IPv6 access rules are definedIgor Sysoev1-12/+19
2011-05-16support IPv4 mapped to IPv6 in geo moduleIgor Sysoev1-4/+28
2011-05-16support IPv4 mapped to IPv6 in geoip moduleIgor Sysoev1-28/+42
2011-05-13fix debug loggingIgor Sysoev1-1/+1
2011-05-11geoip_orgIgor Sysoev1-0/+118
patch by Alexander Uskov
2011-05-11fix typoIgor Sysoev1-2/+2
2011-05-11bump versionIgor Sysoev1-1/+1
2011-05-10gdImageCopyRotated() may images of even height or widthIgor Sysoev1-3/+17
patch by Adam Bocim
2011-05-04bump versionIgor Sysoev1-1/+1
2011-04-15use MurmurHash2 for split_clients, becauseIgor Sysoev1-1/+1
its distribution is much better than CRC32's one
2011-04-15bump versionIgor Sysoev1-1/+1
2011-04-12use memmove() in appropriate placesIgor Sysoev3-7/+7
2011-04-07fix "image_filter rotate 180" and crop caseIgor Sysoev1-4/+4
the bug has been introduced in r3879
2011-04-07bump versionIgor Sysoev1-1/+1
2011-04-04fix case when a host in fastcgi_pass, scgi_pass, and uwsgi_passIgor Sysoev3-18/+3
is given by expression and refers to a defined upstream
2011-04-04image filter rotateIgor Sysoev1-3/+101
patch by Adam Bocim
2011-04-04bump versionIgor Sysoev1-1/+1
2011-03-21map tests values in low case only, so caseless regex has no senseIgor Sysoev1-6/+0
2011-03-16$time_iso8601 log variableIgor Sysoev1-0/+10
patch by Michael Lustfield
2011-03-16allow regex as "map" parameterIgor Sysoev1-5/+65
2011-02-21fix warningsIgor Sysoev1-2/+2
2011-02-21bump versionIgor Sysoev1-1/+1
2011-02-17always test proxy_redirect with slash, this fixes a case when nginx usesIgor Sysoev1-4/+30
proxy_pass "http://www", upstream redirects to "http://www.host/uri", and nginx rewrites it as ".host/uri" patch by Maxim Dounin
2011-01-27utf8 parameter of geoip_country and geoip_cityIgor Sysoev1-2/+24
patch by Denis F. Latypoff
2011-01-27bump versionIgor Sysoev1-1/+1
2011-01-20style fix: remove trailing spacesIgor Sysoev1-2/+2
2011-01-20fix large stderr handling without http cacheIgor Sysoev1-1/+2
patch by Maxim Dounin the bug has been introduced in r3461
2010-12-14bump versionIgor Sysoev1-1/+1
2010-12-06bump versionIgor Sysoev1-1/+1
2010-12-06"If-Unmodified-Since" supportIgor Sysoev1-5/+40
2010-11-30bump versionIgor Sysoev1-1/+1
generated by cgit (git 2.34.1) at 2025-12-07 15:54:47 +0000