Configure NGINX

By default, NGINX is used as a proxy. The following configuration options are available for the NGINX extension.

Note

The ServerNamesHashBucketSize option, which allowed the user to manually set the bucket size for the server names hash table, was removed in MKE 3.4.2 because MKE now adaptively calculates the setting and overrides any manual input.

Option	Type	Description	Defaults
User	string	User name for the proxy	nginx
PidPath	string	Path to the PID file for the proxy service	/var/run/proxy.pid
MaxConnections	int	Maximum number of connections for the proxy service	1024
ConnectTimeout	int	Timeout in seconds for clients to connect	600
SendTimeout	int	Timeout in seconds for the service to read a response from the proxied upstream	600
ReadTimeout	int	Timeout in seconds for the service to read a response from the proxied upstream	600
SSLOpts	int	Options to be passed when configuring SSL	N/A
SSLDefaultDHParam	int	Size of DH parameters	1024
SSLDefaultDHParamPath	string	Path to DH parameters file	N/A
SSLVerify	string	SSL client verification	required
WorkerProcesses	string	Number of worker processes for the proxy service	1
RLimitNoFile	int	Maximum number of open files for the proxy service	65535
SSLCiphers	string	SSL ciphers to use for the proxy service	HIGH:!aNULL:!MD5
SSLProtocols	string	Enable the specified TLS protocols	TLSv1.2
HideInfoHeaders	bool	Hide proxy-related response headers	N/A
KeepaliveTimeout	string	Connection keep-alive timeout	75s
ClientMaxBodySize	string	Maximum allowed client request body size	1 m
ClientBodyBufferSize	string	Buffer size for reading client request body	8k
ClientHeaderBufferSize	string	Maximum number and size of buffers used for reading large client request header	1k
LargeClientHeaderBuffers	string	Maximum number and size of buffers used for reading large client request header	4 8k
ClientBodyTimeout	string	Timeout for reading client request body	60s
UnderscoresInHeaders	bool	Enables or disables the use of underscores in client request header fields	false
UpstreamZoneSize	int	Size of the shared memory zone (in KB)	64
GlobalOptions	[]string	List of options that are included in the global configuration	N/A
HTTPOptions	[]string	List of options that are included in the HTTP configuration	N/A
TCPOptions	[]string	List of options that are included in the stream (TCP) configuration	N/A
AccessLogPath	string	Path to use for access logs	/dev/stdout
ErrorLogPath	string	Path to use for error logs	/dev/stdout
MainLogFormat	string	Format to use for main logger	N/A
TraceLogFormat	string	Format to use for trace logger	N/A

See also

NGINX