ืคึผืจืึธื”ืึธืกื˜ืขืจ > ื‘ืœืึธื’ > ืื™ื ื˜ืขืจื ืขื˜ ื ื™ื™ึทืขืก > ืžืขืœื“ื•ื ื’ nginx 1.16.0

ืžืขืœื“ื•ื ื’ nginx 1.16.0

ื ืึธืš ืึท ื™ืึธืจ ืคื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืจืขืคึผืจื™ื–ืขื ื˜ื™ื“ ื“ื•ืจืš ื ื™ื™ึท ืกื˜ืึทื‘ื™ืœ ืฆื•ื•ื™ื™ึทื’ ืคื•ืŸ ื”ื•ื™ืš-ืคืึธืจืฉื˜ืขืœื•ื ื’ ื”ื˜ื˜ืคึผ ืกืขืจื•ื•ืขืจ ืื•ืŸ ืžื•ืœื˜ื™ืคึผืจืึธื˜ืึธืงืึธืœ ืคึผืจืึทืงืกื™ ืกืขืจื•ื•ืขืจ nginx 1.16.0, ื•ื•ืึธืก ืึทื‘ื–ืึธืจื‘ื“ ื“ื™ ืขื ื“ืขืจื•ื ื’ืขืŸ ืึทืงื™ื•ืžื™ืึทืœื™ื™ื˜ื™ื“ ืื™ืŸ ื“ื™ ื”ื•ื™ืคึผื˜ ืฆื•ื•ื™ื™ึทื’ 1.15.ืงืก. ืื™ืŸ ื“ืขืจ ืฆื•ืงื•ื ืคึฟื˜, ืึทืœืข ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ ื“ื™ ืกื˜ืึทื‘ื™ืœ ืฆื•ื•ื™ื™ึทื’ 1.16 ื•ื•ืขื˜ ื–ื™ื™ืŸ ืฉื™ื™ึทื›ื•ืช ืฆื• ื“ื™ ื™ืœื™ืžืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ืขืจื ืกื˜ ืขืจืจืึธืจืก ืื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–. ื“ื™ ื”ื•ื™ืคึผื˜ ืฆื•ื•ื™ื™ึทื’ ืคื•ืŸ nginx 1.17 ื•ื•ืขื˜ ื‘ืึทืœื“ ื–ื™ื™ืŸ ื’ืขืฉืืคืŸ, ืื™ืŸ ื•ื•ืึธืก ื“ื™ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ื ื™ื™ึทืข ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ื•ื•ืขื˜ ืคืึธืจื–ืขืฆืŸ. ืคึฟืึทืจ ืคึผืจืึธืกื˜ ื ื™ืฆืขืจืก ื•ื•ืึธืก ื˜ืึธืŸ ื ื™ื˜ ื”ืึธื‘ืŸ ื“ื™ ืึทืจื‘ืขื˜ ืฆื• ืขื ืฉื•ืจ ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ ืžื™ื˜ ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ืžืึทื“ื–ืฉื•ืœื–, ืจืขืงืึทืžืขื ื“ื™ื“ ื ื™ืฆืŸ ื“ื™ ื”ื•ื™ืคึผื˜ ืฆื•ื•ื™ื™ึทื’, ืื•ื™ืฃ ื“ืขืจ ื‘ืื–ืข ืคื•ืŸ โ€‹โ€‹ื•ื•ืึธืก ืจื™ืœื™ืกื™ื– ืคื•ืŸ ื“ื™ ื’ืขืฉืขืคื˜ ืคึผืจืึธื“ื•ืงื˜ Nginx Plus ื–ืขื ืขืŸ ื’ืขืฉืืคืŸ ื™ืขื“ืขืจ ื“ืจื™ื™ ื—ื“ืฉื™ื.

