The release of the main branch nginx 1.27.3 has been announced, continuing the development of new features. The concurrently supported stable branch 1.26.x only receives changes related to fixing serious bugs and vulnerabilities. In the future, the stable branch 1.28 will be formed based on the main branch 1.27.x. The project's code is written in C and is distributed under the BSD license.
Among the changes:
- The "resolve" parameter has been added to the "server" directive used in the upstream block, enabling tracking changes an IP address to the used domain name and automatic updating of the upstream block configuration without the need to restart nginx when the address changes.
- Support for SmarterMail-specific IMAP LOGIN mode with untagged CAPABILITY response has been added to the ngx_mail_proxy_module.
- TLSv1 and TLSv1.1 protocols are disabled by default.
- In the directives "proxy_bind", "fastcgi_bind", "grpc_bind", "memcached_bind", "scgi_bind", and "uwsgi_bind", as well as in the client address for the ngx_http_realip_module, specifying IPv6 addresses in square brackets without a port number is now permitted.
- Errors in the implementations of the ngx_http_mp4_module and the 'proxy_store' directive have been fixed.
- On the DragonFly BSD platform, the so_keepalive parameter is now functioning with the listen directive.
Source: opennet.ru
