# HG changeset patch # User Vladimir Homutov # Date 1429613220 -10800 # Node ID e69e4dbcc76079056ddc28d3ba2c1bb6509202b9 # Parent 4e5cab61e5486f8570125aa82a18c19699e214bc Documented OSS stream modules. diff -r 4e5cab61e548 -r e69e4dbcc760 xml/en/docs/stream/ngx_stream_core_module.xml --- a/xml/en/docs/stream/ngx_stream_core_module.xml Tue Apr 21 14:47:19 2015 +0300 +++ b/xml/en/docs/stream/ngx_stream_core_module.xml Tue Apr 21 13:47:00 2015 +0300 @@ -9,15 +9,16 @@ + rev="3">
- -This module is available as part of our -commercial subscription. - +The ngx_stream_core_module module +is available since version 1.9.0. +This module is not built by default, it should be enabled with the +--with-stream +configuration parameter.
@@ -95,7 +96,7 @@ -The ssl parameter (1.7.10) allows specifying that all +The ssl parameter allows specifying that all connections accepted on this port should work in SSL mode. @@ -183,7 +184,6 @@ stream server -1.7.10 Configures name servers used to resolve names of upstream servers @@ -209,6 +209,10 @@ resolver 127.0.0.1 [::1]:5353 valid=30s; + +This directive is available as part of our +commercial subscription. + @@ -219,13 +223,16 @@ 30s stream server -1.7.10 Sets a timeout for name resolution, for example: resolver_timeout 5s; + +This directive is available as part of our +commercial subscription. + diff -r 4e5cab61e548 -r e69e4dbcc760 xml/en/docs/stream/ngx_stream_proxy_module.xml --- a/xml/en/docs/stream/ngx_stream_proxy_module.xml Tue Apr 21 14:47:19 2015 +0300 +++ b/xml/en/docs/stream/ngx_stream_proxy_module.xml Tue Apr 21 13:47:00 2015 +0300 @@ -9,22 +9,15 @@ + rev="4">
-The ngx_stream_proxy_module module (1.7.7) allows passing +The ngx_stream_proxy_module module (1.9.0) allows passing connections to another server over TCP and UNIX-domain sockets. - - -This module is available as part of our -commercial subscription. - - -
@@ -88,7 +81,6 @@ on stream server -1.7.10 When a connection to the proxied server cannot be established, determines @@ -109,7 +101,6 @@ 0 stream server -1.7.10 Limits the time allowed to pass a connection to the @@ -125,7 +116,6 @@ 0 stream server -1.7.10 Limits the number of possible tries for passing a connection to the @@ -169,7 +159,6 @@ off stream server -1.7.10 Enables the SSL/TLS protocol for connections to a proxied server. @@ -183,7 +172,6 @@ stream server -1.7.10 Specifies a file with the certificate in the PEM format @@ -198,7 +186,6 @@ stream server -1.7.10 Specifies a file with the secret key in the PEM format @@ -213,7 +200,6 @@ DEFAULT stream server -1.7.10 Specifies the enabled ciphers for connections to a proxied server. @@ -233,7 +219,6 @@ stream server -1.7.10 Specifies a file with revoked certificates (CRL) @@ -249,7 +234,6 @@ host from proxy_pass stream server -1.7.10 Allows to override the server name used to @@ -271,7 +255,6 @@ stream server -1.7.10 Specifies a file with passphrases for @@ -288,7 +271,6 @@ off stream server -1.7.10 Enables or disables passing of the server name through @@ -305,7 +287,6 @@ on stream server -1.7.10 Determines whether SSL sessions can be reused when working with @@ -328,7 +309,6 @@ SSLv3 TLSv1 TLSv1.1 TLSv1.2 stream server -1.7.10 Enables the specified protocols for connections to a proxied server. @@ -342,7 +322,6 @@ stream server -1.7.10 Specifies a file with trusted CA certificates in the PEM format @@ -358,7 +337,6 @@ off stream server -1.7.10 Enables or disables verification of the proxied server certificate. @@ -372,7 +350,6 @@ 1 stream server -1.7.10 Sets the verification depth in the proxied server certificates chain. diff -r 4e5cab61e548 -r e69e4dbcc760 xml/en/docs/stream/ngx_stream_ssl_module.xml --- a/xml/en/docs/stream/ngx_stream_ssl_module.xml Tue Apr 21 14:47:19 2015 +0300 +++ b/xml/en/docs/stream/ngx_stream_ssl_module.xml Tue Apr 21 13:47:00 2015 +0300 @@ -9,21 +9,17 @@ + rev="3">
-The ngx_stream_ssl_module module (1.7.10) +The ngx_stream_ssl_module module (1.9.0) provides the necessary support for a stream proxy server to work with the SSL/TLS protocol. - - - - -This module is available as part of our -commercial subscription. - +This module is not built by default, it should be enabled with the +--with-stream_ssl_module +configuration parameter.
