Pas nj\u00eb vit zhvillimi, \u00ebsht\u00eb paraqitur dega e re stabile e serverit HTTP me performanc\u00eb t\u00eb lart\u00eb dhe serverit t\u00eb avancuar t\u00eb proxy-t nginx 1.20.0, e cila p\u00ebrmban ndryshimet e grumbulluara n\u00eb deg\u00ebn kryesore 1.19.x. N\u00eb t\u00eb ardhmen, t\u00eb gjitha ndryshimet n\u00eb deg\u00ebn stabile 1.20 do t\u00eb lidhen me eliminimin e gabimeve t\u00eb r\u00ebnda dhe dob\u00ebsive. S\u00eb shpejti do t\u00eb formohet dega kryesore nginx 1.21, n\u00eb t\u00eb cil\u00ebn do t\u00eb vazhdoj\u00eb zhvillimi i mund\u00ebsive t\u00eb reja. P\u00ebrdoruesve t\u00eb zakonsh\u00ebm, q\u00eb nuk kan\u00eb detyr\u00ebn p\u00ebr t\u00eb siguruar p\u00ebrputhshm\u00ebrin\u00eb me module t\u00eb jashtme, u rekomandohet t\u00eb p\u00ebrdorin deg\u00ebn kryesore, mbi t\u00eb cil\u00ebn \u00e7do tri muaj krijohen l\u00ebshime t\u00eb produktit komercial Nginx Plus. <\/p>\n
Sipas raportit t\u00eb marsit nga kompania Netcraft, nginx p\u00ebrdoret n\u00eb 20.15% t\u00eb t\u00eb gjith\u00eb faqeve aktive (nj\u00eb vit m\u00eb par\u00eb 19.56%, dy vite m\u00eb par\u00eb 20.73%), q\u00eb korrespondon me vendin e dyt\u00eb p\u00ebr popullaritet n\u00eb k\u00ebt\u00eb kategori (pjesa e Apache \u00ebsht\u00eb 25.38% (nj\u00eb vit m\u00eb par\u00eb 27.64%), Google \u2014 10.09%, Cloudflare \u2014 8.51%. Duke marr\u00eb parasysh t\u00eb gjitha faqet, nginx ruan lider\u00ebsin\u00eb dhe z\u00eb 35.34% t\u00eb tregut (nj\u00eb vit m\u00eb par\u00eb 36.91%, dy vite m\u00eb par\u00eb \u2014 27.52%), nd\u00ebrsa pjesa e Apache \u00ebsht\u00eb 25.98%, OpenResty (platform\u00eb bazuar n\u00eb nginx dhe LuaJIT.) \u2014 6.55%, Microsoft IIS \u2014 5.96%. <\/p>\n
Mes nj\u00eb milioni faqeve m\u00eb t\u00eb vizituara n\u00eb bot\u00eb, pjesa e nginx \u00ebsht\u00eb 25.55% (nj\u00eb vit m\u00eb par\u00eb 25.54%, dy vite m\u00eb par\u00eb 26.22%). Aktualisht, rreth 419 milion faqe jan\u00eb t\u00eb menaxhuara nga nginx (nj\u00eb vit m\u00eb par\u00eb 459 milion). Sipas t\u00eb dh\u00ebnave t\u00eb W3Techs, nginx p\u00ebrdoret n\u00eb 33.7% t\u00eb faqeve nga nj\u00eb milioni m\u00eb t\u00eb vizituara, n\u00eb prillin e vitit t\u00eb kaluar ky tregues ishte 31.9%, para dy viteve \u2014 41.8% (r\u00ebnia shpjegohet nga kalimi n\u00eb nj\u00eb llogaritje t\u00eb ve\u00e7ant\u00eb t\u00eb serverit http Cloudflare). Pjesa e Apache ra nga 39.5% n\u00eb 34% gjat\u00eb nj\u00eb viti, nd\u00ebrsa pjesa e Microsoft IIS ra nga 8.3% n\u00eb 7%. Pjesa e LiteSpeed u rrit nga 6.3% n\u00eb 8.4%, dhe Node.js nga 0.8% n\u00eb 1.2%. N\u00eb Rusi, nginx p\u00ebrdoret n\u00eb 79.1% t\u00eb faqeve m\u00eb t\u00eb vizituara (nj\u00eb vit m\u00eb par\u00eb \u2014 78.9%). <\/p>\n
\u00ebsht\u00ebn\u00eb shtuar mund\u00ebsia e verifikimit t\u00eb certifikatave t\u00eb klient\u00ebve me angazhimin e sh\u00ebrbimeve t\u00eb jashtme mbi baz\u00ebn e protokollit OCSP (Protokolli i Statusit t\u00eb Certifikatave Online). P\u00ebr aktivizimin e verifikimit, \u00ebsht\u00eb propozuar direktiva ssl_ocsp, p\u00ebr t\u00eb konfiguruar madh\u00ebsin\u00eb e cache-it \u2014 ssl_ocsp_cache, p\u00ebr t\u00eb tepruar URL-n\u00eb e p\u00ebrpunuesit OCSP, e cila \u00ebsht\u00eb e specifikuar n\u00eb certifikat\u00ebn \u2014 ssl_ocsp_responder.\n
Moduli ngx_stream_set_module \u00ebsht\u00eb p\u00ebrfshir\u00eb, duke lejuar caktimin e vler\u00ebs s\u00eb nj\u00eb variabli server { listen 12345; set $true 1; } <\/li>\n
\u00ebsht\u00eb shtuar direktiva proxy_cookie_flags p\u00ebr p\u00ebrcaktimin e flamujve p\u00ebr Cookie n\u00eb lidhjet e proxy-t. P\u00ebr shembull, p\u00ebr t\u00eb shtuar flamurin 'httponly' n\u00eb Cookie 'one', dhe p\u00ebr flamujt e tjer\u00eb t\u00eb Cookie, flamujt 'nosecure' dhe 'samesite=strict' mund t\u00eb p\u00ebrdoret struktura: proxy_cookie_flags one httponly; proxy_cookie_flags ~ nosecure samesite=strict;\n
Nj\u00eb direktiv\u00eb e ngjashme userid_flags p\u00ebr t\u00eb shtuar flamuj p\u00ebr cookie \u00ebsht\u00eb gjithashtu implementuar p\u00ebr modulin ngx_http_userid. <\/p>\n
\u00ebsht\u00eb shtuar direktiva 'ssl_conf_command', 'proxy_ssl_conf_command', 'grpc_ssl_conf_command' dhe 'uwsgi_ssl_conf_command', me an\u00eb t\u00eb cilave mund t\u00eb caktohen parameter t\u00eb shumt\u00eb p\u00ebr konfigurimin e OpenSSL. P\u00ebr shembull, p\u00ebr prioritizimin e shifrave ChaCha dhe konfigurimin e avancuar t\u00eb shifrave TLSv1.3, mund t\u00eb specifikohet ssl_conf_command Options PrioritizeChaCha; ssl_conf_command Ciphersuites TLS_CHACHA20_POLY1305_SHA256; <\/li>\n