#
9217:913518341c20 |
| 21-Feb-2024 |
Roman Arutyunyan |
Stream: ngx_stream_pass_module.
The module allows to pass connections from Stream to other modules such as HTTP or Mail, as well as back to Stream. Previously, this was only possible with proxying.
Stream: ngx_stream_pass_module.
The module allows to pass connections from Stream to other modules such as HTTP or Mail, as well as back to Stream. Previously, this was only possible with proxying. Connections with preread buffer read out from socket cannot be passed.
The module allows selective SSL termination based on SNI.
stream { server { listen 8000 default_server; ssl_preread on; ... }
server { listen 8000; server_name foo.example.com; pass 127.0.0.1:8001; # to HTTP }
server { listen 8000; server_name bar.example.com; ... } }
http { server { listen 8001 ssl; ...
location / { root html; } } }
show more ...
|
Revision tags: release-1.25.4, release-1.25.3, release-1.25.2, release-1.25.1, release-1.25.0 |
|
#
9106:113e2438dbd4 |
| 13-May-2023 |
Roman Arutyunyan |
Stream: removed QUIC support.
|
#
8956:eaf356a35f5d |
| 29-Dec-2021 |
Sergey Kandaurov |
Merged with the default branch.
|
#
8934:9ec96ceaf484 |
| 09-Dec-2021 |
Ruslan Ermilov |
QUIC: configure cleanup.
Renamed and removed some macros.
|
#
8921:33226ac61076 |
| 06-Dec-2021 |
Roman Arutyunyan |
HTTP/3: merged ngx_http_quic_module into ngx_http_v3_module.
|
#
8676:7df607cb2d11 |
| 25-Dec-2020 |
Vladimir Homutov |
QUIC: ngx_quic_bpf module.
The quic kernel bpf helper inspects packet payload for DCID, extracts key and routes the packet into socket matching the key.
Due to reuseport feature, each worker owns a
QUIC: ngx_quic_bpf module.
The quic kernel bpf helper inspects packet payload for DCID, extracts key and routes the packet into socket matching the key.
Due to reuseport feature, each worker owns a personal socket, which is identified by the same key, used to create DCID.
BPF objects are locked in RAM and are subject to RLIMIT_MEMLOCK. The "ulimit -l" command may be used to setup proper limits, if maps cannot be created with EPERM or updated with ETOOLONG.
show more ...
|
#
8675:d3747ba486e7 |
| 15-Dec-2020 |
Vladimir Homutov |
Core: added interface to linux bpf() system call.
It contains wrappers for operations with BPF maps and for loading BPF programs.
|
#
8647:507da0d3b070 |
| 24-Nov-2020 |
Sergey Kandaurov |
Merged with the default branch.
|
#
8568:0875101c08f7 |
| 30-Sep-2020 |
Sergey Kandaurov |
Merged with the default branch.
|
#
8482:893b3313f53c |
| 21-Jul-2020 |
Roman Arutyunyan |
QUIC: added "quic" listen parameter in Stream.
Also, introduced ngx_stream_quic_module.
|
#
8481:0d2b2664b41c |
| 21-Jul-2020 |
Roman Arutyunyan |
QUIC: added "quic" listen parameter.
The parameter allows processing HTTP/0.9-2 over QUIC.
Also, introduced ngx_http_quic_module and moved QUIC settings there
|
#
8372:0e6528551f26 |
| 30-Apr-2020 |
Sergey Kandaurov |
Configure: unbreak with old OpenSSL, --with-http_v3_module added.
|
#
8215:38c0898b6df7 |
| 13-Mar-2020 |
Roman Arutyunyan |
HTTP/3.
|
Revision tags: release-1.24.0, release-1.23.4, release-1.23.3, release-1.22.1, release-1.23.2, release-1.23.1, release-1.23.0, release-1.22.0, release-1.21.6, release-1.21.5 |
|
#
7981:0b5f12d5c531 |
| 24-Dec-2021 |
Maxim Dounin |
PCRE2 library support.
The PCRE2 library is now used by default if found, instead of the original PCRE library. If needed for some reason, this can be disabled with the --without-pcre2 configure op
PCRE2 library support.
The PCRE2 library is now used by default if found, instead of the original PCRE library. If needed for some reason, this can be disabled with the --without-pcre2 configure option.
To make it possible to specify paths to the library and include files via --with-cc-opt / --with-ld-opt, the library is first tested without any additional paths and options. If this fails, the pcre2-config script is used.
Similarly to the original PCRE library, it is now possible to build PCRE2 from sources with nginx configure, by using the --with-pcre= option. It automatically detects if PCRE or PCRE2 sources are provided.
Note that compiling PCRE2 10.33 and later requires inttypes.h. When compiling on Windows with MSVC, inttypes.h is only available starting with MSVC 2013. In older versions some replacement needs to be provided ("echo '#include <stdint.h>' > pcre2-10.xx/src/inttypes.h" is good enough for MSVC 2010).
The interface on nginx side remains unchanged.
show more ...
|
Revision tags: release-1.20.2, release-1.21.4, release-1.21.3, release-1.21.2, release-1.21.1, release-1.20.1, release-1.21.0, release-1.20.0, release-1.19.10, release-1.19.9, release-1.19.8, release-1.19.7, release-1.19.6, release-1.19.5 |
|
#
7743:4b1299b1856a |
| 10-Nov-2020 |
Maxim Dounin |
Configure: shared sources for addon modules.
Addon modules, both dynamic and static, can now use shared source files. Shared sources result in only one make rule even if specified several times in d
Configure: shared sources for addon modules.
