9235:99e7050ac886 | 26-Feb-2024 |
Piotr Sikora |
Configure: allow cross-compiling to Windows using Clang.
Signed-off-by: Piotr Sikora <piotr@aviatrix.com> |
9234:c2e753d214b0 | 26-Feb-2024 |
Piotr Sikora |
Configure: fixed "make install" when cross-compiling to Windows.
Signed-off-by: Piotr Sikora <piotr@aviatrix.com> |
9233:398495d816f0 | 26-Feb-2024 |
Piotr Sikora |
Configure: added support for Homebrew on Apple Silicon.
Signed-off-by: Piotr Sikora <piotr@aviatrix.com> |
9232:427aa785edf8 | 27-Mar-2024 |
Sergey Kandaurov |
Configure: set cache line size for more architectures.
Based on a patch by Piotr Sikora. |
9230:fb989e24c60a | 26-Feb-2024 |
Sergey Kandaurov |
Configure: fixed Linux crypt_r() test to add libcrypt.
Previously, the resulting binary was successfully linked because libcrypt was added in a separate test for crypt().
Patch by Piotr Sikora. |
9217:913518341c20 | 21-Feb-2024 |
Roman Arutyunyan |
Stream: ngx_stream_pass_module.
The module allows to pass connections from Stream to other modules such as HTTP or Mail, as well as back to Stream. Previously, this was only possible with proxying.
Stream: ngx_stream_pass_module.
The module allows to pass connections from Stream to other modules such as HTTP or Mail, as well as back to Stream. Previously, this was only possible with proxying. Connections with preread buffer read out from socket cannot be passed.
The module allows selective SSL termination based on SNI.
stream { server { listen 8000 default_server; ssl_preread on; ... }
server { listen 8000; server_name foo.example.com; pass 127.0.0.1:8001; # to HTTP }
server { listen 8000; server_name bar.example.com; ... } }
http { server { listen 8001 ssl; ...
location / { root html; } } }
show more ...
|
Revision tags: release-1.25.4, release-1.25.3, release-1.25.2 |
|
9137:0ba26c99b3a1 | 20-Jun-2023 |
Maxim Dounin |
SSL: avoid using OpenSSL config in build directory (ticket #2404).
With this change, the NGX_OPENSSL_NO_CONFIG macro is defined when nginx is asked to build OpenSSL itself. And with this macro auto
SSL: avoid using OpenSSL config in build directory (ticket #2404).
With this change, the NGX_OPENSSL_NO_CONFIG macro is defined when nginx is asked to build OpenSSL itself. And with this macro automatic loading of OpenSSL configuration (from the build directory) is prevented unless the OPENSSL_CONF environment variable is explicitly set.
Note that not loading configuration is broken in OpenSSL 1.1.1 and 1.1.1a (fixed in OpenSSL 1.1.1b, see https://github.com/openssl/openssl/issues/7350). If nginx is used to compile these OpenSSL versions, configuring nginx with NGX_OPENSSL_NO_CONFIG explicitly set to 0 might be used as a workaround.
show more ...
|
Revision tags: release-1.25.1 |
|
9121:262c01782566 | 08-Jun-2023 |
Sergey Kandaurov |
HTTP/2: removed server push (ticket #2432).
Although it has better implementation status than HTTP/3 server push, it remains of limited use, with adoption numbers seen as negligible. Per IETF 102 ma
HTTP/2: removed server push (ticket #2432).
Although it has better implementation status than HTTP/3 server push, it remains of limited use, with adoption numbers seen as negligible. Per IETF 102 materials, server push was used only in 0.04% of sessions. It was considered to be "difficult to use effectively" in RFC 9113. Its use is further limited by badly matching to fetch/cache/connection models in browsers, see related discussions linked from [1].
Server push was disabled in Chrome 106 [2].
The http2_push, http2_push_preload, and http2_max_concurrent_pushes directives are made obsolete. In particular, this essentially reverts 7201:641306096f5b and 7207:3d2b0b02bd3d.
