A new release of the high-performance HTTP server and multiprotocol proxy server Angie 1.11.0 has been published, forked from Nginx by a group of former developers from F5 Networks. The source code for Angie is available under the BSD license. The project has received compatibility certificates with Russian operating systems Red OS, Astra Linux Special Edition, Rosa Chrome Server, Alt, and the FSTEC version of Alt.
The development is supported by the company 'Web Server,' formed in the autumn of 2022 with an investment of $1 million. Among the co-founders of Web Server are: Valentin Bartenev (team leader who developed the Nginx Unit product), Ivan Poluyanov (former head of frontend developers at Rambler and Mail.Ru), Oleg Mamontov (head of the technical support team at NGINX Inc), and Ruslan Ermilov (ru@FreeBSD.org).
Changes in Angie 1.11.0:
- The 'http-metric' module has been added, allowing real-time collection of any HTTP metrics at different stages of request processing and aggregating them using various methods (counters, histograms, moving averages, etc.). Access to the collected data is available in JSON and Prometheus formats via HTTP API (/status/http/metric_zones/), as well as through variables and logs.
- Capabilities related to ACME protocol support have been expanded: ALPN verification support has been added, the display of certificate reissue status in HTTP API /status/http/acme_clients/ (with Prometheus support) has been improved, configuration of HTTP confirmations has been simplified, and access to certificates in the stream block has been streamlined. HTTP verification in ACME can now operate without server blocks with the listen 80 directive in the configuration (the directive acme_http_port has been proposed to change the listening port). Automatic calculation of the approximate size of the received certificate has been provided (for certificates with a large number of domains, it is now possible to do without setting the max_cert_size parameter in the acme_client directive). The maximum response size from the ACME server is now limited by the acme_max_response_size directive.
- The http_image_filter module has added support for AVIF and HEIC formats. The image_filter directive has a new parameter convert for converting between image formats.
- Support for the TLS extension ECH (Encrypted ClientHello) has been implemented, continuing the development of the ESNI (Encrypted Server Name Indication) extension, which is used to encrypt information about TLS session parameters, such as the requested domain name. The file with the private key for ECH is specified via the ssl_encrypted_hello_key directive, and information on the use of ECH is available through the $ssl_encrypted_hello variable.
- Support for the PROXYv2 protocol has been added to the stream module for traffic transmission towards proxied servers. servers.
- The ability to count the number of items in lists and objects when exporting Prometheus metrics has been added (paths ending with a slash now return the number of items in the corresponding API collection).
- A new variable $sent_body has been added, containing the body of a subrequest or request from the client module.
- A new variable $upstream_cache_key has been added, containing the cache key being used.
- Support for XOAUTH2 and OAUTHBEARER authentication methods has been implemented in the mail proxy.server Support for building with the AWS-LC cryptographic library, developed by Amazon, has been implemented.
- Build issues in NetBSD 10.0 have been resolved.
- Proxying and correct caching of GET and HEAD requests have been improved.
- Issues with HTTP/3 related to protocol degradation during reload operations and failures after binary updates have been fixed; routing of QUIC packets between processes has been improved by enhancing the BPF code.
- Changes proposed in version 1.29.3 of nginx have been transferred from the project's repository, except for the directives add_header_inherit and add_trailer_inherit. Various improvements from FreeNginx have been transferred.
- A release of the high-performance HTTP server and multi-protocol proxy server Angie 1.11.0, forked from Nginx by a group of former developers who left F5 Network, has been published.
Source: opennet.ru
