The lighttpd 1.4.60 lightweight http server has been released. The new version introduces 437 changes, mostly related to bug fixes and optimizations.
Main innovations:
- Added support for the Range header (RFC-7233) for all non-stream responses (previously Range was only supported when serving static files).
- The implementation of the HTTP/2 protocol has been optimized to reduce memory consumption and speed up the processing of intensively sent initial requests.
- Work has been done to reduce memory consumption.
- Improved lua performance in the mod_magnet module.
- Improved performance of the mod_dirlisting module and added an option to configure caching.
- Limits have been added to mod_dirlisting, mod_ssi and mod_webdav to prevent high memory consumption under extreme workloads.
- On the backend side, separate restrictions on the execution time of connect(), write() and read() calls have been added.
- Restart provided if a large time offset of the system clock was detected (leading to problems with TLS 1.3 on embedded systems).
- The timeout for connecting to the backend is set to 8 seconds by default (can be changed in the settings).
Additionally published a warning about changing the behavior and some default settings. The changes are scheduled to take effect in early 2022.
- The default timeout for graceful restart/shutdown operations is planned to be reduced from infinity to 5 seconds. The timeout can be configured using the "server.graceful-shutdown-timeout" option.
- The assembly with libev and FAM will be deprecated, instead of which interfaces native to operating systems will be used for processing the event loop and tracking changes in the file system (epoll() and inotify() on Linux, kqueue() on *BSD).
- Mod_compress (must use mod_deflate), mod_geoip (must use mod_maxminddb), mod_authn_mysql (must use mod_authn_dbi), mod_mysql_vhost (must use mod_vhostdb_dbi), mod_cml (must use mod_magnet), and mod_flv_streaming will be deprecated and removed in a future release.
Source: opennet.ru