[1] https://jakearchibald.com/2017/h2-push-tougher-than-i-thought/ [2] https://chromestatus.com/feature/6302414934114304
show more ...
|
Revision tags: release-1.25.0 |
|
9106:113e2438dbd4 | 13-May-2023 |
Roman Arutyunyan |
Stream: removed QUIC support. |
9094:afebde21cb32 | 06-May-2023 |
Roman Arutyunyan |
QUIC: disabled datagram fragmentation.
As per RFC 9000, Section 14:
UDP datagrams MUST NOT be fragmented at the IP layer. |
9085:0af598651e33 | 29-Mar-2023 |
Sergey Kandaurov |
Merged with the default branch. |
9080:7da4791e0264 | 22-Feb-2023 |
Roman Arutyunyan |
QUIC: OpenSSL compatibility layer.
The change allows to compile QUIC with OpenSSL which lacks BoringSSL QUIC API.
This implementation does not support 0-RTT. |
9070:a954b551dc3f | 23-Jan-2023 |
Maxim Dounin |
QUIC: improved SO_COOKIE configure test.
In nginx source code the inttypes.h include, if available, is used to define standard integer types. Changed the SO_COOKIE configure test to follow this. |
9017:c2f5d79cde64 | 20-Apr-2022 |
Roman Arutyunyan |
QUIC: separate UDP framework for QUIC.
Previously, QUIC used the existing UDP framework, which was created for UDP in Stream. However the way QUIC connections are created and looked up is different
QUIC: separate UDP framework for QUIC.
Previously, QUIC used the existing UDP framework, which was created for UDP in Stream. However the way QUIC connections are created and looked up is different from the way UDP connections in Stream are created and looked up. Now these two implementations are decoupled.
show more ...
|
9008:ce6d9cf0f567 | 14-Feb-2022 |
Sergey Kandaurov |
Merged with the default branch. |
8956:eaf356a35f5d | 29-Dec-2021 |
Sergey Kandaurov |
Merged with the default branch. |
8942:5c86189a1c1b | 24-Dec-2021 |
Ruslan Ermilov |
Merged with the default branch. |
8935:ea78659b70fe | 09-Dec-2021 |
Ruslan Ermilov |
QUIC: removed configure time test for BPF sockhash.
The test verifies kernel version on a build machine, but actually used kernel may be different. |
8934:9ec96ceaf484 | 09-Dec-2021 |
Ruslan Ermilov |
QUIC: configure cleanup.
Renamed and removed some macros. |
8925:18d23ed15eef | 07-Dec-2021 |
Roman Arutyunyan |
HTTP/3: renamed files.
ngx_http_v3_tables.h and ngx_http_v3_tables.c are renamed to ngx_http_v3_table.h and ngx_http_v3_table.c to better match HTTP/2 code.
ngx_http_v3_streams.h and ngx_http_v3_st
HTTP/3: renamed files.
ngx_http_v3_tables.h and ngx_http_v3_tables.c are renamed to ngx_http_v3_table.h and ngx_http_v3_table.c to better match HTTP/2 code.
ngx_http_v3_streams.h and ngx_http_v3_streams.c are renamed to ngx_http_v3_uni.h and ngx_http_v3_uni.c to better match their content.
show more ...
|
8921:33226ac61076 | 06-Dec-2021 |
Roman Arutyunyan |
HTTP/3: merged ngx_http_quic_module into ngx_http_v3_module. |
8866:8c163ce5b55a | 27-Sep-2021 |
Ruslan Ermilov |
Configure: fixed QUIC support test.
OpenSSL library QUIC support cannot be tested at configure time when using the --with-openssl option so assume it's present if requested. While here, fixed the er
Configure: fixed QUIC support test.
OpenSSL library QUIC support cannot be tested at configure time when using the --with-openssl option so assume it's present if requested. While here, fixed the error message in case QUIC support is missing.
show more ...
|
8865:646bb5361437 | 27-Sep-2021 |
Ruslan Ermilov |
Configure: check for QUIC 0-RTT support at compile time. |
8859:65191b9151a9 | 21-Sep-2021 |
Ruslan Ermilov |
Configure: USE_OPENSSL_QUIC=YES implies USE_OPENSSL=YES. |
8858:be269f1fc230 | 21-Sep-2021 |
Ruslan Ermilov |
Configure: ordered directories. |