id Summary Status Owner Type Priority Milestone 1463 Build in --builddir throws error on nginx.h accepted defect blocker 2618 HTTP session is finalized early new defect blocker 2619 Issues with HTTP/3 Configuration and listen 443 quic reuseport; Directive Affecting Server Block Functionality new defect blocker 2656 The following signatures were invalid: EXPKEYSIG ABF5BD827BD9BF62 nginx signing key new defect blocker 2664 broken header while reading PROXY protocol in nginx stream with pass module new defect blocker 2671 Nginx Mail Proxy TLS Problem On Postfix new defect blocker 868 new variable: $remote_addr_anon new enhancement critical 2477 "proxy_redirect is missing feature for HTTP header ""Link""" new enhancement critical 2600 https://nginx.org/packages down? reopened defect critical 2610 Nginx returning 502 gateway error repeatedly new defect critical 68 Include larger speed units for HttpLimitReqModule new somebody enhancement major 224 Args Delimiter new somebody enhancement major 405 Support for resumeable uploads new enhancement major 508 nginx rewrite URL decoding first encoded character in URI new defect major 640 enable usage of $ in variable new enhancement major 644 nginx rewrite $uri not right reopened defect major 689 ngx_http_referer_module issue new enhancement major 798 Implement http_brotli_static module new enhancement major 944 Enchance $server_addr to return original IP even after local DNAT new enhancement major 960 TCP connection re-use without upstream conf new enhancement major 1134 CVE-2016-1247 new enhancement major 1162 Adding HTTP Forward Proxy support in core like apache new enhancement major 1222 Update doc to mention about HTSP new enhancement major 1841 Dynamic access log and rewrites new defect major 1857 libmaxminddb / geoip2 implementation as nginx essetial modules new enhancement major 2213 The get_handler of ngx_http_variable_t is overwritten by ngx_http_regex_compile if existing new defect major 2284 Support RFC5424 log records new enhancement major 2389 """proxy_cache_background_update on"" ignored using subrequest (more exactly: nested subrequest)" reopened defect major 2465 Execute system commands with njs (JavaScript) new enhancement major 2482 * is not evaluated to :: new enhancement major 2554 Some of the requests getting stuck after reload. new defect major 2579 OCSP stapling vs. $ssl_server_name reopened defect major 2580 Full native WebDAV support new enhancement major 2582 HTTP3 working with curl but not in Browser new defect major nginx-1.27 2615 Don't proxy connection-specific headers by default new enhancement major 2626 cannot use mTLS on nginx via http3 protocol new defect major nginx-1.27 2639 Embedded trailer variables have no value new defect major 2648 Nginx will disable ocsp stapling over all domains even if one is bogus new defect major 2649 "ngx_mail_ssl_module ""starttls only"" issue if without smtp authentication" new defect major 2653 MIME type image/jpeg for filename extension .jfif new enhancement major 2660 SSI is included twice when empty response is loaded from proxy cache new defect major 2661 ssl_verify_client can't configured with result of map operation new defect major 2668 client_body_buffer_size - Body Larger Than Buffer Size Is Omitted new defect major 2674 Unable to set `proxy_max_temp_file_size` greater than 1024m new defect major 2676 Nginx over Docker goes to endless loop and never replies new defect major 2680 Error Signal 11 on reload if any dynamic module is loaded new defect major 52 urlencode/urldecode needed in rewrite and other places accepted somebody enhancement minor 86 "the ""if"" directive have problems in location context" accepted somebody defect minor 88 HttpRewriteModule - Feature Request - enhanced control structures new somebody enhancement minor 97 try_files and alias problems accepted somebody defect minor 129 include_shell directive new somebody enhancement minor 146 Age header for proxy_http_version 1.1 new somebody enhancement minor 165 Nginx worker processes don't seem to have the right group permissions accepted somebody enhancement minor 191 literal newlines logged in error log accepted somebody defect minor 217 "Wrong ""Content-Type"" HTTP response header in certain configuration scenarios" accepted somebody defect minor 220 Feature Request - Per-server proxy_connect_timeout new somebody enhancement minor 221 Feature Request - X-Accel header to singal if another upstream server should be attempted or not new somebody enhancement minor 225 Please support nested if