ื“ื™ ืžืขืจืกื˜ ื ืึธื•ื˜ืึทื‘ืึทืœ ื™ืžืคึผืจื•ื•ื•ืžืึทื ืฅ ืฆื•ื’ืขื’ืขื‘ืŸ ื‘ืขืฉืึทืก ื“ื™ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ื“ื™ ืึทืคึผืกื˜ืจื™ื ืฆื•ื•ื™ื™ึทื’ ืคื•ืŸ 1.15.x:

  • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ื•ืฆืŸ ื•ื•ืขืจื™ืึทื‘ืึทืœื– ืื™ืŸ ื“ื™ื™ืจืขืงื˜ื™ื•ื•ื–ssl_certificate'ื™'ssl_certificate_key', ื•ื•ืึธืก ืงืขื ืขืŸ ื•ื•ืขืจืŸ ื’ืขื ื•ืฆื˜ ืฆื• ื“ื™ื ืึทืžื™ืงืึทืœืœื™ ืœืึธื“ืŸ ืกืขืจื˜ื™ืคื™ืงืึทืฅ;
  • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืœืึธื“ืŸ ืกืกืœ ืกืขืจื˜ื™ืคื™ืงืึทืฅ ืื•ืŸ ืกื•ื“ ืฉืœื™ืกืœืขืŸ ืคึฟื•ืŸ ื•ื•ืขืจื™ืึทื‘ืึทืœื– ืึธืŸ ื ื™ืฆืŸ ื™ื ื˜ืขืจืžื™ื“ื™ื™ื˜ ื˜ืขืงืขืก;
  • ืื™ืŸ ื“ื™ ื‘ืœืึธืง "ืึทืคึผืกื˜ืจื™ืยป ื ื™ื™ึท ื“ื™ืจืขืงื˜ื™ื•ื• ื™ืžืคึผืœืึทืžืขื ืึทื“ ยซื˜ืจืึทืค -", ืžื™ื˜ ื“ื™ ื”ื™ืœืฃ ืคื•ืŸ ื•ื•ืึธืก ืื™ืจ ืงืขื ืขืŸ ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ืžืึทืกืข ื‘ืึทืœืึทื ืกื™ื ื’ ืžื™ื˜ ืึท ื˜ืจืึทืค ืกืขืœืขืงืฆื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹ืึท ืกืขืจื•ื•ืขืจ ืคึฟืึทืจ ืคืึธืจื•ื•ืขืจื“ื™ื ื’ ื“ื™ ืงืฉืจ;
  • ืื™ืŸ ื“ื™ ืžืึธื“ื•ืœืข ngx_stream_ssl_preread ื‘ื™ื™ึทื˜ืขื•ื•ื“ื™ืง ื™ืžืคึผืœืึทืžืขื ืึทื“ $ssl_preread_protocol,
    ื•ื•ืึธืก ืกืคึผืขืฆื™ืคื™ืฆื™ืจื˜ ื“ื™ ื”ืขื›ืกื˜ืŸ ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ SSL / TLS ืคึผืจืึธื˜ืึธืงืึธืœ ื•ื•ืึธืก ื“ืขืจ ืงืœื™ืขื ื˜ ืฉื˜ื™ืฆื˜. ื“ื™ ื‘ื™ื™ึทื˜ืขื•ื•ื“ื™ืง ืึทืœืึทื•ื– ืฉืึทืคึฟืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื– ืคึฟืึทืจ ืึทืงืกืขืก ื ื™ืฆืŸ ืคืึทืจืฉื™ื“ืŸ ืคึผืจืึธื˜ืึธืงืึธืœืก ืžื™ื˜ ืื•ืŸ ืึธืŸ ืกืกืœ ื“ื•ืจืš ืื™ื™ืŸ ื ืขืฅ ืคึผืึธืจื˜ ื•ื•ืขืŸ ืคึผืจืึทืงืกื™ื™ื ื’ ืคืึทืจืงืขืจ ื ื™ืฆืŸ ื“ื™ ื”ื˜ื˜ืคึผ ืื•ืŸ ื˜ื™ื™ึทืš ืžืึทื“ื–ืฉื•ืœื–. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ืึทืงืกืขืก ื“ื•ืจืš SSH ืื•ืŸ HTTPS ื“ื•ืจืš ืื™ื™ืŸ ืคึผืึธืจื˜, ืคึผืึธืจื˜ 443 ืงืขื ืขืŸ ื–ื™ื™ืŸ ืคืึธืจื•ื•ืขืจื“ื™ื“ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ืฆื• SSH, ืึธื‘ืขืจ ืื•ื™ื‘ ื“ื™ SSL ื•ื•ืขืจืกื™ืข ืื™ื– ื“ื™ืคื™ื™ื ื“, ืคืึธืจื•ื™ืก ืฆื• HTTPS.

