From 36c6fbbc0c7b7e611c8bd6148c6ae70fe8461f63 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Fri, 16 Aug 2019 09:18:46 +0200 Subject: [PATCH] [setup-ngxblocker] add Debian 8 test .conf files for server_names_hash_bucket_size --- .DS_Store | Bin 0 -> 10244 bytes .dev-tools/.DS_Store | Bin 0 -> 14340 bytes .dev-tools/setup-ngxblocker/.DS_Store | Bin 0 -> 6148 bytes .../commented/debian-8-jessie-hasbucket.conf | 113 ++++++++++++++++++ 4 files changed, 113 insertions(+) create mode 100644 .DS_Store create mode 100644 .dev-tools/.DS_Store create mode 100644 .dev-tools/setup-ngxblocker/.DS_Store create mode 100644 .dev-tools/setup-ngxblocker/commented/debian-8-jessie-hasbucket.conf diff --git a/.DS_Store b/.DS_Store new file mode 100644 index 0000000000000000000000000000000000000000..d729f6c0d1de7efbf23c8b34f241e0c2d808f751 GIT binary patch literal 10244 zcmeHMU2GiH6+UO}I5YMHkJEsYY{IVV(nR0{+i?@p6uSNkG5K-8HgSOB%& z%-Rl4kU^qqRUznG3RO#`zEISvt@@)D-r5R;5Ihhm0)a%4+P?JXfvPPph40?GYi4#G z0aaB&HM5#~XYM`c+;hM4-MK$YL_Acn`-t*Hq~R91X&_nW67}M4xH8p}F60b-B8MUh z$Go6a^ctkof)s%iffRuhffRuhflmSgn6t&DwW&N!Qv^~3QUulz5Z{M9Zjl$N`Krq0 zrvr)H0w8ZjvApn%eSp--SMx$OUsbtOg-x}4;HoNDw-~I{QJ)v$$P3kcRpm;ZSg8|N zTjuHxg=Oo|%S&5rHlgZKS&F}Dl{eq_16Q;vz>b;|YaU}-3*_;x7moV21j z=<2$z=`-fGm6d^gH}vH9?Z4rCPkyDZzyCl_{@}pA^XGM~^P0XJ$Ii^3ePHF>`3Ikn z7!X%KL)5O`*U~5Pv@SwkxHznOn|ZC)+t+Ko)mz()P1&Qzj-MDeX3Wit=*aj&ic<>Q9vduQKn4GiFE0@=6uYikv~un{Xd+P}Uxn%7N#d3_@3! zIXxXY%aN#SsG7bb49d~4G&b$RzLGL4p>vx9qwbqI-YEjm}=&Y<9F8UDqkay#F!feA2q?XY}aRVIa3f(y?%ZdUNaag z>h-#woMAR$B*yi<_3^n)qY{WVVKPr6{_}&hfv!B{%aSr+qQ2t3dWEwhO9}l zrM6u;L(~6TTz-*WrMKy?^bWmC|K=8MkMpfO!IM12ck>zW zxCAE8bHMj=8Eihs5ArHM#1Hc~_)&2AasDPh0WN=szspbY)BFR;=^yj2_}5_db71w$ z;Pe~(hdK@)PjZ<5csUL)PLzEw@Mlpk_}`3aaF$$()N%LP)ORDQwb;}rCRZs(b5x;X zoirxbgmgQkJxswQ&eA-2by`o? zX|Ff&BSuRgzPN*^Kpxo#gd?mGEaK2_IE%HA42O1 z{T)(YEF)%RKSj$vZV$dkuu(!kL<@6}P>6)Ifcp8QUo5^o@nuS`!R`_~ECLU))Did! zFKy|iz$>67ybG^=y03mg!;jQi-vZfCcmZETbY|cuumX-Qd=+>KG!er(FW;%Nb0rPZ z6iw1N7E{AWPtai+qnlB78)_!;EXwwx9Xn|$W7Sz|LEi%OOGLe1_LT9 zIURfvV@51g%j;pnA`)?pEi&>YM6DvVK8RtB$zp6R*N=A@hq#^1(vD!5;IN0d`e4K| zqT?YxC2$KKCB4sx_{43rVg)b;K8zyv6G+#Izl>8{r%5t5> zQp7GH*&*Ao5jpXF_y}!@$R#Wwkm;2o@aaIHNx7L9=l`RZ|NsBf(V5iC6oC|h{|EtY z9+?;!f@*DFUvEX6wdZl4!7VN!x2kfff7ebpN03|No!