id Summary Status Keywords Owner Type Priority 1463 Build in --builddir throws error on nginx.h accepted builddir compile defect blocker 2618 HTTP session is finalized early new HTTP defect blocker 2619 Issues with HTTP/3 Configuration and listen 443 quic reuseport; Directive Affecting Server Block Functionality new defect blocker 2656 The following signatures were invalid: EXPKEYSIG ABF5BD827BD9BF62 nginx signing key new defect blocker 2664 broken header while reading PROXY protocol in nginx stream with pass module new defect blocker 2671 Nginx Mail Proxy TLS Problem On Postfix new defect blocker 868 new variable: $remote_addr_anon new enhancement critical 2477 "proxy_redirect is missing feature for HTTP header ""Link""" new enhancement critical 2600 https://nginx.org/packages down? reopened defect critical 2610 Nginx returning 502 gateway error repeatedly new defect critical 68 Include larger speed units for HttpLimitReqModule new somebody enhancement major 224 Args Delimiter new somebody enhancement major 405 Support for resumeable uploads new enhancement major 508 nginx rewrite URL decoding first encoded character in URI new defect major 640 enable usage of $ in variable new enhancement major 644 nginx rewrite $uri not right reopened defect major 798 Implement http_brotli_static module new enhancement major 944 Enchance $server_addr to return original IP even after local DNAT new dnat server ip enhancement major 960 TCP connection re-use without upstream conf new enhancement major 1134 CVE-2016-1247 new enhancement major 1162 Adding HTTP Forward Proxy support in core like apache new enhancement major 1222 Update doc to mention about HTSP new enhancement major 1857 libmaxminddb / geoip2 implementation as nginx essetial modules new libmaxminddb,geoip,geoip2 enhancement major 2213 The get_handler of ngx_http_variable_t is overwritten by ngx_http_regex_compile if existing new get_handler, ngx_http_variable_t defect major 2284 Support RFC5424 log records new enhancement major 2389 """proxy_cache_background_update on"" ignored using subrequest (more exactly: nested subrequest)" reopened subrequest background cache defect major 2465 Execute system commands with njs (JavaScript) new njs enhancement major 2482 * is not evaluated to :: new enhancement major 2554 Some of the requests getting stuck after reload. new defect major 2579 OCSP stapling vs. $ssl_server_name reopened OCSP $ssl_server_name defect major 2580 Full native WebDAV support new enhancement major 2582 HTTP3 working with curl but not in Browser new defect major 2615 Don't proxy connection-specific headers by default new enhancement major 2626 cannot use mTLS on nginx via http3 protocol new defect major 2639 Embedded trailer variables have no value new defect major 2648 Nginx will disable ocsp stapling over all domains even if one is bogus new defect major 2649 "ngx_mail_ssl_module ""starttls only"" issue if without smtp authentication" new email starttls defect major 2653 MIME type image/jpeg for filename extension .jfif new enhancement major 2660 SSI is included twice when empty response is loaded from proxy cache new ssi proxy_cache defect major 2661 ssl_verify_client can't configured with result of map operation new defect major 2676 Nginx over Docker goes to endless loop and never replies new defect major 2680 Error Signal 11 on reload if any dynamic module is loaded new defect major 52 urlencode/urldecode needed in rewrite and other places accepted somebody enhancement minor 86 "the ""if"" directive have problems in location context" accepted somebody defect minor 88 HttpRewriteModule - Feature Request - enhanced control structures new HttpRewriteModule request enhancement somebody enhancement minor 129 include_shell directive new somebody enhancement minor 146 Age header for proxy_http_version 1.1 new somebody enhancement minor 165 Nginx worker processes don't seem to have the right group permissions accepted permissions socket somebody enhancement minor 191 literal newlines logged in error log accepted somebody defect minor 220 Feature Request - Per-server proxy_connect_timeout new upstream proxy_connect_timeout somebody enhancement minor 221 Feature Request - X-Accel header to singal if another upstream server should be attempted or not new upstream x-accel abort somebody enhancement