@@ -63,7 +59,7 @@ The value engine:name:id -can be specified instead of the file (1.7.9), +can be specified instead of the file, which loads a secret key with a specified id from the OpenSSL engine name. diff -r 4e5cab61e548 -r e69e4dbcc760 xml/en/docs/stream/ngx_stream_upstream_module.xml --- a/xml/en/docs/stream/ngx_stream_upstream_module.xml Tue Apr 21 14:47:19 2015 +0300 +++ b/xml/en/docs/stream/ngx_stream_upstream_module.xml Tue Apr 21 13:47:00 2015 +0300 @@ -9,24 +9,17 @@ + rev="6">
-The ngx_stream_upstream_module module (1.7.7) +The ngx_stream_upstream_module module (1.9.0) is used to define groups of servers that can be referenced by the directive. - - -This module is available as part of our -commercial subscription. - - -
@@ -34,22 +27,46 @@ -resolver 10.0.0.1; - upstream backend { - zone upstream_backend 64k; - hash $remote_addr consistent; - server backend1.example.com:12345 weight=5; - server 127.0.0.1:12345 max_fails=3 fail_timeout=30s; - server unix:/tmp/backend2; - server backend3.example.com:12345 resolve; + server backend1.example.com:12345 weight=5; + server backend2.example.com:12345; + server unix:/tmp/backend3; + + server backup1.example.com:12345 backup; + server backup2.example.com:12345 backup; } server { listen 12346; proxy_pass backend; +} + + + + +Dynamically configurable group, +available as part of our +commercial subscription: + +resolver 10.0.0.1; + +upstream dynamic { + zone upstream_dynamic 64k; + + server backend1.example.com:12345 weight=5; + server backend2.example.com:12345 fail_timeout=5s slow_start=30s; + server 192.0.2.1:12345 max_fails=3; + server backend3.example.com:12345 resolve; + + server backup1.example.com:12345 backup; + server backup2.example.com:12345 backup; +} + +server { + listen 12346; + proxy_pass dynamic; health_check; } @@ -177,6 +194,15 @@ marks the server as permanently unavailable. + + + + +Additionally, +the following parameters are available as part of our +commercial subscription: + + max_conns=number @@ -193,7 +219,7 @@ monitors changes of the IP addresses that correspond to a domain name of the server, and automatically modifies the upstream configuration -without the need of restarting nginx (1.7.10). +without the need of restarting nginx. In order for this parameter to work, the directive @@ -243,13 +269,17 @@ name size upstream -1.7.10 Defines the name and size of the shared memory zone that keeps the group’s configuration and run-time state that are shared between worker processes. -Such groups allow changing the group membership + + + +Additionally, +as part of our commercial subscription, +such groups allow changing the group membership or modifying the settings of a particular server without the need of restarting nginx. The configuration is accessible via a special location @@ -316,7 +346,6 @@ last_byte upstream -1.7.11 Specifies that a group should use a load balancing method where a connection @@ -335,6 +364,13 @@ time to receive the last byte of data is used. + + +This directive is available as part of our +commercial subscription. + + + @@ -342,7 +378,6 @@ [parameters] server -1.7.10 Enables periodic health checks of the servers in a @@ -423,6 +458,13 @@ considered unhealthy. + + +This directive is available as part of our +commercial subscription. + + + @@ -431,7 +473,6 @@ 5s stream server -1.7.10 Overrides the @@ -439,6 +480,13 @@ value for health checks. + + +This directive is available as part of our +commercial subscription. + + + @@ -446,7 +494,6 @@ name stream -1.7.10 Defines the named test set used to verify server responses to health checks. @@ -530,6 +577,13 @@ + + +This directive is available as part of our +commercial subscription. + + +