%|L+5rJVj>! literal 0 HcmV?d00001 diff --git a/.dev-tools/.DS_Store b/.dev-tools/.DS_Store new file mode 100644 index 0000000000000000000000000000000000000000..507f9a9dc60e8ccd0fe315a04b2e977a2df6c7e0 GIT binary patch literal 14340 zcmeHOTW=dh6rN2|a2i6A(kPcU)La#$ILZwOLY1OW9x7gtQUMYmcYRB&ZoI~JE+quz zh5vxy55PaEc;S)1z&k&neBW8GcV<0aZzw`2-HFz-xAUFZGvAzq@OD zrE=Ic3$JtQE2B8$VEY6c_NSFdA8t6O`etav{V~+oTvj;mnZj7x3O1{BkrxLCayN`dw#j(`6cLs zvDB|nfBIAkj;iKWXAb99o3ktw*hz3`A_$%OOU(T_mv^{n5o_!qqXnR4G zq2HA=yt;}lE13l{3uG3^EbzQqfO8*8ZX&3&-^>D;1u_ftEI|K|$Hsc6TVDjVxDNbq z3C-(VLQBCum$p2Y@76or`XZ=t1;q(OQ3s+mKP z3yUM#QRi`h;_OJ3{bUx%EMTz!ascX$XN-NV(JkXwExJ|ehEY>=6hO?e%u-IUP z4AYSpW5|(o0hkS-2HH5znDMe;3Ilb_S0ESWsCpw)71c3X#r#=aTHiK#Ob(8Gp>c3R zLpfIDZ3m;E6O#h#5~Rpfixhd5AVqH4q`)6TY7Ts$?a2z(?1{+71(~}he3aE{4me|= zy(1X$Oe1lbt?bWBCg&h6?I)`Yjfna?cq+cz7vGKkH~Wv= zxtx6Iq}}Z1Reviry?VQ|w)TfJGCFqcg%@+V+(d3N_x0X^f3nwcJ4fwZxAmnQ)hpFf zcmIL!d%bBXJ^+vU&-Tu|*^+v@%+4YYamA2q~>UItwJ3c<18!t{T zoSkiLZm;Aw-`hT4$)BxnY`njc|6ptL{Cqq&_tyH|`wtHve|z@b`S(8sv$4}%(5k7} z?EEv1hgz=EE_)@koghPRKHh6JJioDzdwKsnx+HKq1+zQQNt|FSNNLj@RnUEwApjKVTWN9Z|ywT3NR7iA7HZ%@V zym=CMk ze&ZXGFN@>gYQHQxs~A87;%JiHko~vcf5#$0PGN?=CA2ks-~Mb1B}`@NM~#ASrb52- zl1chW*YkQRJ)t{GwMda((RI9?N=Kh#!@wK5T;amauv@z4vFRE(xEXO7I$r&U&tqAH z(A^o>H&bBSaNza~oT(m;J|!nOeS_Dxlch1XQ%#*>xn+&j!*N5VB~F}TH63?hXnXs5 z-1I_Rei#;*2luMTnz-;-9y}joQeS*n8OKL*mCM{?WY-v~#Jrk#3VjSr#_$G8ax!vq zn$2cJk{-~P91gPvTvoZ_hb>%?Z-#V)Ss(4Sde-n z%(`?2%M1kOs^edj?Za+9&NCNB56GT#!80EVRZFYLGz0V2P)ufpA{JXS^TNW@kcCV- zX7T?cbVv(!h%yOT{NMjMf%c-wNZ`-6LSxQqHCsENR15k>tUeFXSa)MoKN QK9bDhfBk>4p1=72ZwJkWn*aa+ literal 0 HcmV?d00001 diff --git a/.dev-tools/setup-ngxblocker/.DS_Store b/.dev-tools/setup-ngxblocker/.DS_Store new file mode 100644 index 0000000000000000000000000000000000000000..58ed3e490763f88ebdda625f60e1eb6aa0230071 GIT binary patch literal 6148 zcmeHK%Wl&^6ur|17!x6~Kq~CKL1K|gO;bS;Lb5_xWQP<43qY+Mo5aHPM7GlaA;=qk z0=|G>;RpB-J^;=0m?m9FkL8tgt-d`~e5)oijZVeCMcYZ2EZ6hOC zLL`6ce()@g z7RQ|%k3?GdaT;Zn@R!fyG!%=0n5SW`@;vd2DY%Z~aOb#lYq>n=A9mgT-NRMaUH10( z?{(e#2mRH`;XAi`4~HkG@7^yztUi8Lvmu7vOWAdUzu^li8`L=)WoaVP2}UK8Lpebq z#q=7kcE2_Cz9OcoUL!ut$4P+MBM!*~Wk@rDr{q&IOsdJ)P9s?@{=zOqLz#cdR$HSE zbXRy?W5g5}{pr$f&#bBC_ ze%Hi#21|{aPRv|Bn0YcYHx#Cxj{L3)C+2CirB%Qxu&%(iZg%AP|M>6s|8D z7fJ!vIvO1fFeP)gHYO*}S{Hr-mnP#%jf#T89LK66kK&tfWf*g11?U+pHKGS*KLnHv Lwy+BPR|S3neR}PY literal 0 HcmV?d00001 diff --git a/.dev-tools/setup-ngxblocker/commented/debian-8-jessie-hasbucket.conf b/.dev-tools/setup-ngxblocker/commented/debian-8-jessie-hasbucket.conf new file mode 100644 index 000000000..a4dbb50db --- /dev/null +++ b/.dev-tools/setup-ngxblocker/commented/debian-8-jessie-hasbucket.conf @@ -0,0 +1,113 @@ + +user www-data; + +worker_priority 0; +worker_processes 2; +worker_cpu_affinity