Nginx Nginx - ngx_brotli

which version of CentOS 6 or 7 ? which web browser and browser version ? tried firefox 45+ and google canary ?

are using centmin mod 123.09beta01 with persistent config set for

Code (Text):

NGINX_LIBBROTLI=y

?

ensure /usr/local/nginx/conf/nginx.conf has include file

Code (Text):

include /usr/local/nginx/conf/brotli_inc.conf;

with content for brotli options

Code (Text):

brotli on;
brotli_static on;
brotli_min_length 1000;
brotli_buffers 32 8k;
brotli_comp_level 5;
brotli_types text/plain text/css text/xml application/javascript application/x-javascript application/xml application/xml+rss application/ecmascript application/json image/svg+xml;

what's output in ssh for https version of yourdomain.com/path/toteststaticfile which is less than brotli_min_length

Code (Text):

curl -sI /dev/null -H"Accept-Encoding: gzip,br" https://yourdomain.com/path/toteststaticfile | egrep 'Content-Encoding|^Content-Type|Content-Length'

i.e. for https version of centminmod.com

Code (Text):

curl -sI /dev/null -H"Accept-Encoding: gzip,br" https://centminmod.com | egrep 'Content-Encoding|^Content-Type|Content-Length'
Content-Type: text/html; charset=utf-8
Content-Encoding: br

also output for

Code (Text):

nginx -V

for me brotli_min_length works fine 123.09beta01 + nginx 1.11.1 + ngx_pagespeed 1.11.33.2 beta

 

hardware failure ? vps problems ?

 

not able to reproduce your problem here

did you custom disable some nginx modules via persistent /etc/centminmod/custom_config.inc ? tried using default Centmin Mod set of nginx modules instead ?

works fine on this forum for brotli content-encoding = br

Code (Text):

curl -vso /dev/null -H"Accept-Encoding: gzip, br" https://community.centminmod.com/
*   Trying 192.124.249.60...
* Connected to community.centminmod.com (192.124.249.60) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: none
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
} [5 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.2 (IN), TLS handshake, Server hello (2):
{ [107 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [4334 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [333 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [70 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS change cipher, Client hello (1):
{ [1 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server accepted to use h2
* Server certificate:
*  subject: OU=Domain Control Validated; OU=GGSSL Wildcard SSL; CN=*.centminmod.com
*  start date: Aug 14 00:00:00 2014 GMT
*  expire date: Aug 13 23:59:59 2017 GMT
*  subjectAltName: host "community.centminmod.com" matched cert's "*.centminmod.com"
*  issuer: C=GB; ST=Greater Manchester; L=Salford; O=COMODO CA Limited; CN=COMODO RSA Domain Validation Secure Server CA
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* TCP_NODELAY set
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* Using Stream ID: 1 (easy handle 0x1b19d30)
} [5 bytes data]
> GET / HTTP/1.1
> Host: community.centminmod.com
> User-Agent: curl/7.50.1-DEV
> Accept: */*
> Accept-Encoding: gzip, br
>
{ [5 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS updated)!
} [5 bytes data]
< HTTP/2 200
< server: nginx
< date: Sun, 14 Aug 2016 14:52:36 GMT
< content-type: text/html; charset=UTF-8
< vary: Accept-Encoding
< set-cookie: xf_session=ec7a4be4bda98e02b6ff8fc973251b5e; path=/; secure; httponly
< x-frame-options: SAMEORIGIN
< public-key-pins: pin-sha256="oGbPgwR7vxLMpWdDIy+gc/Z0YD0EYCblHDCCgNQg9W8="; pin-sha256="KrRz+515ViRd/gdl7yGWCW1R4CFAAeMIBHp0JTNk8qc="; max-age=900; report-uri="https://cmcommunity.report-uri.io/r/default/hpkp/reportOnly"
< strict-transport-security: max-age=31536000; includeSubdomains
< x-page-speed: CentminMod PageSpeed
< cache-control: max-age=0, no-cache
< content-encoding: br
< x-sucuri-id: 11010
<
{ [7289 bytes data]
* Connection #0 to host community.centminmod.com left intact

 

So you have some servers/web apps working with brotli and some not ? or all not working ?

 

yup no use

 

let's test it then, enable brotli nginx module via persistent config file /etc/centminmod/custom_config.inc

Code (Text):

NGXDYNAMIC_BROTLI=y
NGINX_LIBBROTLI=y

and recompile nginx via centmin.sh menu option 4

compiled ok

dynamically compiled nginx modules at /usr/local/nginx/modules

Code (Text):

-rwxr-xr-x  1 root root 124K Aug 21 04:45 ngx_http_brotli_filter_module.so
-rwxr-xr-x  1 root root 114K Aug 21 04:45 ngx_http_brotli_static_module.so
-rwxr-xr-x  1 root root 141K Aug 21 04:45 ngx_http_fancyindex_module.so
-rwxr-xr-x  1 root root 141K Aug 21 02:01 ngx_http_fancyindex_module.so.old
-rwxr-xr-x  1 root root 140K Aug 21 04:45 ngx_http_image_filter_module.so
-rwxr-xr-x  1 root root 140K Aug 21 02:01 ngx_http_image_filter_module.so.old
-rwxr-xr-x  1 root root 927K Aug 21 04:45 ngx_stream_module.so
-rwxr-xr-x  1 root root 927K Aug 21 02:01 ngx_stream_module.so.old

Code (Text):

cat /usr/local/nginx/conf/dynamic-modules.conf
load_module "modules/ngx_http_brotli_filter_module.so";
load_module "modules/ngx_http_brotli_static_module.so";
load_module "modules/ngx_http_image_filter_module.so";
load_module "modules/ngx_http_fancyindex_module.so";
load_module "modules/ngx_stream_module.so";

Test localhost via curl (replace localhost with your site domain name if you want)

before ngx_brotli module enabling = gzip content-encoding

Code (Text):

curl -sI /dev/null -H"Accept-Encoding: gzip,br" localhost | egrep 'Content-Encoding|^Content-Type|Content-Length'                    
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip

after ngx_brotli module enabling = br content-encoding

Code (Text):

curl -sI /dev/null -H"Accept-Encoding: gzip,br" localhost | egrep 'Content-Encoding|^Content-Type|Content-Length'                     
Content-Type: text/html; charset=utf-8
Content-Encoding: br

 

so problem was with xenforo and brotli BR content-encoding only works with static files like .css .js · Issue #30 · google/ngx_brotli · GitHub ? strange as i don't have such problems with xenforo here and brotli

 

strange indeed - at least we know why now

 

@RoldanLT on the affected server what's output for

Code (Text):

php -i | egrep '^output|zlib.output'

i.e.

Code (Text):

php -i | egrep '^output|zlib.output'
output_buffering => 0 => 0
output_encoding => no value => no value
output_handler => no value => no value
zlib.output_compression => Off => Off
zlib.output_compression_level => -1 => -1
zlib.output_handler => no value => no value