Shanduro itsva dze nginx 1.25.5 uye forogo FreeNginx 1.26.0

Iro bazi guru re nginx 1.25.5 rakabudiswa, mukati umo kuvandudzwa kwezvinhu zvitsva zvinopfuurira. Bazi rakadzikama rakafanana-rakachengetedzwa 1.24.x rine shanduko chete dzine chekuita nekubviswa kwetsikidzi dzakakomba uye kusasimba. Mune ramangwana, zvichibva pabazi guru 1.25.x, bazi rakagadzikana 1.26 richaumbwa. Iyo kodhi yeprojekiti yakanyorwa muC uye yakagoverwa pasi peiyo BSD rezinesi.

Pakati pekuchinja:

  • Rutsigiro rwawedzerwa ku stream module. virtual servers, iyo magadzirirwo ayo anotsanangurwa mu "server { … }" block uchishandisa server_name directive. server { server_name ~^(www\.)?(.+)$; proxy_pass www.$2:12345; }
  • Module itsva ngx_stream_pass_module yawedzerwa, yakagadzirirwa kutumira zvinongedzo zvakagamuchirwa zvakananga kune chero soketi yekuteerera ine chekuita nemamodule akadai se http, rwizi uye tsamba. rwizi {sevha {teerera 12345 ssl; ssl_certificate domain.crt; ssl_certificate_key domain.key; kupfuura 127.0.0.1:8000; }}
  • Iyo yekuteerera inoraira yerukova module inoshandisa tsigiro ye "yakadzoserwa" (inogonesa kudzoreredzwa kubvuma), "kugamuchira_filter" (inouya yekubatanidza sefa inoiswa isati yadaidza basa rekugamuchira) uye "setfib" (kuseta tafura yenzira) paramita.
  • Kune mamwe mavakirwo, rutsigiro rwakaitwa pakuona saizi yeblock (cache line) inoshandiswa kuendesa data pakati peCPU cache uye ndangariro.
  • PaApple Silicon masisitimu, rutsigiro rweHomebrew package maneja rwakawedzerwa.
  • Matambudziko ekubatanidza zvinhu akagadziriswa Windows.
  • Yakagadzirisa tsikidzi yakonzera kuti ma connections avharwe paunenge uchishandisa 0-RTT mode muQUIC protocol.

Pamusoro pezvo, isu tinogona kucherechedza kuburitswa kweiyo yakagadzikana vhezheni yeFreeNginx 1.26.0 chirongwa, icho chinogadzira forogo yeNginx. Iyo forogo iri kuvandudzwa naMaxim Dunin, mumwe weakakosha maNginx vagadziri. FreeNginx yakaiswa senge isiri-purojekiti chirongwa chinopa kusimudzira kweiyo Nginx kodhi base pasina kukanganiswa kwekambani. Kuburitswa 1.26.0 kunocherechedzwa sekuburitswa kwakagadzikana, kusanganisa shanduko uye zvigadziriso kubva mukuburitswa kweiyo mainline bazi reNginx 1.25. Pakati pezvimwe zvinhu, FreeNginx 1.26.0 inosanganisira kuyedza tsigiro yeHTTP/3 protocol, kuvandudzwa kwekupokana neDoS kurwiswa, uye zvigadziriso zvine chekuita neasynchronous I/O kugadzirisa.

Panguva imwe chete, njs 0.8.4, muturikiri weJavaScript we web server nginx. Muturikiri wenjs anoshandisa zviyero zveECMAScript uye anokubvumidza kuwedzera kugona kwekugadzirisa zvikumbiro zvenginx nema configuration scripts. Magwaro anogona kushandiswa mufaira rekugadzirisa kutsanangura advanced request processing logic, kugadzira ma configurations, kugadzira mhinduro dzinochinja, kugadzirisa zvikumbiro/mhinduro, kana kugadzira stubs nekukurumidza kugadzirisa matambudziko muma web applications. Muvhezheni itsva: rutsigiro rweQuickJS JavaScript engine rwawedzerwa kuCLI; kugona kugadzirisa Server header kwawedzerwa; uye cheki ye duplicate variables set kuburikidza ne js_set yaitwa.

Source: opennet.ru

Tenga inovimbika yekutambira kwemasaiti ane DDoS dziviriro, VPS VDS maseva 🔥 Tenga webhusaiti yakavimbika ine dziviriro yeDDoS, maseva eVPS VDS | ProHoster