{"action":"created","issue":{"url":"https://api.github.com/repos/pagespeed/ngx_pagespeed/issues/1442","repository_url":"https://api.github.com/repos/pagespeed/ngx_pagespeed","labels_url":"https://api.github.com/repos/pagespeed/ngx_pagespeed/issues/1442/labels{/name}","comments_url":"https://api.github.com/repos/pagespeed/ngx_pagespeed/issues/1442/comments","events_url":"https://api.github.com/repos/pagespeed/ngx_pagespeed/issues/1442/events","html_url":"https://github.com/pagespeed/ngx_pagespeed/issues/1442","id":245317645,"number":1442,"title":"<!--deadline_exceeded for filter ImageRewrite--> <!--deadline_exceeded for filter CacheExtender-->","user":{"login":"sankarkodali","id":29781025,"avatar_url":"https://avatars2.githubusercontent.com/u/29781025?v=4","gravatar_id":"","url":"https://api.github.com/users/sankarkodali","html_url":"https://github.com/sankarkodali","followers_url":"https://api.github.com/users/sankarkodali/followers","following_url":"https://api.github.com/users/sankarkodali/following{/other_user}","gists_url":"https://api.github.com/users/sankarkodali/gists{/gist_id}","starred_url":"https://api.github.com/users/sankarkodali/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sankarkodali/subscriptions","organizations_url":"https://api.github.com/users/sankarkodali/orgs","repos_url":"https://api.github.com/users/sankarkodali/repos","events_url":"https://api.github.com/users/sankarkodali/events{/privacy}","received_events_url":"https://api.github.com/users/sankarkodali/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-07-25T08:04:04Z","updated_at":"2017-07-27T07:22:55Z","closed_at":null,"body":"Dear Sir,\r\n\r\nIn my website https://www.pulpandpaper-technology.com modpagespeed for images is not working properly since 24 hours. Few times all the images are loading and few times images are not loading. Please check the below error report\r\n\r\n<!--deadline_exceeded for filter ImageRewrite-->\r\n<!--deadline_exceeded for filter CacheExtender-->\r\n<!--Resource headers are preventing rewriting of https://industry.pulpandpaper-technology.com/images/slide-02-bg.jpg-->\r\n\r\nPlease check below full configuration\r\n\r\n#:proxy:Nginx proxy server in front of apache:1.1:\r\nserver {\r\n    listen    192.168.12.67:443 ssl http2 ;\r\n    server_name  pulpandpaper-technology.com www.pulpandpaper-technology.com 192.168.12.67 www.192.168.12.67;\r\n    # for  working on proxy mode set nginx access logs off\r\n    access_log off;\r\n\r\n\r\n    ssl on;\r\n    ssl_certificate /usr/local/nginx/conf/ssl.cert.d/pulpandpaper-technology.com_cert;\r\n    ssl_certificate_key /usr/local/nginx/conf/ssl.key.d/pulpandpaper-technology.com_key;\r\n    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\r\n    ssl_prefer_server_ciphers on;\r\n    ssl_ciphers \"EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\";\r\n    ssl_session_cache shared:SSL:10m;\r\n    ssl_session_timeout  5m;\r\n\r\n    #.............. Cpnginx OCSP stapling protection for security start ....................\r\n    ssl_stapling on;\r\n    ssl_stapling_verify on;\r\n    ssl_trusted_certificate /usr/local/nginx/conf/ssl.ca.d/pulpandpaper-technology.com_ca-bundle;\r\n    resolver 127.0.0.1 8.8.8.8 4.2.2.1 8.8.4.4 4.2.2.2  valid=300s;\r\n    resolver_timeout 5s;\r\n    #.............. Cpnginx OCSP stapling protection for security end....................\r\n\r\n    location = /favicon.ico {\r\n        log_not_found off;\r\n    }\r\n\r\n\r\nlocation ~* \\.(?:ico|css|js|gif|jpe?g|png|swf)$ {\r\n    expires 30d;\r\n    add_header Pragma public;\r\n    add_header Cache-Control \"public\";\r\n}\r\n\r\n    access_log /usr/local/apache/domlogs/pulpandpaper-technology.com-bytes_log bytes_log buffer=32k flush=5m;\r\n    access_log /usr/local/apache/domlogs/pulpandpaper-technology.com-ssl_log combined buffer=32k flush=5m;\r\n\r\n\r\n\r\n    keepalive_requests 100;\r\n    keepalive_timeout 60s;\r\n    # Symlink attack\r\n    disable_symlinks on from=$document_root;\r\n    autoindex on;\r\n    # Disable direct access to .ht files and folders\r\n    location ~ /\\.ht {\r\n          deny all;\r\n    }\r\n    # Access all cpanel services\r\n    location ~* ^/(cpanel|webmail|whm|bandwidth|img-sys|java-sys|mailman/archives|pipermail|sys_cpanel|cgi-sys|mailman) {\r\n        proxy_pass   http://192.168.12.67:9080;\r\n        proxy_set_header   Host   $host;\r\n        proxy_set_header   X-Real-IP  $remote_addr;\r\n        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;\r\n    }\r\n    # Enabled MP4 streaming\r\n    location ~ .mp4$ {\r\n        mp4;\r\n        mp4_buffer_size 4M;\r\n        mp4_max_buffer_size 10M;\r\n    }\r\n\r\n\r\n\r\n\r\n    # Blocking access from bad bots\r\n    if ($badbot){\r\n        return 447;\r\n    }\r\n\r\n    # X-XSS protection\r\n    add_header X-XSS-Protection \"1; mode=block\";\r\n\r\n    # X-FRAME attach protection\r\n    add_header X-Frame-Options \"SAMEORIGIN\";\r\n\r\n\r\n    # Protect from bad referer\r\n    if ($badreferer){\r\n        return 449;\r\n    }\r\n\r\n    # Protect sql injections\r\n    set $block_sql_injections 0;\r\n    if ($query_string ~ \"union.*select.*\\(\") {\r\n        set $block_sql_injections 1;\r\n    }\r\n    if ($query_string ~ \"union.*all.*select.*\") {\r\n        set $block_sql_injections 1;\r\n    }\r\n    if ($query_string ~ \"concat.*\\(\") {\r\n        set $block_sql_injections 1;\r\n    }\r\n    if ($block_sql_injections = 1) {\r\n        return 403;\r\n    }\r\n\r\n\r\n    # Protect file injections\r\n    set $block_file_injections 0;\r\n    if ($query_string ~ \"[a-zA-Z0-9_]=http://\") {\r\n        set $block_file_injections 1;\r\n    }\r\n    if ($query_string ~ \"[a-zA-Z0-9_]=(\\.\\.//?)+\") {\r\n        set $block_file_injections 1;\r\n    }\r\n    if ($query_string ~ \"[a-zA-Z0-9_]=/([a-z0-9_.]//?)+\") {\r\n        set $block_file_injections 1;\r\n    }\r\n    if ($block_file_injections = 1) {\r\n        return 403;\r\n    }\r\n\r\n    # common exploit protection\r\n     set $block_common_exploits 0;\r\n    if ($query_string ~ \"(<|%3C).*script.*(>|%3E)\") {\r\n        set $block_common_exploits 1;\r\n    }\r\n    if ($query_string ~ \"GLOBALS(=|\\[|\\%[0-9A-Z]{0,2})\") {\r\n        set $block_common_exploits 1;\r\n    }\r\n    if ($query_string ~ \"_REQUEST(=|\\[|\\%[0-9A-Z]{0,2})\") {\r\n        set $block_common_exploits 1;\r\n    }\r\n    if ($query_string ~ \"proc/self/environ\") {\r\n        set $block_common_exploits 1;\r\n    }\r\n    if ($query_string ~ \"mosConfig_[a-zA-Z_]{1,21}(=|\\%3D)\") {\r\n        set $block_common_exploits 1;\r\n    }\r\n    if ($query_string ~ \"base64_(en|de)code\\(.*\\)\") {\r\n        set $block_common_exploits 1;\r\n    }\r\n    if ($block_common_exploits = 1) {\r\n        return 403;\r\n    }\r\n\r\n\r\n    # Enable google Page speed\r\n    pagespeed on;\r\n    pagespeed RespectVary on;\r\n    # Ensure requests for pagespeed optimized resources go to the pagespeed handler  and no extraneous headers get set.\r\n    location ~ \"\\.pagespeed\\.([a-z]\\.)?[a-z]{2}\\.[^.]{10}\\.[^.]+\" {\r\n        add_header \"\" \"\";\r\n    }\r\n    location ~ \"^/pagespeed_static/\" { }\r\n    location ~ \"^/ngx_pagespeed_beacon$\" { }\r\n    location /ngx_pagespeed_statistics { allow 127.0.0.1; deny all; }\r\n    location /ngx_pagespeed_global_statistics { allow 127.0.0.1; deny all; }\r\n    location /ngx_pagespeed_message { allow 127.0.0.1; deny all; }\r\n    location /pagespeed_console { allow 127.0.0.1; deny all; }\r\n    location ~ ^/pagespeed_admin { allow 127.0.0.1; deny all; }\r\n    location ~ ^/pagespeed_global_admin { allow 127.0.0.1; deny all; }\r\n    # filters\r\n    pagespeed RewriteLevel PassThrough;\r\n    pagespeed PreserveUrlRelativity on;\r\n    pagespeed EnableFilters rewrite_css,rewrite_javascript,combine_css,inline_css,rewrite_images;\r\n    pagespeed EnableFilters fallback_rewrite_css_urls;\r\n\r\n    # Map domain works as a  cdn\r\n    #pagespeed Domain https://cpnginxcdn.pulpandpaper-technology.com;\r\n\r\n    #pagespeed EnableFilters extend_cache;\r\n    pagespeed EnableFilters inline_images;\r\n    pagespeed EnableFilters resize_rendered_image_dimensions;\r\n    pagespeed EnableFilters insert_image_dimensions;\r\n    pagespeed EnableFilters responsive_images,resize_images;\r\n    pagespeed EnableFilters rewrite_images;\r\n    pagespeed EnableFilters resize_mobile_images;\r\n    pagespeed EnableFilters recompress_images;\r\n    pagespeed EnableFilters convert_jpeg_to_progressive;\r\n    pagespeed EnableFilters collapse_whitespace,remove_comments;\r\n    pagespeed Domain *.pulpandpaper-technology.com;\r\n    pagespeed Domain https://industry.pulpandpaper-technology.com;\r\n    pagespeed LoadFromFile https://industry.pulpandpaper-technology.com/\r\n                        /home/pulpandpapertech/public_html/industry;\r\n    pagespeed MapOriginDomain http://localhost https://www.pulpandpaper-technology.com;\r\n    pagespeed SslCertDirectory /var/cpanel/ssl/installed/certs;\r\n    pagespeed SslCertFile /var/cpanel/ssl/installed/certs/www_ochre_media_com_d29e3_2409f_1516386605_949fe6da63214617ddf260bab24f07ad.crt;\r\n\r\n    # Map Original Domains\r\n    pagespeed MapOriginDomain origin_to_fetch_from origin_specified_in_html [host_header];\r\n\r\n    # Respect froned Proxy\r\n    pagespeed RespectXForwardedProto on;\r\n\r\n    referer_hash_bucket_size 512;\r\n    error_page  404 = @apache;\r\n    log_not_found  off;\r\n    location @apache {\r\n        internal;\r\n        client_max_body_size    2000m;\r\n        client_body_buffer_size 512k;\r\n        proxy_buffering on;\r\n        proxy_send_timeout 600s;\r\n        proxy_read_timeout 600s;\r\n        proxy_buffer_size 64k;\r\n        proxy_buffers 32 256k;\r\n        proxy_busy_buffers_size 256k;\r\n        proxy_temp_file_write_size 256k;\r\n        proxy_connect_timeout 900s;\r\n        proxy_http_version 1.1;\r\n        proxy_pass   https://192.168.12.67:9443;\r\n        proxy_set_header   Host   $host;\r\n        proxy_set_header   X-Real-IP  $remote_addr;\r\n        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;\r\n        proxy_set_header   X-Forwarded-Proto $scheme;\r\n        proxy_redirect     off;\r\n\r\n\r\n    }\r\n\r\n    location / {\r\n        # include /usr/local/nginx/conf/vhost.ssl.d/pulpandpaper-technology.com.rewrite;\r\n        log_not_found  off;\r\n        client_max_body_size    2000m;\r\n        client_body_buffer_size 512k;\r\n        proxy_buffering on;\r\n        proxy_send_timeout 600s;\r\n        proxy_read_timeout 600s;\r\n        proxy_buffer_size 64k;\r\n        proxy_buffers 32 256k;\r\n        proxy_busy_buffers_size 256k;\r\n        proxy_temp_file_write_size 256k;\r\n        proxy_connect_timeout 900s;\r\n        proxy_http_version 1.1;\r\n        proxy_pass   https://192.168.12.67:9443;\r\n        proxy_set_header   Host   $host;\r\n        proxy_set_header   X-Real-IP  $remote_addr;\r\n        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;\r\n        proxy_set_header   X-Forwarded-Proto $scheme;\r\n        proxy_redirect     off;\r\n\r\n    }\r\n    # include /usr/local/nginx/conf/vhost.ssl.d/pulpandpaper-technology.com.include;\r\n\r\n}"},"comment":{"url":"https://api.github.com/repos/pagespeed/ngx_pagespeed/issues/comments/318281074","html_url":"https://github.com/pagespeed/ngx_pagespeed/issues/1442#issuecomment-318281074","issue_url":"https://api.github.com/repos/pagespeed/ngx_pagespeed/issues/1442","id":318281074,"user":{"login":"oschaaf","id":2239556,"avatar_url":"https://avatars1.githubusercontent.com/u/2239556?v=4","gravatar_id":"","url":"https://api.github.com/users/oschaaf","html_url":"https://github.com/oschaaf","followers_url":"https://api.github.com/users/oschaaf/followers","following_url":"https://api.github.com/users/oschaaf/following{/other_user}","gists_url":"https://api.github.com/users/oschaaf/gists{/gist_id}","starred_url":"https://api.github.com/users/oschaaf/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/oschaaf/subscriptions","organizations_url":"https://api.github.com/users/oschaaf/orgs","repos_url":"https://api.github.com/users/oschaaf/repos","events_url":"https://api.github.com/users/oschaaf/events{/privacy}","received_events_url":"https://api.github.com/users/oschaaf/received_events","type":"User","site_admin":false},"created_at":"2017-07-27T07:22:55Z","updated_at":"2017-07-27T07:22:55Z","body":"My guess is that the module has trouble fetching https inputs. Do you see anything in the logs for the troublesome images?\r\nDo you see the module fetching them in the access logs? (The user-agent mentions 'mod_pagespeed').\r\nIf you do not see them in the access logs, there may be an error during the ssl handshake.\r\nDid you configure `SslCertDirectory` and `SslCertFile`?\r\nTaking a look at https://modpagespeed.com/doc/https_support may help.\r\n"}}
{"actor":{"display_login":"oschaaf"}}