minor 225 Please support nested if statements with SSI new somebody enhancement minor 237 Add optional systemd socket activation support reopened somebody enhancement minor 242 DAV module does not respect if-unmodified-since accepted webdav somebody defect minor 287 Add option to enable IP_TRANSPARENT new enhancement minor 318 Change response behavior when SSL client certificate won't validate new enhancement minor 319 koi-utf koi-win win-utf in conf are artifacts of the past reopened enhancement minor 320 nginx should reliably check client connection close with pending data accepted enhancement minor 348 Excessive urlencode in if-set accepted rewrite defect minor 376 log file reopen should pass opened fd from master process accepted enhancement minor 384 trailing dot in server_name accepted defect minor 394 gzip module doesn't handle all certain HTTP verbs/statuses reopened gzip enhancement minor 407 Cache X-Accel-Redirect responses (from fastcgi) new enhancement minor 417 ngx_cache_purge new enhancement minor 426 log entire header and cookie new http-core-module log header enhancement minor 430 Allow variables in userid_domain new userid domain enhancement minor 454 disable ngx_http_upstream_store for HEAD requests reopened enhancement minor 523 Information leak with automatic trailing slash redirect new enhancement minor 525 Max connection limit too low (http_limit_conn_module) new connection limit http_limit_conn_module enhancement minor 557 autoindex_show_hidden_files (autoindex feature option to show hidden files new autoindex enhancement minor 564 map regex matching affects rewrite directive accepted defect minor 586 variable support for client_max_body_size new enhancement minor 606 lower log level of ngx_http_access_module forbidden access new enhancement minor 609 Apply xslt-html-parser patch to http_xslt_module (used by Diazo) new http_xslt_module, xslt-html-parser enhancement minor 617 Add secondary groups configuration option in nginx user conf directive new groups, user, permissions enhancement minor 632 option to send the access log to stdout new access_log stdout enhancement minor 633 limit_except causes 404 new defect minor 658 "Implement new type of ""resolver"" -- ""system"" [for Docker usage]" new docker dns resolve system enhancement minor 692 Introduce variable to get SSL cipher bits of current connection new ssl enhancement minor 697 Couldn't produce multiple error log items from FastCGI new enhancement minor 704 Nginx configure script can't detect groups reliably new defect minor 711 Support X-Forwarded-Proto or similar when operating as a backend behind a SSL terminator new enhancement minor 738 Describe how to extend mime.types in types docs new defect minor 761 The auth_request does not supports query string/arguments new auth,auth_request enhancement minor 770 Enable PolarSSL or Botan as a compile-time alternative to OpenSSL new ssl security enhancement minor 772 No Vary header on 304 Response. assigned Vary Maxim Dounin defect minor 774 modern_browser // gecko version overwrites msie version accepted moder_browser gecko msie version defect minor 775 Support for more complex satisfy configurations new enhancement minor 778 Immediatley expire cached responses new enhancement minor 781 Documentation not clear on auth_basic_user_file new documentation task minor 782 nginx doesn't check delta CRLs reopened enhancement minor 790 Support for send log with GELF (Graylog Extended Log Format) new enhancement minor 812 Fetch OCSP responses on startup, and store across restarts new enhancement minor 853 Поведение cache_use_stale updating если новые ответы нельзя кешировать accepted enhancement minor 861 Possibility of Inconsistent HPACK Dynamic Table Size in HTTP/2 Implementation accepted defect minor 869 open_file_cache with NGX_HAVE_PREAD 0 new defect minor 915 """Upgrade"" header should not be proxied over h2" new enhancement minor 938 Концепт модуля: Миниатюры как часть прогрессивных JPEG, PNG. new enhancement minor 969 proxy module does not honour proxy_max_temp_file_size on cacheable responses new slice proxy cache temp enhancement minor 971 Clarify $host and $hostname in embedded variables documentation new $host $hostname enhancement minor 985 request_id variable, needs more documentation new enhancement minor 990 ssl_stapling_file