statements with SSI new somebody enhancement minor 237 Add optional systemd socket activation support reopened somebody enhancement minor 239 Support for large (> 64k) FastCGI requests accepted somebody enhancement minor 242 DAV module does not respect if-unmodified-since accepted somebody defect minor 267 Introduce static variables new enhancement minor 287 Add option to enable IP_TRANSPARENT new enhancement minor 288 Wrong REQUEST_URI when using PHP with SSI new defect minor 289 Add support for HTTP Strict Transport Security (HSTS / RFC 6797) accepted enhancement minor 314 Dynamic document roots, defaults and prescedence new enhancement minor 318 Change response behavior when SSL client certificate won't validate new enhancement minor 319 koi-utf koi-win win-utf in conf are artifacts of the past reopened enhancement minor 320 nginx should reliably check client connection close with pending data accepted enhancement minor 327 Add support for animated GIF to HttpImageFilterModule new enhancement minor 348 Excessive urlencode in if-set accepted defect minor 360 Feature wish proxy_ignore_client_abort = force new enhancement minor 376 log file reopen should pass opened fd from master process accepted enhancement minor 384 trailing dot in server_name accepted defect minor 394 gzip module doesn't handle all certain HTTP verbs/statuses reopened enhancement minor 407 Cache X-Accel-Redirect responses (from fastcgi) new enhancement minor 417 ngx_cache_purge new enhancement minor 426 log entire header and cookie new enhancement minor 430 Allow variables in userid_domain new enhancement minor 454 disable ngx_http_upstream_store for HEAD requests reopened enhancement minor 523 Information leak with automatic trailing slash redirect new enhancement minor 525 Max connection limit too low (http_limit_conn_module) new enhancement minor 557 autoindex_show_hidden_files (autoindex feature option to show hidden files new enhancement minor 564 map regex matching affects rewrite directive accepted defect minor 586 variable support for client_max_body_size new enhancement minor 606 lower log level of ngx_http_access_module forbidden access new enhancement minor 609 Apply xslt-html-parser patch to http_xslt_module (used by Diazo) new enhancement minor 617 Add secondary groups configuration option in nginx user conf directive new enhancement minor 632 option to send the access log to stdout new enhancement minor 633 limit_except causes 404 new defect minor 658 "Implement new type of ""resolver"" -- ""system"" [for Docker usage]" new enhancement minor 692 Introduce variable to get SSL cipher bits of current connection new enhancement minor 697 Couldn't produce multiple error log items from FastCGI new enhancement minor 704 Nginx configure script can't detect groups reliably new defect minor 711 Support X-Forwarded-Proto or similar when operating as a backend behind a SSL terminator new enhancement minor 738 Describe how to extend mime.types in types docs new defect minor 752 try_files + subrequest + proxy-handler problem accepted defect minor 756 Client disconnect in ngx_http_image_filter_module accepted defect minor 761 The auth_request does not supports query string/arguments new enhancement minor 770 Enable PolarSSL or Botan as a compile-time alternative to OpenSSL new enhancement minor 772 No Vary header on 304 Response. assigned Maxim Dounin defect minor 774 modern_browser // gecko version overwrites msie version accepted defect minor 775 Support for more complex satisfy configurations new enhancement minor 778 Immediatley expire cached responses new enhancement minor 781 Documentation not clear on auth_basic_user_file new task minor 782 nginx doesn't check delta CRLs reopened enhancement minor 790 Support for send log with GELF (Graylog Extended Log Format) new enhancement minor 812 Fetch OCSP responses on startup, and store across restarts new enhancement minor 853 Поведение cache_use_stale updating если новые ответы нельзя кешировать accepted enhancement minor 861 Possibility of Inconsistent HPACK Dynamic Table Size in HTTP/2 Implementation accepted defect minor 869 open_file_cache with NGX_HAVE_PREAD 0 new defect minor 915 """Upgrade"" header should not be proxied over h2" new enhancement minor 936 "For security purposes it is necessary to remove or change the ""server"" header" new enhancement minor 938 Концепт модуля: Миниатюры как часть прогрессивных JPEG, PNG. new enhancement minor 969 proxy module does not honour proxy_max_temp_file_size on cacheable responses new enhancement minor 971 Clarify $host and $hostname in embedded variables documentation new enhancement minor 985 request_id variable, needs more documentation new enhancement minor 990 ssl_stapling_file does not work with multiple certificates reopened enhancement minor 994 perl_require directive has effect only at first config accepted defect minor 1004 try_files outside of location{} triggered when no location{} matches new enhancement minor 1.11 1010 Invalid request sent when serving error pages from upstream new defect minor 1025 No country detected for requests with X-Forwarded-For 127.0.0.1 or any reserved IP address new enhancement minor 1036 Add tcpi_total_retrans to tcp_info variables new enhancement minor 1055 Allow to configure ssl_ciphers in multiple lines new enhancement minor 1058 недокументированный редирект? accepted defect minor 1059 syntax check error when an upstream is used in proxy_pass using both http and https and is defined after new defect minor 1060 limit_req_zone add longer periods new enhancement minor 1.11 1082 rpmlint issues centos7 assigned thresh enhancement minor 1.11 1083 "Enable gzip compression only for non ""text/html"" content" new enhancement minor 1085 multiple calls to make install from a read-only source fails to copy config files new defect minor 1091 Add missing client certificate field variables new enhancement minor 1104 . (dot) is not allow for syslog tag new enhancement minor 1114 New variable suggestion (Date/Time) new enhancement minor 1119 Gzip_types support pattern matching new enhancement minor 1.11 1145 "Can't set redirection port to the port from the ""Host"" request header field" new enhancement minor 1151 Use sched_getaffinity() and CPU_COUNT() for ngx_ncpu on Linux new enhancement minor 1152 Custom error_page doesn't work for HTTP error 413 reopened defect minor 1154 Passing URG flag via nginx new enhancement minor 1164 Option to turn off TLS protocols errors in the logs new enhancement minor 1.11 1179 Allow upstreams to be resolved using internal ngx resolver instead of getaddrinfo() new enhancement minor 1182 "Responses with ""no-cache"" or ""max-age=0"" should be cached" new enhancement minor 1188 "Send ""immutable"" keyword in Cache-Control when ""expires max""" new enhancement minor 1215 Add support for SHA2 (SHA3?) family for RFC2307 passwords for HTTP Basic authentication new enhancement minor 1216 Confusing use of 'URI' when referring to a path in the proxy_pass documentation new defect minor 1230 proxy_next_upstream: Add a config to add other errors new enhancement minor 1238 Core dump when $limit_rate is set both in a map and in a location accepted defect minor 1242 nginx stub_status exhancement new enhancement minor 1262 connect_(timeout|error) option in proxy_next_upstream new enhancement minor 1279 Implement FIB selection for upstream connections in proxy and stream modules. new enhancement minor 1282 Add nginx.repo file to RPM repos new enhancement minor 1285 map regexp positional captures interfere with location regexp positional captures new defect minor 1288 upstream server port defaults to port 80 even for https: proxy_pass new enhancement minor 1293 nginx http proxy stops sending request data after first byte of server response is received new enhancement minor 1294 Add version-information resource new enhancement minor 1302 New variables $ssl_client_sha256_fingerprint and/or $ssl_client_sha512_fingerprint for ngx_http_ssl_module new enhancement minor 1306 ngx_http_geo_module ranges do not support ipv6 new enhancement minor 1329 Blocking STALE requests when using fastcgi_cache_background_update new defect minor 1348 proxy_cache_background_update has problem with slice module new defect minor 1353 "http and stream on the same ""listen"" should conflict" new enhancement minor 1360 enhancement: auto-reload map includes new enhancement minor 1369 Add proxy_detect_mime setting new enhancement minor 1383 Error if using proxy_pass with variable and limit_except accepted defect minor 1388 Implement TLS Dynamic Record Sizing (CloudFlare patch ready) new enhancement minor 1393 please add ngx_google_perftools_module to centos 7 rpm new enhancement minor 1402 Not invalidate cahe if fastcgi_cache_background_update is on new defect minor 1406 "duplicated ""content-encoding"" while proxy server return a empty content-encoding header" new defect minor 1407 Should application/javascript be text/javascript in mime.types reopened enhancement minor 1417 Nginx won't start if hostname isn't valid new enhancement minor 1421 worker_rlimit_nofile description