From: Tom Clegg <tclegg@veritasgenetics.com>
Date: Wed, 21 Nov 2018 19:14:04 +0000 (-0500)
Subject: 14345: Disable Nginx proxy request buffering for keep-web requests.
X-Git-Tag: 1.3.0~27^2~1
X-Git-Url: https://git.arvados.org/arvados.git/commitdiff_plain/f11d620f06a284e47b12d1413bf9805ae5b488e1?ds=sidebyside

14345: Disable Nginx proxy request buffering for keep-web requests.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tclegg@veritasgenetics.com>
---

diff --git a/doc/install/install-keep-web.html.textile.liquid b/doc/install/install-keep-web.html.textile.liquid
index 4def77e063..fdbce337c6 100644
--- a/doc/install/install-keep-web.html.textile.liquid
+++ b/doc/install/install-keep-web.html.textile.liquid
@@ -112,6 +112,10 @@ server {
     proxy_pass          http://keep-web;
     proxy_set_header    Host            $host;
     proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+
+    client_max_body_size 0;
+    proxy_http_version 1.1;
+    proxy_request_buffering off;
   }
 }
 </pre></notextile>
diff --git a/sdk/python/tests/nginx.conf b/sdk/python/tests/nginx.conf
index c21ef95f2a..130d8c964d 100644
--- a/sdk/python/tests/nginx.conf
+++ b/sdk/python/tests/nginx.conf
@@ -42,6 +42,9 @@ http {
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto https;
       proxy_redirect off;
+
+      proxy_http_version 1.1;
+      proxy_request_buffering off;
     }
   }
   upstream keep-web {
@@ -58,6 +61,10 @@ http {
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto https;
       proxy_redirect off;
+
+      client_max_body_size 0;
+      proxy_http_version 1.1;
+      proxy_request_buffering off;
     }
   }
   server {
@@ -70,6 +77,10 @@ http {
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto https;
 
+      client_max_body_size 0;
+      proxy_http_version 1.1;
+      proxy_request_buffering off;
+
       # Unlike other proxy sections, here we need to override the
       # requested Host header and use proxy_redirect because of the
       # way the test suite orchestrates services. Keep-web's "download