nginx

103 views
Skip to first unread message

Daemach

unread,
Jan 23, 2017, 8:09:13 AM1/23/17
to lu...@googlegroups.com
Are there any plans for better support for nginx in the future?

Joseph Gooch

unread,
Jan 23, 2017, 8:15:02 AM1/23/17
to lu...@googlegroups.com
Could you elaborate on what you mean by that?  I believe through mod_cfml and proxy_http you get everything you should need...

Joe

On Mon, Jan 23, 2017 at 8:09 AM, Daemach <dae...@gmail.com> wrote:
Are there any plans for better support for nginx in the future?

--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+unsubscribe@googlegroups.com.
To post to this group, send email to lu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAMXSWUCPM9AMpvotD3C4mf78x2esxfU8pdKx9-9u_7wOaLi3%3Dg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Dominic Watson

unread,
Jan 23, 2017, 8:43:13 AM1/23/17
to lu...@googlegroups.com
Indeed, we use nginx and don't use mod_cfml. We just straight-up proxy to tomcat and it just works. I guess Lucee could help by providing some example setups in the docs (with and without mod_cfml).

To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAKY58c6-5Rg14AkX%3DwNCGJQgHUXH8YO%2BOHEd7rFhao9DhdySmg%40mail.gmail.com.

For more options, visit https://groups.google.com/d/optout.



--

Dominic Watson
Technical Lead

Pixl8 Interactive, 3 Tun Yard, 
Peardon Street, London, SW8 3HT

        

Daemach

unread,
Jan 23, 2017, 10:17:39 AM1/23/17
to lu...@googlegroups.com
I'm using lucee and SQLS on AWS for an environmental monitoring backend.  I'm hoping to have 100K hardware modules connected within a couple of years and will need to load balance.  Should I be running nginx on separate servers and load balancing them, proxying requests to backend tomcat servers or on the same server as lucee/tomcat?  Is there any way to get tomcat out of the loop?

A writeup/reference with sample config files would be great.  I don't understand what mod_cfml does either.

Thanks for your patience.

To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAEYvUxnU19OCSzaz9-WR%2BqxsdD8JMcX-nON9w1GGJ4E8xYmMVw%40mail.gmail.com.

Joseph Gooch

unread,
Jan 23, 2017, 10:22:54 AM1/23/17
to lu...@googlegroups.com
You need a J2EE server.  It doesn't need to be tomcat, but you can't run Nginx direct to Lucee.  You can run Lucee on undertow or any other J2EE server.  (Nor can you run Lucee through something like fastcgi - you need a servlet container)

What does adding Nginx to the mix give you?

Personally I use Nginx in front of Lucee/ACF for cookie rewrites and to serve static content, and I have Tomcat+Nginx on one server, and load balance requests coming into Nginx.  But you could have a Nginx cluster, and a Lucee cluster, if you wanted to.  Or just load balance between Lucee instances.  Tomcat can be used in production.


If you only have one Web context you don't need mod_cfml.
Joe






To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAMXSWUCr8ynuhBpuTmPDDMdzEcn%2BfmAVzLDTfv23Pcd2OKf_sA%40mail.gmail.com.

Daemach

unread,
Jan 23, 2017, 10:33:58 AM1/23/17
to lu...@googlegroups.com
I need to use nginx to adjust SSL fragment size on some static firmware files.  I have some low memory devices trying to do over-the-air firmware updates and, being limited memory, they aren't handling the default fragment/buffer size well.

At the moment, my server is hosting a production and staging/beta server.  How would mod_cfml benefit me?

To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAKY58c5LWDUU%2B_-XGs11-%3D0fYOZexC3eA7hZgpCnjoAGrp-eaw%40mail.gmail.com.

Pete Freitag

unread,
Jan 23, 2017, 11:27:47 AM1/23/17
to lu...@googlegroups.com
Deamach,

What mod_cfml does is to allow you to run multiple virtual hosts in tomcat without having to configure each host/wwwroot in the server.xml file. It is not a requirement to run multiple virtual hosts, it simply makes configuration easier and more like what people are used to with ACF.

If you are looking for some example of working with nginx and lucee you can take a look at this: https://github.com/foundeo/ubuntu-nginx-lucee it does use mod_cfml by default.

