Mercurial > hg > nginx-site

comparison xml/en/docs/http/ngx_http_fastcgi_module.xml @ 2090:a9a9a052b5bd

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Documented the "CAP_NET_RAW" capability for transparent proxying.
author Yaroslav Zhuravlev <yar@nginx.com>
date Tue, 26 Dec 2017 15:28:53 +0300
parents fb5eef3637a4
children 5cacd6fffade
comparison
equal deleted inserted replaced
2089:70c1e798a5c2 2090:a9a9a052b5bd
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_http_fastcgi_module" 10 <module name="Module ngx_http_fastcgi_module"
11 link="/en/docs/http/ngx_http_fastcgi_module.html" 11 link="/en/docs/http/ngx_http_fastcgi_module.html"
12 lang="en" 12 lang="en"
13 rev="48"> 13 rev="49">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_http_fastcgi_module</literal> module allows passing 18 The <literal>ngx_http_fastcgi_module</literal> module allows passing
72 for example, from a real IP address of a client: 72 for example, from a real IP address of a client:
73 <example> 73 <example>
74 fastcgi_bind $remote_addr transparent; 74 fastcgi_bind $remote_addr transparent;
75 </example> 75 </example>
76 In order for this parameter to work, 76 In order for this parameter to work,
77 it is necessary to run nginx worker processes with the 77 it is usually necessary to run nginx worker processes with the
78 <link doc="../ngx_core_module.xml" id="user">superuser</link> privileges 78 <link doc="../ngx_core_module.xml" id="user">superuser</link> privileges.
79 and configure kernel routing table 79 On Linux it is not required (1.13.8) as if
80 the <literal>transparent</literal> parameter is specified, worker processes
81 inherit the <literal>CAP_NET_RAW</literal> capability from the master process.
82 It is also necessary to configure kernel routing table
80 to intercept network traffic from the FastCGI server. 83 to intercept network traffic from the FastCGI server.
81 </para> 84 </para>
82 85
83 </directive> 86 </directive>
84 87