<html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><style>body { line-height: 1.5; }blockquote { margin-top: 0px; margin-bottom: 0px; margin-left: 0.5em; }div.foxdiv20160311113012537374 { }body { font-size: 10.5pt; font-family: 'Microsoft YaHei UI'; color: rgb(0, 0, 0); line-height: 1.5; }</style></head><body>
<div><span></span>nginx1.94 ssl use TLS1.0.</div><div><span style="font-family: "" microsoft="" yahei="" ui'";="" font-size:="" 14px;="" color:="" rgb(0,="" 0,="" 0);="" background-color:="" rgba(0,="" font-weight:="" normal;="" font-style:="" normal;text-decoration:="" none;'="">server {<br> listen 443;<br> server_name a.com;<br><br> ssi on;<br> ssi_silent_errors on;<br> ssi_types text/shtml;<br><br> ssl on;<br></span></div>
<div><span style="font-family: "" microsoft="" yahei="" ui'";="" font-size:="" 14px;="" color:="" rgb(0,="" 0,="" 0);="" background-color:="" rgba(0,="" font-weight:="" normal;="" font-style:="" normal;text-decoration:="" none;'=""><span style="font-family: ''; font-size: 10.5pt; line-height: 1.5; background-color: window;"> </span></span><span style="font-family: ''; font-size: 10.5pt; line-height: 1.5; background-color: window;"> ssl_certificate </span><span microsoft="" yahei="" ui'";="" font-size:="" 14px;="" color:="" rgb(0,="" 0,="" 0);="" background-color:="" rgba(0,="" font-weight:="" normal;="" font-style:="" normal;text-decoration:="" none;'="" style="font-family: ''; font-size: 10.5pt; line-height: 1.5; background-color: window;"> </span><span style="font-family: ''; font-size: 10.5pt; line-height: 1.5; background-color: window;"> </span></div><div><span style="font-family: ''; font-size: 10.5pt; line-height: 1.5; background-color: window;">ssl_certificate_key</span></div><div><span style="font-family: "" microsoft="" yahei="" ui'";="" font-size:="" 14px;="" color:="" rgb(0,="" 0,="" 0);="" background-color:="" rgb(255,="" 255,="" 255);="" font-weight:="" normal;="" font-style:="" normal;text-decoration:="" none;'="">ssl_protocols TLSv1 TLSv1.1 TLSv1.2;<br> ssl_ciphers HIGH:!aNULL:!MD5;<br> ssl_prefer_server_ciphers on;<br></span></div><div><span style="font-family: "" microsoft="" yahei="" ui'";="" font-size:="" 14px;="" color:="" rgb(0,="" 0,="" 0);="" background-color:="" rgb(255,="" 255,="" 255);="" font-weight:="" normal;="" font-style:="" normal;text-decoration:="" none;'="">....}</span></div><div><span style="font-family: "" microsoft="" yahei="" ui'";="" font-size:="" 14px;="" color:="" rgb(0,="" 0,="" 0);="" background-color:="" rgb(255,="" 255,="" 255);="" font-weight:="" normal;="" font-style:="" normal;text-decoration:="" none;'="">but nginx1.6.2 ssl use TLS1.2</span></div><div><span style="font-family: ''; font-size: 10.5pt; line-height: 1.5; background-color: window;"><br></span></div><hr style="width: 210px; height: 1px;" color="#b5c4df" size="1" align="left">
<div><span><div style="MARGIN: 10px; FONT-FAMILY: verdana; FONT-SIZE: 10pt"><div>18620708940@163.com</div></div></span></div>
<blockquote style="margin-top: 0px; margin-bottom: 0px; margin-left: 0.5em;"><div> </div><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm"><div style="PADDING-RIGHT: 8px; PADDING-LEFT: 8px; FONT-SIZE: 12px;FONT-FAMILY:tahoma;COLOR:#000000; BACKGROUND: #efefef; PADDING-BOTTOM: 8px; PADDING-TOP: 8px"><div><b>From:</b> <a href="mailto:gfrankliu@gmail.com">Frank Liu</a></div><div><b>Date:</b> 2016-03-11 06:55</div><div><b>To:</b> <a href="mailto:nginx@nginx.org">nginx</a></div><div><b>Subject:</b> dns name for upstream</div></div></div><div><div class="FoxDiv20160311113012537374"><div dir="ltr">Hi,<div><br></div><div>I saw this example at <a href="http://serverfault.com">serverfault.com</a>:</div><div><br></div><div><div>server {</div><div> ...</div><div> resolver 127.0.0.1;</div><div> set $backend "<a href="http://dynamic.example.com:80">http://dynamic.example.com:80</a>";</div><div> proxy_pass $backend;</div><div> ...</div><div>}</div></div><div><br></div><div>I have a few questions:</div><div>1) If the resolver DNS becomes unavailable (say connection timeout), what will nginx do? Will it keep using the old IPs or will it flush the DNS since TTL expires? If later, the proxy will stop working.</div><div>2) In the upstream block, I could define "keepalive #", but with this example, how can I do that?</div><div>3) This page <a href="http://nginx.org/en/docs/stream/ngx_stream_core_module.html#resolver">http://nginx.org/en/docs/stream/ngx_stream_core_module.html#resolver</a> says "This directive is available as part of our commercial subscription.". Is that still up to date? Can "resolver", "resolver_timeout" be used in free edition now?</div><div><br></div><div>Thanks!</div><div>Frank</div><div><br></div><div><br></div></div>
</div></div></blockquote>
</body></html>