Post A13ZABE7FSop8Sh8e8 by tomleb@toot.cafe
(DIR) More posts by tomleb@toot.cafe
(DIR) Post #A13BZlES7WYp8zW81I by wolf480pl@mstdn.io
2020-11-10T09:08:41Z
0 likes, 0 repeats
>`sticky` requires NGINX Plusffs...where's that alibaba fork...
(DIR) Post #A13Cnkz7w65cNyaQK0 by Shitlord@dobbs.town
2020-11-10T09:21:40Z
0 likes, 0 repeats
@wolf480pl don't do it... There's uhh.. too much to live for...
(DIR) Post #A13Gv7GDugrXJgLd0C by wolf480pl@mstdn.io
2020-11-10T10:08:33Z
0 likes, 0 repeats
@Shitlord are you saying using tengine on prod is a bad idea?
(DIR) Post #A13Uv5dzK5D1f1LTIe by tomleb@toot.cafe
2020-11-10T12:45:25Z
0 likes, 0 repeats
@wolf480pl Maybe you can find a community module that does the job.eg:- https://github.com/lusis/nginx-sticky-module- https://bitbucket.org/nginx-goodies/nginx-sticky-module-ng/src/master/
(DIR) Post #A13XPvgkaRZRfaTEQ4 by wolf480pl@mstdn.io
2020-11-10T13:13:25Z
0 likes, 0 repeats
@tomleb if only there was a way to build it as a dynamic module without rebuilding nginx...
(DIR) Post #A13ZABE7FSop8Sh8e8 by tomleb@toot.cafe
2020-11-10T13:32:57Z
0 likes, 0 repeats
@wolf480pl You can follow these steps: https://git.sr.ht/~tomleb/nginx-stream-upstream-time-module#buildMake sure you use the flags from the nginx that will be running on your machine.
(DIR) Post #A13vQ3nyo70Xk7Rn8q by wolf480pl@mstdn.io
2020-11-10T17:42:21Z
0 likes, 0 repeats
@tomleb thanks. I was gonna do this, but then I started reading the code of that nginx-sticky-module you linked, and those function pointers in there look kinda sus...Like, they're putting a fuction pointer i a struct even though only one function pointer could ever be in there, and then they call it elsewhere, instead of just calling the function directly... if there's a buffer overflow in any of those structs, that's instant RCE
(DIR) Post #A13wuOPSre5oHx0YG8 by tomleb@toot.cafe
2020-11-10T17:59:01Z
0 likes, 0 repeats
@wolf480pl Yes, I was also suprised about the nginx code. If you dig through the source code you'll find a nice quadriple(?) pointer. Neat.The second link I sent was from a google repository, so I would expect it to work fine and be secure enough. However, we're never too careful.Your use case seems simple enough that you could find another load balancer to do the job, or even code one yourself (eg: with golang's http module)
(DIR) Post #A146HkhT3RCvfWdsTw by wolf480pl@mstdn.io
2020-11-10T19:44:07Z
0 likes, 0 repeats
@tomleb I'll first try to fix the JS filename issue so that I don't need stickiness, if that works I guess I'll just go for least_conn