summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)AuthorFilesLines
2021-10-21Packages: added Ubuntu 21.10 "impish" support.Andrei Belov7-3/+193
2021-10-19Packages: fixed dependency tracking for Go and Java modules on RHEL7.Andrei Belov1-2/+2
2021-10-18Tests: style.Andrei Zeliankou51-74/+19
2021-10-12Removed unused declarations.Zhidao HONG1-4/+0
Declarations became unused after 6976d36be926. No functional changes.
2021-10-09Configuration: automatic migration to the new "share" behavior.Zhidao HONG8-46/+174
2021-10-08Merged with the default branch.Artem Konev3-0/+269
2021-10-08Fixed invalid call sequence in nxt_tls_ticket_key_callback().Artem Konev1-5/+13
The bug has been introduced in 0bca988e9541.
2021-10-05Tests: added tests for variables in "chroot".Andrei Zeliankou1-0/+116
2021-10-05Tests: added tests for variables in "share".Andrei Zeliankou1-0/+80
2021-10-05Tests: added tests for "share" option with arrays.Andrei Zeliankou1-0/+73
2021-10-04Static: removed surplus assignment.Valentin Bartenev1-1/+0
It's not needed after 69d823e5710a. Found by Clang Static Analyzer.
2021-10-04Static: fixed possible descriptor leak introduced in a946d8cd7f8c.Valentin Bartenev1-0/+1
2021-10-01Static: multiple paths in the "share" option.Zhidao HONG3-72/+202
2021-09-30Static: variables in the "share" option.Zhidao HONG9-90/+135
This commit supports variable in the "share" option, the finding path to file serve is the value from "share". An example: { "share": "/www/data/static$uri" }
2021-09-28Static: variables in the "chroot" option.Zhidao HONG6-95/+275
2021-09-21Regenerated Dockerfiles.Konstantin Pavlov5-10/+10
2021-09-21Docker: bumped versions.Konstantin Pavlov1-5/+5
Minimal image now uses Debian 11 "Bullseye" as a base. Language versions are bumped to: - Go 1.17 - Node 16 - Perl 5.34 - Ruby 3.0
2021-09-20Fixed WebSocket connection hang issue after listener reconfigure.Max Romanov3-29/+39
Because the configuration values were read from the listener's configuration, an established WebSocket connection was unable to work properly (i. e. stuck) if the listener was removed. The correct source of configuration values is the request config joint. This is related to issue #581 on GitHub.
2021-09-14Fixing build with glibc 2.34.Max Romanov3-11/+10
Explicitly using the sysconf() call to obtain the minimum thread stack size instead of the PTHREAD_STACK_MIN macro. This closes #576 PR on GitHub.
2021-09-07Router: refactored variable pass.Zhidao HONG6-54/+81
Since the "pass" option supports both strings and variables, a generic nxt_var_t structure can be used in the configuration phase, and the "name" field in actions is redundant. No functional changes.
2021-09-06Var: keeping raw variable string for debug.Zhidao HONG1-75/+71
2021-08-25TLS: refactored nxt_tls_ticket_key_callback().Valentin Bartenev2-74/+51
Deduplicated code and improved style. No functional changes.
2021-08-24Version bump.Valentin Bartenev2-2/+31
2021-08-20Fixed a typo in changes.xml.Artem Konev1-1/+1
2021-08-19Unit 1.25.0 release.Valentin Bartenev1-0/+1
2021-08-19Generated Dockerfiles for Unit 1.25.0.1.25.0Valentin Bartenev8-8/+8
2021-08-19Added version 1.25.0 CHANGES.Valentin Bartenev2-2/+42
2021-08-19Reordered changes for 1.25.0 by significance (subjective).Valentin Bartenev1-16/+15
2021-08-19Edited changes.xml for the 1.25.0 release.Artem Konev1-6/+6
2021-08-17Added TLS session tickets support.Andrey Suvorov6-0/+442
2021-08-17Packages: added Debian 11 "bullseye" support.Andrei Belov2-1/+13
2021-08-12Introduced the generic API nxt_buf_dummy_completion().Zhidao HONG2-11/+9
No functional changes.
