vkcom/nginx-quic

nginx-quic's Issues

quic_gso on not work！

How is everything going？I met a problem when I use you projects, and here is the problem.

“To enable GSO (Generic Segmentation Offloading):

    quic_gso on;

By default this Linux-specific optimization [8] is disabled.
Enable if your network interface is configured to support GSO.”

I have set my network interface ”generic-segmentation-offload: on“，and cancel the annotation of “quic_gso on;”，but the gso not work， how to solve this problem？
I hope I can receive you help soon

issue when build nginx quic

Hello all,

when I try to build Nginx with quic ,it throws the below error outputs:
[root@nginxhttp3 nginx-quic]# ./auto/configure --prefix=/webapps/nginx --sbin-path=/webapps/nginx/sbin/nginx --conf-path=/webapps/nginx/config/nginx.conf --error-log-path=/webapps/nginx/logs/nginx_error.log --http-log-path=/webapps/nginx/logs/nginx_access.log --pid-path=/webapps/nginx/logs/nginx.pid --user=nginx --group=nginx --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-mail --with-mail_ssl_module --with-http_v2_module --with-debug --with-http_v3_module --with-cc-opt="-I../boringssl/include" --with-ld-opt="-L../boringssl/build/ssl -L../boringssl/build/crypto"
checking for OS

• Linux 4.18.0-193.6.3.el8_2.x86_64 x86_64
  checking for C compiler ... found
• using GNU C compiler
• gcc version: 8.3.1 20191121 (Red Hat 8.3.1-5) (GCC)
  checking for gcc -pipe switch ... found
  checking for --with-ld-opt="-L../boringssl/build/ssl -L../boringssl/build/crypto" ... found
  checking for -Wl,-E switch ... found
  checking for gcc builtin atomic operations ... found
  checking for C99 variadic macros ... found
  checking for gcc variadic macros ... found
  checking for gcc builtin 64 bit byteswap ... found
  checking for unistd.h ... found
  checking for inttypes.h ... found
  checking for limits.h ... found
  checking for sys/filio.h ... not found
  checking for sys/param.h ... found
  checking for sys/mount.h ... found
  checking for sys/statvfs.h ... found
  checking for crypt.h ... found
  checking for Linux specific features
  checking for epoll ... found
  checking for EPOLLRDHUP ... found
  checking for EPOLLEXCLUSIVE ... found
  checking for eventfd() ... found
  checking for O_PATH ... found
  checking for sendfile() ... found
  checking for sendfile64() ... found
  checking for sys/prctl.h ... found
  checking for prctl(PR_SET_DUMPABLE) ... found
  checking for prctl(PR_SET_KEEPCAPS) ... found
  checking for capabilities ... found
  checking for crypt_r() ... found
  checking for sys/vfs.h ... found
  checking for BPF sockhash ... found
  checking for SO_COOKIE ... found
  checking for UDP_SEGMENT ... not found
  checking for poll() ... found
  checking for /dev/poll ... not found
  checking for kqueue ... not found
  checking for crypt() ... not found
  checking for crypt() in libcrypt ... found
  checking for F_READAHEAD ... not found
  checking for posix_fadvise() ... found
  checking for O_DIRECT ... found
  checking for F_NOCACHE ... not found
  checking for directio() ... not found
  checking for statfs() ... found
  checking for statvfs() ... found
  checking for dlopen() ... not found
  checking for dlopen() in libdl ... found
  checking for sched_yield() ... found
  checking for sched_setaffinity() ... found
  checking for SO_SETFIB ... not found
  checking for SO_REUSEPORT ... found
  checking for SO_ACCEPTFILTER ... not found
  checking for SO_BINDANY ... not found
  checking for IP_TRANSPARENT ... found
  checking for IP_BINDANY ... not found
  checking for IP_BIND_ADDRESS_NO_PORT ... found
  checking for IP_RECVDSTADDR ... not found
  checking for IP_SENDSRCADDR ... not found
  checking for IP_PKTINFO ... found
  checking for IPV6_RECVPKTINFO ... found
  checking for TCP_DEFER_ACCEPT ... found
  checking for TCP_KEEPIDLE ... found
  checking for TCP_FASTOPEN ... found
  checking for TCP_INFO ... found
  checking for accept4() ... found
  checking for kqueue AIO support ... not found
  checking for Linux AIO support ... found
  checking for int size ... 4 bytes
  checking for long size ... 8 bytes
  checking for long long size ... 8 bytes
  checking for void * size ... 8 bytes
  checking for uint32_t ... found
  checking for uint64_t ... found
  checking for sig_atomic_t ... found
  checking for sig_atomic_t size ... 4 bytes
  checking for socklen_t ... found
  checking for in_addr_t ... found
  checking for in_port_t ... found
  checking for rlim_t ... found
  checking for uintptr_t ... uintptr_t found
  checking for system byte ordering ... little endian
  checking for size_t size ... 8 bytes
  checking for off_t size ... 8 bytes
  checking for time_t size ... 8 bytes
  checking for AF_INET6 ... found
  checking for setproctitle() ... not found
  checking for pread() ... found
  checking for pwrite() ... found
  checking for pwritev() ... found
  checking for strerrordesc_np() ... not found
  checking for sys_nerr ... found
  checking for localtime_r() ... found
  checking for clock_gettime(CLOCK_MONOTONIC) ... found
  checking for posix_memalign() ... found
  checking for memalign() ... found
  checking for mmap(MAP_ANON|MAP_SHARED) ... found
  checking for mmap("/dev/zero", MAP_SHARED) ... found
  checking for System V shared memory ... found
  checking for POSIX semaphores ... not found
  checking for POSIX semaphores in libpthread ... found
  checking for struct msghdr.msg_control ... found
  checking for ioctl(FIONBIO) ... found
  checking for ioctl(FIONREAD) ... found
  checking for struct tm.tm_gmtoff ... found
  checking for struct dirent.d_namlen ... not found
  checking for struct dirent.d_type ... found
  checking for sysconf(_SC_NPROCESSORS_ONLN) ... found
  checking for sysconf(_SC_LEVEL1_DCACHE_LINESIZE) ... found
  checking for openat(), fstatat() ... found
  checking for getaddrinfo() ... found
  checking for PCRE2 library ... found
  checking for OpenSSL library ... found
  checking for OpenSSL QUIC support ... not found