Addon modules, both dynamic and static, can now use shared source files. Shared sources result in only one make rule even if specified several times in different modules.
show more ...
|
#
7742:4a69fec53b2f |
| 10-Nov-2020 |
Maxim Dounin |
Configure: initialization of NGX_ADDON_SRCS.
|
Revision tags: release-1.19.4, release-1.19.3 |
|
#
7713:45e9281c6c5b |
| 28-Aug-2020 |
Pavel Pautov |
Stream: set module.
Adds 'set' directive to the stream server context.
|
Revision tags: release-1.19.2, release-1.19.1, release-1.19.0, release-1.18.0, release-1.17.10, release-1.17.9, release-1.17.8, release-1.17.7, release-1.17.6, release-1.17.5, release-1.17.4, release-1.16.1, release-1.17.3, release-1.17.2, release-1.17.1, release-1.17.0 |
|
#
7506:ee36940cfb0f |
| 08-May-2019 |
Roman Arutyunyan |
Unconditional compilation of the postpone filter.
Postpone filter is an essential part of subrequest functionality. In absence of it a subrequest response body is sent to the client out of order wi
Unconditional compilation of the postpone filter.
Postpone filter is an essential part of subrequest functionality. In absence of it a subrequest response body is sent to the client out of order with respect to the main request header and body, as well as other subrequests. For in-memory subrequests the response is also sent to the client instead of being stored in memory.
Currently the postpone filter is automatically enabled if one of the following standard modules which are known to create subrequests is enabled: ssi, slice, addition. However a third-party module that creates subrequests can still be built without the postpone filter or be dynamically loaded in nginx built without it.
show more ...
|
Revision tags: release-1.16.0, release-1.15.12, release-1.15.11, release-1.15.10, release-1.15.9, release-1.15.8, release-1.14.2, release-1.15.7, release-1.14.1, release-1.15.6, release-1.15.5, release-1.15.4, release-1.15.3, release-1.15.2, release-1.15.1 |
|
#
7301:f2396ecf608b |
| 15-Jun-2018 |
Vladimir Homutov |
Upstream: ngx_http_upstream_random module.
The module implements random load-balancing algorithm with optional second choice. In the latter case, the best of two servers is chosen, accounting numbe
Upstream: ngx_http_upstream_random module.
The module implements random load-balancing algorithm with optional second choice. In the latter case, the best of two servers is chosen, accounting number of connections and server weight.
Example:
upstream u { random [two [least_conn]];
server 127.0.0.1:8080; server 127.0.0.1:8081; server 127.0.0.1:8082; server 127.0.0.1:8083; }
show more ...
|
Revision tags: release-1.15.0, release-1.14.0, release-1.13.12, release-1.13.11, release-1.13.10 |
|
#
7237:d87393919a10 |
| 18-Mar-2018 |
Sergey Kandaurov |
Configure: added gRPC module help message.
|
#
7233:2713b2dbf5bb |
| 17-Mar-2018 |
Maxim Dounin |
The gRPC proxy module.
The module allows passing requests to upstream gRPC servers. The module is built by default as long as HTTP/2 support is compiled in. Example configuration:
grpc_pass 127
The gRPC proxy module.
The module allows passing requests to upstream gRPC servers. The module is built by default as long as HTTP/2 support is compiled in. Example configuration:
grpc_pass 127.0.0.1:9000;
Alternatively, the "grpc://" scheme can be used:
grpc_pass grpc://127.0.0.1:9000;
Keepalive support is available via the upstream keepalive module. Note that keepalive connections won't currently work with grpc-go as it fails to handle SETTINGS_HEADER_TABLE_SIZE.
To use with SSL:
grpc_pass grpcs://127.0.0.1:9000;
SSL connections use ALPN "h2" when available. At least grpc-go works fine without ALPN, so if ALPN is not available we just establish a connection without it.
Tested with grpc-c++ and grpc-go.
show more ...
|
Revision tags: release-1.13.9, release-1.13.8, release-1.13.7, release-1.12.2, release-1.13.6, release-1.13.5, release-1.13.4 |
|
#
7072:0bb747b2d7cb |
| 20-Jul-2017 |
Roman Arutyunyan |
Mirror module.
|
Revision tags: release-1.12.1, release-1.13.3, release-1.13.2, release-1.13.1, release-1.13.0, release-1.12.0, release-1.11.13, release-1.11.12, release-1.11.11 |
|
#
6934:4d874b4d82ed |
| 16-Mar-2017 |
Ruslan Ermilov |
Configure: fixed --without_http.
Instead of turning off some randomly selected http modules when --without-http is specified, just don't process the whole http modules section.
|
Revision tags: release-1.11.10, release-1.10.3, release-1.11.9, release-1.11.8, release-1.11.7, release-1.11.6, release-1.10.2, release-1.11.5 |
|
#
6724:a6d116645c51 |
| 04-Oct-2016 |
Maxim Dounin |
Configure: removed the --with-ipv6 option.
IPv6 now compiled-in automatically if support is found. If there is a need to disable it for some reason, --with-cc-opt="-DNGX_HAVE_INET6=0" can be used f
Configure: removed the --with-ipv6 option.
IPv6 now compiled-in automatically if support is found. If there is a need to disable it for some reason, --with-cc-opt="-DNGX_HAVE_INET6=0" can be used for this.
show more ...
|
#
6716:57c8e12c460c |
| 03-Oct-2016 |
Maxim Dounin |
Modules compatibility: --with-compat configure option.
|