2021-08-12Log: renamed related variables "log" as "_log" to prevent conflicts.Zhidao HONG1-11/+11
2021-08-12Java: upgrading third-party components.Max Romanov3-13/+13
2021-08-12Tests: client IP address replacement.Oisin Canty2-0/+133
2021-08-12Router: client IP address replacement.Oisin Canty7-11/+288
This commit introduces the replacement of the client address based on the value of a specified HTTP header. This is intended for use when Unit is placed behind a reverse proxy like nginx or a CDN. You must specify the source addresses of the trusted proxies. This can be accomplished with any valid IP pattern supported by Unit's match block: ["10.0.0.1", "10.4.0.0/16", "!192.168.1.1"] The feature is configured per listener. The client address replacement functionality only operates when there is a source IP match and the specified header is present. Typically this would be an 'X-Forwarded-For' header. { "listeners": { "127.0.0.1:8080": { "client_ip": { "header": "X-Forwarded-For", "source": [ "10.0.0.0/8" ] }, "pass": "applications/my_app" }, } } If a request occurs and Unit receives a header like below: "X-Forwarded-For: 84.123.23.23" By default, Unit trusts the last rightmost IP in the header, so REMOTE_ADDR will be set to 84.123.23.23 if the connection originated from 10.0.0.0/8. If Unit runs behind consecutive reverse proxies and receives a header similar to the following: "X-Forwarded-For: 84.123.23.23, 10.0.0.254" You will need to enable "recursive" checking, which walks the header from last address to first and chooses the first non-trusted address it finds. { "listeners": { "127.0.0.1:8080": { "client_ip": { "header": "X-Forwarded-For", "source": [ "10.0.0.0/8" ] "recursive": true, }, "pass": "applications/my_app" }, } } If a connection from 10.0.0.0/8 occurs, the chain is walked. Here, 10.0.0.254 is also a trusted address so the client address will be replaced with 84.123.23.23. If all IP addresses in the header are trusted, the client address is set to the first address in the header: If 10.0.0.0/8 is trusted and "X-Forwarded-For: 10.0.0.3, 10.0.0.2, 10.0.0.1", the client address will be replaced with 10.0.0.3.
2021-08-12Introduced nxt_sockaddr_parse_optport() for addresses w/o ports.Oisin Canty3-64/+114
2021-08-11Tests: initialising log params before first _print_log().Max Romanov1-2/+3
2021-08-11Tests: retrying directory remove if resource is busy.Max Romanov1-1/+8
2021-08-09Python: fixing misprint in error message.Max Romanov1-2/+2
2021-08-09Java: upgrading third-party components.Max Romanov3-19/+19
2021-08-05Router: fixed crash when matching an empty address pattern array.Oisin Canty3-0/+16
A crash would occur when the router tried to match an against an empty address pattern array. The following configuration was used to reproduce the issue: { "listeners": { "127.0.0.1:8082": { "pass": "routes" } }, "routes": [ { "match": { "source": [] }, "action": { "return": 200 } } ] }
2021-08-04Added a changelog for ae4f067a9ea4.Zhidao HONG1-0/+7
2021-08-02Router: fixed segmentation fault.Zhidao HONG3-0/+27
In the case that routes or upstreams is empty and the pass option is a variable. If the resolved pass is routes or upstreams, a segment error occurred.
2021-08-03Fixed dead assignments.Max Romanov6-10/+3
Found by Clang Static Analyzer.
2021-07-29Application restart introduced.Max Romanov10-41/+454
When processing a restart request, the router sends a QUIT message to all existing processes of the application. Then, a new shared application port is created to ensure that new requests won't be handled by the old processes of the application.
2021-07-24Router: split nxt_http_app_conf_t from nxt_http_action_t.Zhidao HONG5-43/+45
No functional changes.
2021-07-26Router: renamed nxt_http_proxy_create() as nxt_http_proxy_init().Zhidao HONG3-18/+17
No functional changes.
2021-07-23Router: split nxt_http_static_conf_t from nxt_http_action_t.Zhidao HONG5-173/+198
No functional changes.
2021-07-23Tests: added SNI test without hostname in request.Andrei Zeliankou2-1/+21
generated by cgit (git 2.34.1) at 2025-01-16 06:55:56 +0000