--
Pete Freitag
https://foundeo.com/ - ColdFusion Consulting & Products
http://hackmycf.com - CFML Server Security Scanner


Nando Breiter

unread,
Jan 23, 2017, 1:12:21 PM1/23/17
to lu...@googlegroups.com
This might also help


Configuring hosts in server.xml is simple and straightforward. I don't use mod_cfml. 

Big advantage for me having nginx in front is configuring ssl on nginx is significantly easier than dealing with uploading certs to Java.



Aria Media Sagl
+41 (0)76 303 4477 cell
skype: ariamedia

To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAADZ8V7E-nZkv1N6d3BtvqnHhNSA5J3q95MgQkTWBKpCae4h0g%40mail.gmail.com.

Igal @ Lucee.org

unread,
Jan 23, 2017, 1:59:02 PM1/23/17
to lu...@googlegroups.com
On 1/23/2017 10:12 AM, Nando Breiter wrote:
This might also help


Configuring hosts in server.xml is simple and straightforward. I don't use mod_cfml. 

Big advantage for me having nginx in front is configuring ssl on nginx is significantly easier than dealing with uploading certs to Java.

+1


Igal Sapir
Lucee Core Developer
Lucee.org


Dominic Watson

unread,
Jan 23, 2017, 2:07:05 PM1/23/17
to lu...@googlegroups.com
FWIW, here's a snippet from our nginx config's proxy settings. ymmv:

location / {
        proxy_set_header X-Original-Url $request_uri;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_cookie_path /mysite/ /;
 
        proxy_read_timeout 1200;
        proxy_pass http://127.0.0.1:8888/mysite$request_uri;
    }


--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+unsubscribe@googlegroups.com.
To post to this group, send email to lu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/6feb057f-d5ac-d27a-b34a-7aa355efcafa%40lucee.org.

For more options, visit https://groups.google.com/d/optout.

Joseph Gooch

unread,
Jan 23, 2017, 4:32:01 PM1/23/17
to lu...@googlegroups.com
In our environment SSL termination happens on the Load Balancer. :)

But fair point.

Joe


To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAGHrs%3D8gjq_2oRP3zvEeNKLT6ikEwpQJnf8UM2J0Q0BUjHO0mQ%40mail.gmail.com.

Igal @ Lucee.org

unread,
Jan 23, 2017, 4:39:22 PM1/23/17
to lu...@googlegroups.com

You can use nginx as a Load Balancer ;)

Igal Sapir
Lucee Core Developer
Lucee.org

To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.

Joseph Gooch

unread,
Jan 23, 2017, 4:41:50 PM1/23/17
to lu...@googlegroups.com
Well, yeah, but from an AWS scaling perspective, you wouldn't have the cert on every individual guest, you'd have one LB, whether that's ELB or nginx or whatever.  You might still have a non-ssl nginx on each VM, if you want that server to serve static requests or rewrite requests before Lucee gets them.

Joe


--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+unsubscribe@googlegroups.com.
To post to this group, send email to lu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/31c2c6b5-e6ce-1c05-5869-5d9b6d7de209%40lucee.org.

Daemach

unread,
Jan 23, 2017, 6:32:25 PM1/23/17
to lu...@googlegroups.com
I tried setting that up and it didn't work.  It looks like lucee didn't get installed.  AWS is on Ubuntu 16 now.  Maybe that's the reason.

To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAADZ8V7E-nZkv1N6d3BtvqnHhNSA5J3q95MgQkTWBKpCae4h0g%40mail.gmail.com.

Daemach

unread,
Jan 23, 2017, 7:06:34 PM1/23/17
to lu...@googlegroups.com
Is ngnix or elb a better option to terminate SSL and load balance?

To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAKY58c7fYrTFfs-FbcJzqwsA%2BLfGy_m9OM7j1qes6ytmOWkNeA%40mail.gmail.com.

Bill Tindal

unread,
Jan 24, 2017, 1:21:02 AM1/24/17
to Lucee
I've always used Nginx for SSL termination. I have not tried it with ELB but I'd imagine there are some pitfalls if your requirements get less standard, Nginx is just so flexible I don't want to use anything else.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.
--

Dominic Watson
Technical Lead

Pixl8 Interactive, 3 Tun Yard, 
Peardon Street, London, SW8 3HT

        
--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.

To post to this group, send email to lu...@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages