[amluto]

I find it hard to believe that searching for “..” would even show up in a benchmark.

In any case, it seems that nginx does try to search for .. but has a bug in the corner case where the “location” doesn’t end with a slash. I assume there’s some kind of URL normalization pass that happens before the routing pass, and if the route matches part of a path component, nothing catches the ..

If I’m right, this is just an IMO rather embarrassing bug and should he fixed.

[D13Fd]

Yeah, this whole thing reads to me like a bug in nginx. There is no obvious reason users would need that functionality.

[m3affan]

What are the alternarives though?

[seanw444]

To Nginx? HAProxy. Or Caddy if you're just doing web stuff.

[terom]

HAProxy does not serve static files, so it's a poor alternative for this specific case.