The release of the main branch of nginx 1.21.4 has been formed, within which the development of new features continues (only changes related to the elimination of serious errors and vulnerabilities are made in the parallel supported stable branch 1.20).
Major changes:
- Removed support for establishing HTTP/2 connections using the NPN (Next Protocol Negotiation) extension instead of ALPN;
- Secured closing of SSL connections when using the ALPN extension by the client, if a supported protocol is not selected during connection negotiation;
- In the "sendfile_max_chunk" directive, the default value has been changed to 2 megabytes;
- In the stream module, the proxy_half_close directive has been added, with which you can configure the behavior when a proxied TCP connection is closed on one of the sides ("TCP half-close");
- In the stream module, the ssl_alpn directive was added to determine the list of supported ALPN protocols (h2, http/1.1) and the $ssl_alpn_protocol variable, which reflects the ALPN protocol agreed with the client;
- Added support for calling SSL_sendfile() when using OpenSSL 3.0;
- Added the "mp4_start_key_frame" directive in the ngx_http_mp4_module module for broadcasting a video stream starting from a key frame.
- Fixed setting $content_length variable when using chunked transfer encoding;
- Fixed connection caching error when receiving a response of incorrect length from the proxied backend;
- Fixed logging with "error" level instead of "info" for incorrect headers from backends;
- Fixed request hanging errors when using HTTP/2 and the aio_write directive.
Source: opennet.ru