Questions[500-error](server)

[I posted this on the Nginx forums, but had no responses a week later, so trying here]

I am a Linux and Nginx novice, but have learnt enough to get it installed and running and working as a simple reverse proxy for two internal webservers. This has been running fine for months, but I recently started getting 500 errors.

Here is the recent output of /var/log/nginx/error.log (I have replaced our company name with "companyname.com" and replaced our public WAN IP address with

2020/02/10 15:17:49 [alert] 1069#1069: *1011 socket() failed (24: Too many open files) while connecting to upstream, client: 10.10.10.1, server: web1.companyname.com, request: "GET / HTTP/1.0", upstream: "https://<WANIP>:443/", host: "web1.companyname.com"

2020/02/10 15:21:41 [alert] 1069#1069: *2022 socket() failed (24: Too many open files) while connecting to upstream, client: 10.10.10.1, server: web2.companyname.com, request: "GET / HTTP/1.0", upstream: "https://<WANIP>:443/", host: "web2.companyname.com"

2020/02/10 15:33:28 [alert] 1084#1084: *19987 socket() failed (24: Too many open files) while connecting to upstream, client: 10.10.10.1, server: web2.companyname.com, request: "GET / HTTP/1.0", upstream: "https://<WANIP>:443/", host: "web2.companyname.com"

2020/02/10 15:34:16 [alert] 1084#1084: *39974 socket() failed (24: Too many open files) while connecting to upstream, client: 10.10.10.1, server: web1.companyname.com, request: "GET / HTTP/1.0", upstream: "https://<WANIP>:443/", host: "web1.companyname.com"

2020/02/10 15:50:30 [error] 1086#1086: *1 client intended to send too large body: 4294967295 bytes, client: 176.58.124.134, server: london.companyname.com, request: "GET /msdn.cpp HTTP/1.1", host: "<WANIP>"

2020/02/10 16:32:56 [alert] 1086#1086: *19989 socket() failed (24: Too many open files) while connecting to upstream, client: 10.10.10.1, server: web1.companyname.com, request: "GET / HTTP/1.0", upstream: "https://<WANIP>:443/", host: "web1.companyname.com"

I have added the following to the end of /etc/security/limits.conf

nginx soft nofile 10000
nginx hard nofile 30000

I have added the following to /etc/sysctl.conf

fs.file-max=70000

...And rebooted. However, I'm getting the same problem immediately after a reboot.

Interestingly the IP address that appears in the log "176.58.124.134" I don't recognise and a quick google search suggests this is an abusive IP address. I can block at the firewall, but I'm not sure that's the problem.

Any tips, suggestions are grealy appreciated. Thanks.

I'm on a Mac trying to locally host a copy of an old ASP-based site for testing purposes. Not (yet) using mod_mono for Apache, just the basic standalone XSP server. It was enough of an ordeal just getting to the point where I can at least display a ASP.NET error page from localhost.

If I point it to a .htm or .html file, it serves it up without complaint. But every ASP file I try gives an "Access Forbidden" error.

I'm guessing this means I need a config file for XSP, something like a .htaccess or web.config file, and need to whitelist those extensions as things it will serve. ( Which is pretty dumb, because why would anyone go to the trouble of installing Mono and XSP just to host static HTML files? )

xsp4 --help was no help, nor was man xsp, so here I am.

Application Exception
System.Web.HttpException
Access to file '/anysite/whateverpage.asp' is forbidden.

Description: HTTP 500.Error processing request.

Details: Error processing request.
Exception stack trace:
 at System.Web.DefaultHttpHandler.BeginProcessRequest (System.Web.HttpContext context, System.AsyncCallback callback, System.Object state) [0x0005e] in <79d7580b4e46487286a5f8386a98413d>:0 
 at System.Web.HttpApplication+<Pipeline>c__Iterator1.MoveNext () [0x00d9c] in <79d7580b4e46487286a5f8386a98413d>:0 
 at System.Web.HttpApplication.Tick () [0x00000] in <79d7580b4e46487286a5f8386a98413d>:0 
 Version Information: 4.6.2 (Stable 4.6.2.7/08fd525 Tue Nov 22 22:06:40 GMT 2016); ASP.NET Version: 4.0.30319.42000

Access to Wikipedia can be disturbed randomly in my country Running Debian 7 with nginx 1.2.1 with additional ngx_http_substitutions_filter_module

use several sub-domains to reverse proxy corresponding sub-domain of wikipedia w.mydomain.tld for zh.wikipedia.org m.w.mydomain.tld for zh.m.wikipedia.org. For mobile site up.w.mydomain.tld for upload.wikimedia.org

My nginx config looks like this

    .......
    location / {
    proxy_pass https://zh.wikipedia.org;
    proxy_cookie_domain zh.wikipedia.org w.mydomain.tld;
    proxy_redirect https://zh.wikipedia.org/ /;
    proxy_redirect https://zh.m.wikipedia.org/ https://m.w.mymain.tld/;
    proxy_set_header Host "zh.wikipedia.org";
    proxy_set_header Referer "https://zh.wikipedia.org$request_uri";
    subs_filter_types text/css text/xml text/javascript;
    subs_filter zh.wikipedia.org w.mydomain.tld;
    subs_filter upload.wikimedia.org up.w.mydomain.tld;
    subs_filter zh.m.wikipedia.org m.w.mydomain.tld;
    sub_filter_once off;
    }
            location https://zh.m.wikipedia.org/{
            rewrite ^/(.*) https://m.w.mydomain.tld/$1 permanent;
            }
    }

Server config for m.w.domain.tld and up.w.domain.tld are similar

No matter how I always get a 500 internal server error and there are no infos on error.log

Many thanks in advance:)

Update: I have tried remove the last location section and a similar configuration works for Google, still no clue:(

I've just deployed an update to an existing ASP.NET MVC3 site (it was already configured) and I'm getting the IIS blue screen of death stating

HTTP Error 500.0 - Internal Server Error
The page cannot be displayed because an internal server error has occurred.

However; there is nothing showing up in the Application Event Log where I would expect to see a (more) detailed description of the entry.

How can I go about diagnosing this issue?

We recently had some 500's from nginx itself that somehow were not logged (we have screenshots, but nothing in the logs). That is weird in itself, because usually errors show up there. Regardless, I am wondering if there is something like a connection pool size that if maxed out would result in a 500? We have correlated it potentially to a recent spike in traffic, but it is not conclusive.

Anyone have any ideas of how to begin to approach such an issue?