[Nginx] Sida looga adkaado jawaabta_status = 0

Maqaal ka tirsan qaybta "notes in the margins".

TL: DR:

http2_max_field_size 8k; # всех спасет!

Mid ka mid ah mashaariicda, ka dib markii aan beddelay qaar ka mid ah caqli-celinta dhabarka dambe ee gudaha, waxaan bilaabay inaan ku arko jawaab-celin la yaab leh oo ku jirta diiwaannada-gaar ahaan, 0. Logudu waxay u ekaayeen sidan:

{
  "timestamp": "2020-01-17T08:41:51+00:00",
  "remote_addr": "zzz.zzz.zzz.zzz",
  "request_time": 0,
  "upstream_response_time": "",
  "upstream_header_time": "",
  "http_accept_language": "-language",
  "response_status": 0,
  "request": "",
  "host": "example.com",
  "upstream_addr": "",
  "http_referrer": "",
  "request_length": 5854,
  "bytes_sent": 0,
  "http_user_agent": ""
}


Akhrinta dukumeentiyada iyo Google-ku-gudbinta mawduuca gabi ahaanba waxba ma dhalin, iyadoo lagu andacoonayo in hab-dhaqankani uu yimaado marka macmiilku xidho xidhiidhka isaga oo aan gudbin madaxyada. Waxa kale oo jira waxyaabo qalaad oo ku saabsan cabbirka kaydka ee wsgi_, kaas oo xaaladdeenna gabi ahaanba aan ku habboonayn.

Guud ahaan, waxaanu go'aansanay in dhibaatadu aanay ahayn dhibaato, marka la eego in muggayadayadu aanay haba yaraatee khatar ahayn.

Ilaa hadda markii aan la yaabay dhibaatada soo socota: xaaladaha qaarkood, xiriiriyayaashu way furan yihiin dhib la'aan http, laakiin gebi ahaanba way diidaan inay ka shaqeeyaan https, siinta cajiibka ah: Xiriirinta #0 si ay u martigeliso tusaale ahaan.com
curl: (52) Jawaab faaruq ah oo ka timid server-ka

Waxa kaliya oo aan awooday in aan la socdo shaygan diiwaanka IP-ma jiro codsi ama xog kale, sida aad ka arki karto tusaalaha kore. Kaliya heerka caanka ah ee 0, laakiin waan ogahay in aanan iska dhicin codsiga! Waxaan bilaabay inaan hareeraha qoddo si aan u arko waxa khaldami kara. Waxay noqotay mid aad u fudud:

dhageyso 443 ssl http2 dib-u-dhac=8192;

Hagaag, haddii aad u isticmaasho http2 ee isku xirka SSL, kuma filna inaad dejiso codsiyada kaydinta; sidoo kale waxaad u baahan tahay inaad ku habayso ngx_http_v2_module, kuwaas oo ah:

Синтаксис:	http2_max_field_size размер;
Умолчание:	http2_max_field_size 4k;
Контекст:	http, server

Waxay xaddidaysaa cabbirka ugu sarreeya ee madaxa codsiga la cufan iyadoo la isticmaalayo HPACK. Xadkani waxa uu si siman u khuseeyaa magaca iyo qiimaha labadaba. Haddii codaynta Huffman la isticmaalo, cabbirka dhabta ah ee magaca la jabiyay iyo xargaha qiimaha ayaa laga yaabaa inay ka weynaadaan. Xadka caadiga ah ayaa ku habboon codsiyada badankooda.

Markaa, taasi waa. Laakiin waa maxay sababtu? Sababtoo ah dhererka isku xidhka ayaa dheeraa-ka dheeraa kuwa 4k.

Anoo dejinaya, tusaale ahaan, 8kb (ama inta ay u badan tahay in ku filan), waxaan xallinaa dhibaatada.
Markaa way socotaa.

Source: www.habr.com

U soo iibso martigelin lagu kalsoonaan karo oo loogu talagalay bogagga leh ilaalinta DDoS, VPS VDS servers 🔥 Iibso martigelin degel oo lagu kalsoonaan karo oo leh ilaalinta DDoS, VPS VDS servers | ProHoster