does not work with multiple certificates reopened enhancement minor 994 perl_require directive has effect only at first config accepted defect minor 1004 try_files outside of location{} triggered when no location{} matches new enhancement minor 1010 Invalid request sent when serving error pages from upstream new defect minor 1025 No country detected for requests with X-Forwarded-For 127.0.0.1 or any reserved IP address new ngx_http_geoip_module, geoip enhancement minor 1036 Add tcpi_total_retrans to tcp_info variables new enhancement minor 1055 Allow to configure ssl_ciphers in multiple lines new enhancement minor 1058 недокументированный редирект? accepted defect minor 1059 syntax check error when an upstream is used in proxy_pass using both http and https and is defined after new defect minor 1060 limit_req_zone add longer periods new ratelimit enhancement minor 1082 rpmlint issues centos7 assigned rpm rpmlint thresh enhancement minor 1083 "Enable gzip compression only for non ""text/html"" content" new gzip gzip_types html enhancement minor 1085 multiple calls to make install from a read-only source fails to copy config files new defect minor 1104 . (dot) is not allow for syslog tag new log syslog enhancement minor 1114 New variable suggestion (Date/Time) new enhancement minor 1119 Gzip_types support pattern matching new gzip, mime type enhancement minor 1145 "Can't set redirection port to the port from the ""Host"" request header field" new enhancement minor 1151 Use sched_getaffinity() and CPU_COUNT() for ngx_ncpu on Linux new enhancement minor 1152 Custom error_page doesn't work for HTTP error 413 reopened defect minor 1154 Passing URG flag via nginx new enhancement minor 1164 Option to turn off TLS protocols errors in the logs new ssl tls enhancement minor 1179 Allow upstreams to be resolved using internal ngx resolver instead of getaddrinfo() new resolver upstream enhancement minor 1182 "Responses with ""no-cache"" or ""max-age=0"" should be cached" new enhancement minor 1188 "Send ""immutable"" keyword in Cache-Control when ""expires max""" new enhancement minor 1215 Add support for SHA2 (SHA3?) family for RFC2307 passwords for HTTP Basic authentication new auth Basic enhancement minor 1216 Confusing use of 'URI' when referring to a path in the proxy_pass documentation new proxy_pass defect minor 1230 proxy_next_upstream: Add a config to add other errors new enhancement minor 1238 Core dump when $limit_rate is set both in a map and in a location accepted defect minor 1242 nginx stub_status exhancement new extended status stub_status enhancement minor 1262 connect_(timeout|error) option in proxy_next_upstream new enhancement minor 1282 Add nginx.repo file to RPM repos new enhancement minor 1285 map regexp positional captures interfere with location regexp positional captures new map location defect minor 1293 nginx http proxy stops sending request data after first byte of server response is received new http proxy upstream enhancement minor 1294 Add version-information resource new enhancement minor 1306 ngx_http_geo_module ranges do not support ipv6 new geo enhancement minor 1329 Blocking STALE requests when using fastcgi_cache_background_update new defect minor 1348 proxy_cache_background_update has problem with slice module new defect minor 1353 "http and stream on the same ""listen"" should conflict" new enhancement minor 1360 enhancement: auto-reload map includes new enhancement minor 1369 Add proxy_detect_mime setting new enhancement minor 1383 Error if using proxy_pass with variable and limit_except accepted defect minor 1388 Implement TLS Dynamic Record Sizing (CloudFlare patch ready) new tls enhancement minor 1393 please add ngx_google_perftools_module to centos 7 rpm new enhancement minor 1406 "duplicated ""content-encoding"" while proxy server return a empty content-encoding header" new defect minor 1407 Should application/javascript be text/javascript in mime.types reopened enhancement minor 1417 Nginx won't start if hostname isn't valid new container enhancement minor 1422 Support IPv6 zone identifiers in URLs, e.g. for proxy_pass new ipv6 proxy zone link-local enhancement minor 1437 Optimize locality for listening sockets with the help of SO_INCOMING_CPU new enhancement minor 1446 gzip_types can't handle types longer than 