./auto/configure: error: certain modules require OpenSSL QUIC support.
You can either do not enable the modules or install the OpenSSL library with
QUIC support into the system, or build the OpenSSL library with QUIC support
statically from the source with nginx by using --with-openssl= option.

Actually, there is no file/folder related with OpenSSL or BoringSSL

[root@nginxhttp3 nginx-quic]# cd ..
[root@nginxhttp3 src]# ls
curl nginx-1.19.2 nginx-quic quiche
Discuz_X3.2_SC_UTF8.zip nginx-1.19.2.tar.gz php-5.5.7.tar.gz quiche.tar.gz

question1: if I wanna install Nginx with quic successfully, what should I do next?

question2: should I download BoringSSL and build and install it?

How to let nginx log the ssl key log file by changing nginx.conf file

Hi @mihver1 @morf @mdounin @lyokha @arut ,

My goal is capture the pcap file on my linux machine which is using nginx quic to connect and decrypt those packets using ssl key log file.but i am unable to find how to capture ssl key log file on nginx. Could someone please help me how to capture ssl key log file ?

Looking forward for you reply.

Thanks,
Kartheek.

Работает ли это РЕПО с QUICTLS?

Когда я использую опцию --with-openssl=../openssl-quic, я получаю эту ошибку:

checking for OpenSSL QUIC support ... not found

Slow speed upload file

Hi!

I use nginx-quic with "proxy_pass" for nodejs server http://localhost:5000
I upload a large file to this by method="POST" enctype="multipart/form-data".

For uploading a large files I use busboy at NodeJS and I add to nginx.conf :

client_max_body_size 0;
proxy_request_buffering off;

All is work! But I have HTTP/3 is slowly than HTTP/1.1

When I try to upload file 32 Mb via HTTP/1.1, this file uploads aproxymaly for 5 seconds and every chunk size is about ~65000 bytes

When I try to upload this file via HTTP/3, file uploads elapsing aproxymaly 30 seconds and every chunk size has about ~2000 bytes.

Uploading via HTTP/3 more slowly than HTTP/1.1 because HTTP/3 has more count of chunks and this chunks is more small that chunks in HTTP/1.1.

Can I change size of chunks for HTTP/3 ?

Как насчет Docker image?

Хотел попробовать ваш nginx после доклада и понял что установка не будет такой легкой. Не хотите собирать образы в Docker?