From: Eric Wong <e@80x24.org>
Date: Sat, 26 Nov 2022 09:55:16 +0000 (+0000)
Subject: examples/nginx_proxy: recommend `proxy_buffering off'
X-Git-Url: http://www.git.stargrave.org/?p=public-inbox.git;a=commitdiff_plain;h=86cb9010c49523b1968c29ef592bc1afacc77894

examples/nginx_proxy: recommend `proxy_buffering off'

public-inbox-httpd has always been designed to handle slow
clients efficiently via non-blocking sockets and epoll|kqueue.

Thus the proxy buffering capabilities of nginx were a needless
waste of memory and filesystem traffic and increases response
latency.

nginx does provide an HTTPS-capable reverse-proxy to talk to
varnish, however, any other HTTPS-capable reverse proxy works,
too.
---

diff --git a/examples/nginx_proxy b/examples/nginx_proxy
index d8d1e6df..754a4931 100644
--- a/examples/nginx_proxy
+++ b/examples/nginx_proxy
@@ -1,8 +1,14 @@
 # Example NGINX configuration to proxy-pass requests
-# to public-inbox-httpd or to a standalone PSGI/Plack server.
+# to varnish, public-inbox-(httpd|netd) or any PSGI/Plack server.
 # The daemon is assumed to be running locally on port 8001.
 # Adjust ssl certificate paths if you use any, or remove
 # the ssl configuration directives if you don't.
+#
+# Note: public-inbox-httpd and -netd both support HTTPS, but they
+# don't support caching which Varnish provides.  The recommended
+# setup is currently:
+#
+#   (nginx|any-HTTPS-proxy) <-> varnish <-> public-inbox-(httpd|netd)
 server {
 	server_name _;
 	listen 80;
@@ -14,6 +20,7 @@ server {
 		proxy_set_header    HOST $host;
 		proxy_set_header    X-Real-IP $remote_addr;
 		proxy_set_header    X-Forwarded-Proto $scheme;
+		proxy_buffering off; # lowers response latency
 		proxy_pass          http://127.0.0.1:8001$request_uri;
 	}