46 chars new mime defect minor 1458 ngx_http_ssl_module http block config bug new ngx_http_ssl_module defect minor 1459 Can't vary on request headers set by proxy_set_header (rev. proxy mode) accepted proxy_set_header vary cache enhancement minor 1465 configure: use -iquote for $ngx_module_incs new defect minor 1467 Problem of location matching with a given request accepted location, manual Yaroslav Zhuravlev defect minor 1472 Downloads stop after 1GB depending of network accepted proxy enhancement minor 1480 Automatic Let's Encrypt certificate provisioning and renewal new enhancement minor 1483 client_max_body_size vs. auth_request unexpected behaviour new client_max_body_size, auth_request enhancement minor 1500 ngx_hash_t can have only lower case key accepted enhancement minor 1505 Milliseconds and dynamic time support for *_cache_valid new enhancement minor 1506 bind() in configuration test is too cautious new enhancement minor 1535 proxy_bind and resolver IP version mismatch new proxy_bind, resolver enhancement minor 1536 grpc-web (grpc for browsers) new enhancement minor 1573 adding text/css to the default list for the charset_types directive new enhancement minor 1579 Mirror subrequests ignore the keepalive flag new defect minor 1598 Windows Path Length Limitation issue accepted win32 defect minor 1607 mirror + limit_req = writing connections accepted mirror defect minor 1617 preread data ignored when SSL is terminated new enhancement minor 1624 support json return type in stub_status new enhancement minor 1629 use variable in for proxy_ssl in stream module new enhancement minor 1631 feature request: support ALTSVC frame new enhancement minor 1639 Add support for writing PROXY protocol v2 to upstream new proxy protocol proxy-protocol proxy_protocol enhancement minor 1651 client_body_in_file_only/client_body_temp_path file permissions new enhancement minor 1666 Add MSG_ZEROCOPY support new enhancement minor 1668 Channel-Bound Cookies Implementation in nginx new enhancement minor 1675 OCSP stapling not working in stream area new enhancement minor 1697 mail proxy: ManageSieve protocol support new enhancement minor 1710 ngx_http_dav_module: Allow to configure some anti-overwrite new ngx_http_dav_module enhancement minor 1719 Enhance proxy_cache_min_uses directive new enhancement minor 1732 Warn for large request bodies new enhancement minor 1737 HTTP/2 HPACK full encoding support new enhancement minor 1738 NGINX Not Honoring proxy_cache_background_update with Cache-Control: stale-while-revalidate Header reopened background update cache control stale-while-revalidate defect minor 1763 HTTP/2 prioritization is intermittent and often ineffective new HTTP/2 http2 enhancement minor 1765 configure is fragile in finding system libraries new enhancement minor 1768 Request for documentation: `--with-http_degradation_module` new enhancement minor 1775 Allow $hostname as part of name in server_name new enhancement minor 1785 Support access to environment variables in config file new enhancement minor 1788 stream proxy_pass ipv6 first new proxy_pass resolver enhancement minor 1808 Inconsistent encoding in rewrites new defect minor 1809 Allow stream with `ssl_preread on` to forward to http without leaving nginx new enhancement minor 1850 Content of the variable $sent_http_connection is incorrect accepted $sent_http_connection, sent_http defect minor 1861 Feature Request: Support `error_log off` new enhancement minor 1879 RHEL / CentOS 8 repository assigned thresh enhancement minor 1883 nginx -t doesn‘t complain about wrongly formatted server_name directive new enhancement minor 1893 Support Linux abstract namespace socket? new enhancement minor 1902 Can not use ssl_trusted_certificate to verify Clients new defect minor 1965 $request_time less than $upstream_response_time accepted request_time defect minor 1977 Implement TLS 1.3 random record padding to mitigate BREACH new enhancement minor 1992 Websocket over HTTP/2 support new enhancement minor 2010 Proxy protocol headers from stream module reported as broken by http module new defect minor 2012 Wrong header Connection, when keepalive is disabled accepted keepalive defect minor 2032 Odd image_filter behavior on site behind HTTP authentication new enhancement minor 2048 Document that 'proxy_buffering off' disables