auto; +worker_rlimit_core 512m; +worker_rlimit_nofile 65535; + +# daemon on; +# master_process off; + +# thread_pool default threads=64 max_queue=65535; + + +error_log /var/log/nginx/error.log; +#error_log logs/error.log notice; +#error_log logs/error.log info; + +#pid logs/nginx.pid; + + +events { + use epoll; + accept_mutex on; + accept_mutex_delay 500ms; + worker_aio_requests 32; + worker_connections 10240; + multi_accept on; +} + + +http { + include mime.types; + default_type application/octet-stream; + + aio threads; + + # Controlling Buffer Overflow Attacks + client_body_buffer_size 128k; # maybe fix + client_body_in_file_only off; + client_body_in_single_buffer off; + client_body_timeout 10s; + client_header_buffer_size 128k; # maybe fix + client_header_timeout 360s; + client_max_body_size 1m; # if you need more change this value to 64m + + connection_pool_size 512; + # disable_symlinks off; + # etag on; # for static files + # ignore_invalid_headers on; + + keepalive_disable msie6; + keepalive_requests 100; # default 100 + keepalive_timeout 60s; # default 75s + + # large_client_header_buffers 4 256k; # maybe like that 2 1k; + + access_log off; + log_not_found off; + log_subrequest off; + + open_file_cache max=65535 inactive=30s; + open_file_cache_errors on; + open_file_cache_min_uses 1; + open_file_cache_valid 60s; + + server_tokens off; + sendfile on; + sendfile_max_chunk 0; + tcp_nodelay on; + + + tcp_nopush on; + + + types_hash_bucket_size 128; + types_hash_max_size 2048; + + # Test setup-ngxblocker for duplicate server_names_hash_bucket_size + server_names_hash_bucket_size 64; + + + gzip on; + gzip_buffers 16 8k; + gzip_comp_level 4; + gzip_disable "msie6"; + gzip_min_length 256; + gzip_http_version 1.1; + gzip_proxied any; + gzip_types application/json application/javascript application/font-woff application/xml application/xml+rss text/css text/javascript text/plain text/xml; + gzip_vary on; + + ssi on; + ssi_last_modified on; + ssi_min_file_chunk 1k; + ssi_silent_errors on; + ssi_value_length 256; + + http2_chunk_size 32k; # default 8k + http2_body_preread_size 64k; # default 64k + http2_idle_timeout 3m; # default 3m + http2_max_concurrent_streams 10240; # default 128 + http2_max_field_size 16k; # default 4k + http2_max_header_size 32k; # default 16k + http2_max_requests 10240; # default 1000 + http2_recv_buffer_size 256k; # default 256k + http2_recv_timeout 30s; # default 30s + + # nginx-naxsi config + # include /etc/nginx/naxsi_core.rules; + +}