  • ื ื ื™ื™ึทืข ื‘ื™ื™ึทื˜ืขื•ื•ื“ื™ืง ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ ืึทืคึผืกื˜ืจื™ื ืžืึธื“ื•ืœืข "$upstream_bytes_sent", ื•ื•ืึธืก ื“ื™ืกืคึผืœื™ื™ื– ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ื‘ื™ื˜ืขืก ื˜ืจืึทื ืกืคืขืจื“ ืฆื• ื“ื™ ื’ืจื•ืคึผืข ืกืขืจื•ื•ืขืจ;
  • ืฆื• ืžืึธื“ื•ืœืข ื˜ื™ื™ึทืš ืื™ืŸ ืื™ื™ืŸ ืกืขืกื™ืข, ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืคึผืจืึธืฆืขืก ืขื˜ืœืขื›ืข ื™ื ืงืึทืžื™ื ื’ ื•ื“ืคึผ ื“ืึทื˜ืึทื’ืจืึทืžืก ืคื•ืŸ ื“ืขื ืงืœื™ืขื ื˜ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ;
  • ื“ื™ ื“ื™ืจืขืงื˜ื™ื•ื• "ืคืจืืงืกื™_ืจื™ืงื•ื•ืขืก", ืกืคึผืขืฆื™ืคื™ืฆื™ืจื˜ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ื“ืึทื˜ืึทื’ืจืึทืžืก ื‘ืืงื•ืžืขืŸ ืคื•ืŸ ื“ืขื ืงืœื™ืขื ื˜, ื•ื•ืขืŸ ืจื™ื˜ืฉื™ื ื’ ื•ื•ืึธืก ื“ื™ ื‘ื™ื™ื ื“ื™ื ื’ ืฆื•ื•ื™ืฉืŸ ื“ืขื ืงืœื™ืขื ื˜ ืื•ืŸ ื“ื™ ื™ื’ื–ื™ืกื˜ื™ื ื’ UDP ืกืขืกื™ืข ืื™ื– ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ. ื ืึธืš ื‘ืืงื•ืžืขืŸ ื“ื™ ืกืคึผืขืกื™ืคื™ืขื“ ื ื•ืžืขืจ ืคื•ืŸ ื“ืึทื˜ืึทื’ืจืึทืžืก, ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ื“ืึทื˜ืึทื’ืจืึทื ื‘ืืงื•ืžืขืŸ ืคื•ืŸ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืงืœื™ืขื ื˜ ื”ื™ื™ื‘ื˜ ืึท ื ื™ื™ึทืข ืกืขืกื™ืข;
  • ื“ื™ ื”ืขืจืŸ ื“ื™ืจืขืงื˜ื™ื•ื• ืื™ืฆื˜ ื”ืื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ืคึผืึธืจื˜ ืจื™ื™ื ื“ื–ืฉืึทื–;
  • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ืจืขืงื˜ื™ื•ื• "ssl_early_dataยป ืฆื• ื’ืขื‘ืŸ ื“ืขื ืžืึธื“ืข 0-ืจื˜ื˜ ื•ื•ืขืŸ ืื™ืจ ื ื•ืฆืŸ TLSv1.3, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืจืึทื˜ืขื•ื•ืขืŸ ืคืจื™ืขืจ ื ื™ื’ืึธื•ืฉื™ื™ื™ื˜ื™ื“ TLS ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ ืคึผืึทืจืึทืžืขื˜ืขืจืก ืื•ืŸ ืจืขื“ื•ืฆื™ืจืŸ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ RTTs ืฆื• 2 ื•ื•ืขืŸ ืื™ืจ ืจื™ื–ื•ืžื™ื ื’ ืึท ืคืจื™ืขืจ ื’ืขื’ืจื™ื ื“ืขื˜ ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’;