caching assigned Yaroslav Zhuravlev defect minor 2090 proxy_pass cannot have URI part if in some situations. new enhancement minor 2109 Content-Type header is dropped when HTTP2 is used( HTTP status 204 only) accepted http2 defect minor 2119 Add support for Maxmind's GeoIP2 new GeoIP enhancement minor 2120 Add Support for IP2Location and IP2Proxy BIN Database new GeoIP, IP2Location, IP2Proxy enhancement minor 2127 ngx_http_realip_module changes $remote_addr which leads to wrong ips in X-Forwarded-For received by upstream service accepted defect minor 2131 NGNIX needs root cert in the chain for Client validation. new enhancement minor 2132 ssl_ocsp / ssl_stapling for ngx_mail_ssl_module new enhancement minor 2148 proxy_ssl_verify does not support iPAddress subjectAlternativeName accepted enhancement minor 2161 Allow accessing arbitrary cookies. new enhancement minor 2167 variable support in proxy_protocol stream module new proxy_protocol, stream, variable enhancement minor 2182 Nginx doesn't delete temp cache files after a crash new enhancement minor 2199 Online documentation: converting rewrite rules typo new RewriteRule enhancement minor 2216 Add .mjs to known JS MIME types new mime js javascript enhancement minor 2219 Space escaping in unquoted strings new escaping unquoted defect minor 2222 add_after_body concatenates (upstream proxied) gziped content with uncompressed local data new enhancement minor 2224 HTTP/2 in nginx does not use double-GOAWAY for graceful connection shutdown reopened enhancement minor 2233 Packages for Debian Bullseye should include 32-bit x86 binaries new Debian Bullsye i386 32-bit enhancement minor 2242 DNS UDP proxy with UNIX socket is not working accepted unix socket, stream module, dns proxy defect minor 2254 cache loader ignores reopen signal new log reopen enhancement minor 2258 add_header directive: A colon added after the header name passes Nginx syntax validation and breaks the website once applied new add_header enhancement minor 2268 http2 client set both host and :authority header, server throws 400 bad request error accepted duplicate host header defect minor 2275 Support Encrypted Client Hello new TLS, security enhancement minor 2291 Regex plus variable in Nginx `proxy_redirect` accepted defect minor 2300 Link variable index from map module docs new enhancement minor 2301 Add examples for core variables new enhancement minor 2310 Document behaviour for all config statements in nested location blocks accepted defect minor 2322 client_max_body_size doesn't work in named location new client_max_body_size named location defect minor 2332 Include $request_id in error.log messages new enhancement minor 2350 Option to have set_real_ip_from use the proxied client ip when using proxy protocol. new enhancement minor 2351 Support reading file ETag from additional sources new enhancement minor 2376 GRPC: upstream rejected request with error while reading response header from upstream reopened defect minor 2395 `proxy_pass https://example` if `upstream example { server example.com; }` is defined, uses port `80`, not `443` per `https` new enhancement minor 2401 Deployment on Heroku: add options to handle SIGTERM new enhancement minor 2410 Add a doctype to autoindex HTML output accepted enhancement minor 2419 new variable is needed(the port of nginx server which sending the request to back-end) new enhancement minor 2421 proxy_next_upstream_tries might be ignored with upstream keepalive accepted enhancement minor 2426 Nginx repository for debian doesn't have 1.22.1 deb for Buster new defect minor 2429 Ship FHS compliant packages (/var/run > /run) new defect minor 2434 Support dark mode in error pages new enhancement minor 2441 pkg-oss - build error accepted pkg-oss, docker defect minor 2448 Restrict Request Response Cycle Length new Restrict Request Length enhancement minor 2449 "Allow using OpenSSL 3.0 ""provider"" API instead of deprecated ""engine"" API" new openssl, provider, tpm, pkcs11, engine enhancement minor 2475 access_log with if does not work when variable name starts with a number new defect minor 2484 When reuseport is not present with listen 443 quic, only HTTP/2 works not HTTP/3 reopened reuseport defect minor 2486 Documentation for client_max_body_size may contain an error new enhancement minor 2490 