{"id":99975,"date":"2021-04-20T22:22:35","date_gmt":"2021-04-20T20:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-nginx-1-20-0"},"modified":"2021-04-20T22:22:35","modified_gmt":"2021-04-20T20:22:35","slug":"reliz-nginx-1-20-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/reliz-nginx-1-20-0","title":{"rendered":"L\u00ebshimi i nginx 1.20.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Pas nj\u00eb viti zhvillimi, \u00ebsht\u00eb prezantuar dega e re stabile e serverit HTTP me performanc\u00eb t\u00eb lart\u00eb dhe serverit proxy multi-protokol nginx 1.20.0, e cila p\u00ebrfshin ndryshimet e grumbulluara n\u00eb deg\u00ebn kryesore 1.19.x. N\u00eb t\u00eb ardhmen, t\u00eb gjitha ndryshimet n\u00eb deg\u00ebn e stabilizuar 1.20 do t\u00eb lidhen me eliminimin e defekteve t\u00eb r\u00ebnda dhe dob\u00ebsive. S\u00eb shpejti do t\u00eb formohet dega kryesore e nginx 1.21, n\u00eb t\u00eb cil\u00ebn do t\u00eb vazhdoj\u00eb zhvillimi i mund\u00ebsive t\u00eb reja. P\u00ebr p\u00ebrdoruesit e zakonsh\u00ebm, t\u00eb cil\u00ebt nuk kan\u00eb si q\u00ebllim t\u00eb sigurojn\u00eb p\u00ebrputhshm\u00ebrin\u00eb me module t\u00eb jashtme, rekomandohet t\u00eb p\u00ebrdorin deg\u00ebn kryesore, mbi t\u00eb cil\u00ebn aktualisht renditen l\u00ebshime t\u00eb produktit komercial Nginx Plus \u00e7do tre muaj. <\/p>\n
Sipas raportit t\u00eb marsit nga kompania Netcraft, nginx p\u00ebrdoret n\u00eb 20.15% t\u00eb t\u00eb gjitha faqeve aktive (nj\u00eb vit m\u00eb par\u00eb 19.56%, dy vite m\u00eb par\u00eb 20.73%), e cila p\u00ebrkon me vendin e dyt\u00eb n\u00eb popullaritet n\u00eb k\u00ebt\u00eb kategori (pjesa e Apache \u00ebsht\u00eb 25.38% (nj\u00eb vit m\u00eb par\u00eb 27.64%), Google - 10.09%, Cloudflare - 8.51%. Megjithat\u00eb, kur shqyrtohen t\u00eb gjitha faqet, nginx ruan udh\u00ebheqjen dhe z\u00eb 35.34% t\u00eb tregut (nj\u00eb vit m\u00eb par\u00eb 36.91%, dy vite m\u00eb par\u00eb - 27.52%), nd\u00ebrsa pjesa e Apache \u00ebsht\u00eb 25.98%, OpenResty (plattform\u00eb mbi baz\u00ebn e nginx dhe LuaJIT.) - 6.55%, Microsoft IIS - 5.96%. <\/p>\n
Mes nj\u00eb miloni faqeve m\u00eb t\u00eb vizituara n\u00eb bot\u00eb, pjesa e nginx \u00ebsht\u00eb 25.55% (nj\u00eb vit m\u00eb par\u00eb 25.54%, dy vite m\u00eb par\u00eb 26.22%). Aktualisht, rreth 419 milion faqe po operojn\u00eb n\u00ebn nginx (nj\u00eb vit m\u00eb par\u00eb 459 milion). Sipas t\u00eb dh\u00ebnave nga W3Techs, nginx p\u00ebrdoret n\u00eb 33.7% t\u00eb faqeve nga miliona m\u00eb t\u00eb vizituara, n\u00eb prillin e vitit t\u00eb kaluar ky tregues ishte 31.9%, dy vite m\u00eb par\u00eb - 41.8% (p\u00ebrkeq\u00ebsimi shpjegohet me kalimin n\u00eb regjistrimin e ve\u00e7ant\u00eb t\u00eb serverit http nga Cloudflare). Pjesa e Apache ka r\u00ebn\u00eb nga 39.5% n\u00eb 34% brenda nj\u00eb viti, nd\u00ebrsa pjesa e Microsoft IIS ka r\u00ebn\u00eb nga 8.3% n\u00eb 7%. Pjesa e LiteSpeed \u00ebsht\u00eb rritur nga 6.3% n\u00eb 8.4%, dhe Node.js nga 0.8% n\u00eb 1.2%. N\u00eb Rusi, nginx p\u00ebrdoret n\u00eb 79.1% t\u00eb faqeve m\u00eb t\u00eb vizituara (nj\u00eb vit m\u00eb par\u00eb - 78.9%). <\/p>\n
Shtuar mund\u00ebsia e verifikimit t\u00eb certifikatave t\u00eb klient\u00ebve me sh\u00ebrbime t\u00eb jashtme mbi baz\u00ebn e protokollit OCSP (Protokolli i Statusit t\u00eb Certifikat\u00ebs Online). P\u00ebr t\u00eb aktivizuar verifikimin, \u00ebsht\u00eb propozuar direktiva ssl_ocsp, p\u00ebr t\u00eb konfiguruar madh\u00ebsin\u00eb e caches - ssl_ocsp_cache, p\u00ebr t\u00eb tejkaluar URL-n\u00eb e trajtuesit OCSP, e cila \u00ebsht\u00eb specifikuar n\u00eb certifikat\u00eb - ssl_ocsp_responder.\n
Nj\u00eb moduli i ri ngx_stream_set_module \u00ebsht\u00eb p\u00ebrfshir\u00eb, duke lejuar caktimin e vlerave t\u00eb variablave server { listen 12345; set $true 1; } <\/li>\n
Shtuar direktiva proxy_cookie_flags p\u00ebr t\u00eb p\u00ebrcaktuar flag-at p\u00ebr Cookie n\u00eb lidhjet e proxy. P\u00ebr shembull, p\u00ebr t\u00eb shtuar flag-un 'httponly' p\u00ebr Cookie-n\u00eb 'one', nd\u00ebrsa p\u00ebr t\u00eb gjitha Cookie-t e tjera flag-at 'nosecure' dhe 'samesite=strict' mund t\u00eb p\u00ebrdoret konstrukti: proxy_cookie_flags one httponly; proxy_cookie_flags ~ nosecure samesite=strict;\n
Nj\u00eb direktiv\u00eb e ngjashme userid_flags p\u00ebr t\u00eb shtuar flag-at n\u00eb Cookie \u00ebsht\u00eb implementuar gjithashtu p\u00ebr modul\u00ebn ngx_http_userid. <\/p>\n
Shtuar direktivat 'ssl_conf_command', 'proxy_ssl_conf_command', 'grpc_ssl_conf_command' dhe 'uwsgi_ssl_conf_command', me an\u00eb t\u00eb t\u00eb cilave mund t\u00eb p\u00ebrcaktohen parametra t\u00eb caktuar p\u00ebr konfigurimin e OpenSSL. P\u00ebr shembull, p\u00ebr prioritizimin e shifrave ChaCha dhe konfigurimin e avancuar t\u00eb shifrave TLSv1.3 mund t\u00eb specifikohet ssl_conf_command Options PrioritizeChaCha; ssl_conf_command Ciphersuites TLS_CHACHA20_POLY1305_SHA256; <\/li>\n