  • ื ื™ื• ื“ื™ื™ืจืขืงื˜ื™ื•ื•ื– ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ Keepalive ืคึฟืึทืจ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืงืึทื ืขืงืฉืึทื ื– (ืขื ื™ื™ื‘ืึทืœื™ื ื’ ืึธื“ืขืจ ื“ื™ืกื™ื™ื‘ืึทืœ ื“ื™ SO_KEEPALIVE ืึธืคึผืฆื™ืข ืคึฟืึทืจ ืกืึทืงืึทืฅ):

    • ยซproxy_socket_keepalive" - ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ "TCP Keepalive" ื ืึทื˜ื•ืจ ืคึฟืึทืจ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืงืึทื ืขืงืฉืึทื ื– ืฆื• ื“ื™ ืคึผืจืึทืงืกื™ ืกืขืจื•ื•ืขืจ;
    • ยซfastcgi_socket_keepalive" - ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ "TCP Keepalive" ื ืึทื˜ื•ืจ ืคึฟืึทืจ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืงืึทื ืขืงืฉืึทื ื– ืฆื• ื“ื™ FastCGI ืกืขืจื•ื•ืขืจ;
    • ยซgrpc_socket_keepalive" - ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ "TCP Keepalive" ื ืึทื˜ื•ืจ ืคึฟืึทืจ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืงืึทื ืขืงืฉืึทื ื– ืฆื• ื“ื™ gRPC ืกืขืจื•ื•ืขืจ;
    • ยซmemcached_socket_keepalive" - ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ "TCP Keepalive" ื ืึทื˜ื•ืจ ืคึฟืึทืจ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืงืึทื ืขืงืฉืึทื ื– ืฆื• ื“ื™ ืžืขืžืงืึทืฉื˜ ืกืขืจื•ื•ืขืจ;
    • ยซscgi_socket_keepalive" - ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ "TCP Keepalive" ื ืึทื˜ื•ืจ ืคึฟืึทืจ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืงืึทื ืขืงืฉืึทื ื– ืฆื• ื“ื™ SCGI ืกืขืจื•ื•ืขืจ;
    • ยซuwsgi_socket_keepalive" - ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ "TCP Keepalive" ื ืึทื˜ื•ืจ ืคึฟืึทืจ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืงืึทื ืขืงืฉืึทื ื– ืฆื• ื“ื™ ื•ื•ืกื’ื™ ืกืขืจื•ื•ืขืจ.
