vbtechguy

12 ms·

1. 61.▲
   by vbtechguy 8y ago

   i believe those are build against non-OpenSSL 1.1.1 branch so don't have TLS 1.3 supported by official nginx docker images.
2. 62.▲
   by vbtechguy 8y ago

   yes I am using Nginx as a primary web server which is behind Cloudflare using Cloudflare Strict SSL - hence glad to see Cloudflare communicate with my origin via TLS 1.3
3. 63.▲
   by vbtechguy 8y ago

   Indeed in ideal world that would be the perfect solution.
4. 64.▲
   by vbtechguy 8y ago

   Yeah LTS or bleeding edge is always time relative. For example OpenSSL 1.1.1 is the new LTS release https://www.openssl.org/blog/blog/2018/09/11/release111/ > After two years of work we are
5. 65.▲
   by vbtechguy 8y ago

   Yeah confirmed no TLS 1.3 0-RTT early data support on origin backend communications right now https://community.cloudflare.com/t/cloudflare-speak-tls-1-3-...
6. 66.▲
   by vbtechguy 8y ago

   Yeah you're at the mercy of what version of OpenSSL is used by your Nginx binaries. I always like to play with bleeding edge latest tech so TLS 1.3 is a must for me, so I always build my Centmin Mod Nginx binaries using Nginx mainline
7. 67.▲
   Cloudflare Enables HTTPS TLS 1.3 Backend Origin Communication(community.centminmod.com)

   116 points by vbtechguy 8y ago|31 comments
8. 68.▲
   by vbtechguy 8y ago

   update from https://twitter.com/ruehsen/status/1069907108869623808 Ok, that was the inofficial/internal alpha tarball on http://alpha.gnu.org - that is meant for the translator team only. They ju
9. 69.▲
   by vbtechguy 8y ago

   seems they they messed up the wget-1.20.tar.gz extracting it has a wget-1.19.5 directory name instead of wget-1.20 named directory tar xvzf wget-1.20.tar.gz | head -n3 wget-1.19.5/ wget-1.19.5/GNUmakefile wget-1.19.5&#x2
10. 70.▲
    PHP 7.3 vs. 7.2 vs. 7.1 vs. 7.0 (PHP-FPM) Benchmarks(community.centminmod.com)

    2 points by vbtechguy 8y ago|0 comments
11. 71.▲
    by vbtechguy 8y ago

    Already supported in Nginx 1.15.3+ if you recompile with either OpenSSL 1.1.1 or BoringSSL I have no problems for - Nginx + BoringSSL https://community.centminmod.com/threads/enabling-boringssl-... - Nginx + OpenSSL 1
12. 72.▲
    by vbtechguy 9y ago

    yup i am using eustas fork for ngx_brotli works well :)
13. 73.▲
    by vbtechguy 9y ago

    been testing Nginx 1.13.9 via master branch with my Centmin Mod Nginx stack and HTTP/2 push testing by setting up cache aware HTTP/2 push via conditional preload link resource hints headers which only show up when a cookie is abse
14. 74.▲
    by vbtechguy 9y ago

    been using ngx_brotli with my Centmin Mod Nginx stack for what seems like years now https://community.centminmod.com/threads/how-to-use-brotli-c... :)
15. 75.▲
    by vbtechguy 9y ago

    Matt's response https://caddy.community/t/the-realities-of-being-a-foss-main...
16. 76.▲
    by vbtechguy 9y ago

    at least RHEL/CentOS 7.4 will move to OpenSSL 1.0.2 for APLN and HTTP/2 support :)
17. 77.▲
    by vbtechguy 9y ago

    or just script it to do all the leg work which is what I do with my LEMP installer for TLS v1.3 support and optional nginx compile against LibreSSL or OpenSSL or later BoringSSL https://community.centminmod.com/posts/48
18. 78.▲
    by vbtechguy 9y ago

    indeed i am happy to see OpenResty Inc as i use alot of openresty modules i.e. lua etc for my own LEMP stack installer https://centminmod.com/ :)
19. 79.▲
    by vbtechguy 9y ago

    hey Matt https://community.centminmod.com/threads/caddy-http-2-server... oldies but i should revisit this as caddy is using Go 1.8 now
20. 80.▲
    by vbtechguy 9y ago

    caddy doesn't scale or handle high traffic as well as nginx does from my benchmarks and understandably as caddy author has stated, he's focusing on features first then performance. benchmarks caddy vs nginx - caddy uses up to 3x t
21. 81.▲
    by vbtechguy 9y ago

    I've had basic nginx vhost stats in my Centmin Mod LEMP stack installer for ages - not as detailed but works https://centminmod.com/nginx.html#vhoststats . Using nginx module https://github.com/vozlt&#x
22. 82.▲
    by vbtechguy 9y ago

    Looking forward to TLS 1.3. Starting testing Nginx 1.11.13 + OpenSSL 1.1.0 draft 18 branch with TLS 1.3 myself https://community.centminmod.com/posts/47692/ not quite there yet. Needs some love on Nginx end too :)
23. 83.▲
    by vbtechguy 10y ago

    probably explains why their disk i/o performance doesn't match Linode or DigitalOcean https://community.centminmod.com/threads/kvm-vps-benchmarks-...
24. 84.▲
    by vbtechguy 10y ago

    Linode wins hands down. Check out detailed benchmarks at https://community.centminmod.com/threads/kvm-vps-benchmarks-...
25. 85.▲
    by vbtechguy 10y ago

    Yup $5 shoot out between Linode vs DigitalOcean vs Vultr https://community.centminmod.com/threads/10437/ :)
26. 86.▲
    by vbtechguy 10y ago

    Ask and you shall receive Caddy 0.8 and 0.9 benchmarks against Nginx 1.9.7 and 1.11.3 over 2 periods Dec 2015 and Aug 2016 https://community.centminmod.com/threads/caddy-http-2-server...
27. 87.▲
    by vbtechguy 10y ago

    i saw on their web site that beta signups get reduced fees from 30 to 15% :)
28. 88.▲
    by vbtechguy 10y ago

    thanks for sharing
29. 89.▲
    by vbtechguy 10y ago

    netdata is perfect for single server monitoring it's perfectly suited to integration into my Centmin Mod LEMP stack installer https://community.centminmod.com/threads/addons-netdata-sh-n... . For folks wanting mult
30. 90.▲
    by vbtechguy 11y ago

    Looking good so far I have enabled a few Nginx dynamic modules including Openresty's set-misc, echo and headers more modules https://community.centminmod.com/posts/26535/ load_module "modules/ng