nginx 1.21.4 kuburitsa

Bazi guru re nginx 1.21.4 rakabudiswa, mukati umo kuvandudzwa kwezvinhu zvitsva zvinopfuurira (mune chibvumirano chakatsigirwa chakagadzikana 1.20, chete shanduko dzine chokuita nekubviswa kwezvikanganiso zvakakomba uye kushaya simba kunoitwa).

Shanduko huru:

  • Tsigiro yekumisikidza HTTP/2 yekubatanidza uchishandisa iyo NPN (Inotevera Protocol Negotiation) yekuwedzera panzvimbo yeALPN yakamiswa;
  • Inova nechokwadi chekuti SSL yakabatana yakavharwa kana mutengi ashandisa iyo ALPN yekuwedzera kana inotsigirwa protocol isina kusarudzwa panguva yekubatanidza nhaurirano;
  • Mune iyo "sendfile_max_chunk" kuraira, kukosha kweiyo default kwakashandurwa kuita 2 megabytes;
  • Muchikamu chekuyerera, iyo proxy_half_close dhairekitori yakawedzerwa, iyo iwe yaunogona kugadzirisa maitiro kana uchivhara proxied TCP yekubatanidza kune imwe yemativi ("TCP hafu-kuvhara");
  • Muchikamu cherukova, murairo we ssl_alpn wakawedzerwa kuti uone runyoro rwezvibvumirano zveALPN zvinotsigirwa (h2, http/1.1) uye $ssl_alpn_protocol variable, inoratidza ALPN protocol yakabvumiranwa nemutengi;
  • Yakawedzera rutsigiro rwekufona SSL_sendfile() paunenge uchishandisa OpenSSL 3.0;
  • Yakawedzera "mp4_start_key_frame" rairo mu ngx_http_mp4_module module yekutepfenyura vhidhiyo inotangira pakiyi furemu.
  • Yakagadziriswa kuseta iyo $content_length kusiyanisa paunenge uchishandisa chunked transfer encoding;
  • Yakagadziriswa yekubatanidza caching kukanganisa paunogamuchira mhinduro yehurefu husina kunaka kubva kune proxied backend;
  • Yakagadziriswa matanda neiyo "kukanganisa" nhanho pachinzvimbo che "info" kana misoro kubva kumashure isina kururama;
  • Yakagadziriswa zvikumbiro zvakarembera kana uchishandisa HTTP/2 uye iyo aio_write kuraira.

Source: opennet.ru

Voeg