the backup upstream response inherits the response value of the previous upstream that failed. new defect minor 2509 Support IPv6 interface identifiers outside of URLs new enhancement minor 2526 wrong gpg key for nginx-stable repo new defect minor 2528 nginx reload with quic reuseport: quic packet rejected rc:-1 new listen quic reuseport quic packet rejected rc:-1 defect minor 2529 Can pto timeout check removed from ngx_quic_pto_handler? new quic code defect minor 2530 ACK of packet containing PATH_RESPONSE frame can't update rtt state accepted connection migration defect minor 2546 Support RFC 8879: certificate compression new TLS enhancement minor 2547 Support Partitioned Cookies for load balancing according to CHIPS new cookie, loadbalancing, chips enhancement minor 2548 Worker infinite loop in ngx_http_do_read_client_request_body() new defect minor 2560 "Inclusive language: rename default branch of official GitHub tracker repo nginx/nginx from ""master"" to ""main""?" new enhancement minor 2562 SSL: use server names from upstream configuration for proxied server's name validation new enhancement minor 2567 sub_filter and gziped payload should trigger warning new enhancement minor 2568 Introduce send_timeout and proxy_send_timeout in the stream module new stream enhancement minor 2603 RFE: please provide installable interface to allow build and install own ngingx modules new enhancement minor 2604 Errors handling when streaming new defect minor 2607 How to link custom library to nginx new defect minor 2613 How to make openresty to wait on dependent library to be built before openresty new defect minor 2617 nginx 1.22 - sending GOAWAY to client after 60s new defect minor 2620 IPv6 with HTTP/3 / QUIC don't work new defect minor 2624 Challenges Configuring HTTP/3 for Multiple Domains with Distinct SSL Certificates in Nginx 1.25.4 new defect minor 2625 nginx proxy_pass variable DNS resolution not updated when there is another proxy_pass with same domain and without variable new proxy_pass dns defect minor 2627 different nginx behavior as v4 and v6 new defect minor 2630 Unable to remove Cookie from request header new defect minor 2637 Documentation for server_name does not mention special case of underscore new defect minor 2640 Rewrite module directives are not inherited into the limit_except block new task minor 2642 proxy_cache_revalidate seems to prevent the cache manager to remove inactive cache objects new cache defect minor 2643 ssl_reject_handshake not working as expected new ssl_reject_handshake defect minor 2644 Different User-Agent detection at nginx and PHP via FastCGI new UserAgent defect minor 2650 Uncovered edge case in host header validation new host, patch defect minor 2657 Specail redirect in location does not resolve upstream names new proxy_pass, upstream, variables defect minor 2658 proxy_set_body new proxy_set_body defect minor 2666 """Content-Length: 1\t\r\n"" is not treated as a valid Content-Length" new defect minor 2667 Ubuntu repository documentation: keyring may need permissions set accepted Ubuntu Permisisons defect minor 2669 Problems with using the $ sign in third-party modules in regexp templates new defect minor 2670 Экранирование $ в конфигурации сторонних модулей new defect minor 2673 ngx_http_limit_req_module race condition that can potentialy result in wrong delay calculation new limit-req-module race-condition defect minor 2677 Support for resumable uploads new defect minor 2679 Low throughput with HTTP/3 new defect minor 2685 stub_status counter leak when killing old workers new defect minor 55 Неправильно определяется версия Opera accepted ngx_http_browser_module, opera somebody defect trivial 246 Don't install config files for unused modules assigned build Ruslan Ermilov enhancement trivial 712 limit_conn and internal redirects accepted limit_conn index x-accel-redirect defect trivial 838 enable compare operators within if directive new enhancement trivial 1644 "Educate people about the importance of ""Server"" HTTP header" new server header removing stripping hardening server_tokens headers-more-nginx-module enhancement trivial 2608 Request to Add Documentation Link on Trailing Slash Behavior in Reverse Proxy Setup new reverse proxy, docs enhancement trivial 2641 Q:Does NGINX QUIC Support KTLS? new defect trivial