  • ืื™ืŸ ื“ื™ ื“ื™ืจืขืงื˜ื™ื•ื• "ืœื™ืžื™ื˜_ืจืขืง" ืฆื•ื’ืขื’ืขื‘ืŸ ืึท ื ื™ื™ึทืข ืคึผืึทืจืึทืžืขื˜ืขืจ "ืคืึทืจื”ืึทืœื˜ืŸ", ื•ื•ืึธืก ืฉื˜ืขืœื˜ ืึท ืฉื™ืขื•ืจ ื ืึธืš ื•ื•ืึธืก ื™ื‘ืขืจื™ืง ืจื™ืงื•ื•ืขืก ื–ืขื ืขืŸ ื“ื™ืœื™ื™ื“;
  • ื ื™ื• ื“ื™ื™ืจืขืงื˜ื™ื•ื•ื– "keepalive_timeout" ืื•ืŸ "keepalive_requests" ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ "ืึทืคึผืกื˜ืจื™ื" ื‘ืœืึธืง ืฆื• ืฉื˜ืขืœืŸ ืœื™ืžืึทืฅ ืคึฟืึทืจ Keepalive;
  • ื“ื™ "ssl" ื“ื™ืจืขืงื˜ื™ื•ื• ืื™ื– ื“ื™ืคึผืจื™ืฉื™ื™ื™ื˜ื™ื“, ืจื™ืคึผืœื™ื™ืกื˜ ื“ื•ืจืš ื“ื™ "ssl" ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ืŸ ื“ื™ "ื”ืขืจืŸ" ื“ื™ืจืขืงื˜ื™ื•ื•. ืคืขืœื ื“ื™ืง ืกืกืœ ืกืขืจื˜ื™ืคื™ืงืึทืฅ ื–ืขื ืขืŸ ืื™ืฆื˜ ื“ื™ื˜ืขืงื˜ืึทื“ ืื™ืŸ ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื˜ืขืกื˜ื™ื ื’ ื‘ื™ื ืข ื•ื•ืขืŸ ื ื™ืฆืŸ ื“ื™ "ื”ืขืจืŸ" ื“ื™ืจืขืงื˜ื™ื•ื• ืžื™ื˜ ื“ื™ "ืกืกืœ" ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ืŸ ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก;
  • ื•ื•ืขืŸ ื ื™ืฆืŸ ื“ื™ ืจืขืกืขื˜_ื˜ื™ืžืขื“ืึธื•ื˜_ืงืึทื ืขืงืฉืึทืŸ ื“ื™ืจืขืงื˜ื™ื•ื•, ืงืึทื ืขืงืฉืึทื ื– ื–ืขื ืขืŸ ืื™ืฆื˜ ืคืืจืžืื›ื˜ ืžื™ื˜ ืึท 444 ืงืึธื“ ื•ื•ืขืŸ ื“ื™ ื˜ื™ื™ืžืึทื•ื˜ ื™ืงืกืคึผื™ื™ืขืจื–;
  • SSL ืขืจืจืึธืจืก "ื”ื˜ื˜ืคึผ ื‘ืขื˜ืŸ", "ื”ื˜ื˜ืคึผืก ืคืจืืงืกื™ ื‘ืขื˜ืŸ", "ืึทื ืกื•ืคึผืคึผืึธืจื˜ืขื“ ืคึผืจืึธื˜ืึธืงืึธืœ" ืื•ืŸ "ื•ื•ืขืจืกื™ืข ืฆื• ื ื™ื“ืขืจื™ืง" ื–ืขื ืขืŸ ืื™ืฆื˜ ื’ืขื•ื•ื™ื–ืŸ ืื™ืŸ ื“ื™ ืงืœืึธืฅ ืžื™ื˜ ื“ื™ ืžื“ืจื’ื” "ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข" ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ "ืงืจื™ื˜";
  • ืึทื“ื“ืขื“ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ ืึทื ืงืขื˜ืข ืื•ืคึฟืŸ ืื•ื™ืฃ Windows ืกื™ืกื˜ืขืžืขืŸ ื•ื•ืขืŸ ื ื™ืฆืŸ Windows Vista ืื•ืŸ ืฉืคึผืขื˜ืขืจ;
  • ืžืขื’ืœืขื›ืงื™ื™ื˜ ืคื•ืŸ ื ื™ืฆืŸ TLSv1.3 ื•ื•ืขืŸ ื‘ื ื™ืŸ ืžื™ื˜ ื“ื™ BoringSSL ื‘ื™ื‘ืœื™ืึธื˜ืขืง, ื ื™ื˜ ื ืึธืจ OpenSSL.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’