is not clear new enhancement minor 1422 Support IPv6 zone identifiers in URLs, e.g. for proxy_pass new enhancement minor 1437 Optimize locality for listening sockets with the help of SO_INCOMING_CPU new enhancement minor 1446 gzip_types can't handle types longer than 46 chars new defect minor 1458 ngx_http_ssl_module http block config bug new defect minor 1459 Can't vary on request headers set by proxy_set_header (rev. proxy mode) accepted enhancement minor 1465 configure: use -iquote for $ngx_module_incs new defect minor 1467 Problem of location matching with a given request accepted Yaroslav Zhuravlev defect minor 1472 Downloads stop after 1GB depending of network accepted enhancement minor 1480 Automatic Let's Encrypt certificate provisioning and renewal new enhancement minor 1483 client_max_body_size vs. auth_request unexpected behaviour new enhancement minor 1500 ngx_hash_t can have only lower case key accepted enhancement minor 1505 Milliseconds and dynamic time support for *_cache_valid new enhancement minor 1506 bind() in configuration test is too cautious new enhancement minor 1521 Enable open_file_cache may cause index module return 403 forbidden new defect minor 1530 Origin frame (RFC 8336) support? new enhancement minor 1535 proxy_bind and resolver IP version mismatch new enhancement minor 1536 grpc-web (grpc for browsers) new enhancement minor 1573 adding text/css to the default list for the charset_types directive new enhancement minor 1579 Mirror subrequests ignore the keepalive flag new defect minor 1598 Windows Path Length Limitation issue accepted defect minor 1607 mirror + limit_req = writing connections accepted defect minor 1617 preread data ignored when SSL is terminated new enhancement minor 1619 test configuration ignoring certificates andkkeys new enhancement minor 1624 support json return type in stub_status new enhancement minor 1629 use variable in for proxy_ssl in stream module new enhancement minor 1631 feature request: support ALTSVC frame new enhancement minor 1639 Add support for writing PROXY protocol v2 to upstream new enhancement minor 1651 client_body_in_file_only/client_body_temp_path file permissions new enhancement minor 1666 Add MSG_ZEROCOPY support new enhancement minor 1668 Channel-Bound Cookies Implementation in nginx new enhancement minor 1675 OCSP stapling not working in stream area new enhancement minor 1697 mail proxy: ManageSieve protocol support new enhancement minor 1710 ngx_http_dav_module: Allow to configure some anti-overwrite new enhancement minor 1716 http2 ssl verify certificate failed should close tcp connection new defect minor 1719 Enhance proxy_cache_min_uses directive new enhancement minor 1732 Warn for large request bodies new enhancement minor 1737 HTTP/2 HPACK full encoding support new enhancement minor 1738 NGINX Not Honoring proxy_cache_background_update with Cache-Control: stale-while-revalidate Header reopened defect minor 1763 HTTP/2 prioritization is intermittent and often ineffective new enhancement minor 1765 configure is fragile in finding system libraries new enhancement minor 1768 Request for documentation: `--with-http_degradation_module` new enhancement minor 1775 Allow $hostname as part of name in server_name new enhancement minor 1785 Support access to environment variables in config file new enhancement minor 1788 stream proxy_pass ipv6 first new enhancement minor 1808 Inconsistent encoding in rewrites new defect minor 1809 Allow stream with `ssl_preread on` to forward to http without leaving nginx new enhancement minor 1850 Content of the variable $sent_http_connection is incorrect accepted defect minor 1861 Feature Request: Support `error_log off` new enhancement minor 1879 RHEL / CentOS 8 repository assigned thresh enhancement minor 1883 nginx -t doesn‘t complain about wrongly formatted server_name directive new enhancement minor 1893 Support Linux abstract namespace socket? new enhancement minor 1902 Can not use ssl_trusted_certificate to verify Clients new defect minor 1904 sendfile with io-threads - nginx mistakenly considers premature client connection close if client sends FIN at response end accepted defect minor 1958 `modern_browser` definition for Safari version is wrong/unexpected accepted defect minor 1965 $request_time less than $upstream_response_time accepted defect minor 1977 Implement TLS 1.3 random record padding to mitigate BREACH new enhancement minor 1992 Websocket over HTTP/2 support new enhancement minor 2010 Proxy protocol headers from stream module reported as broken by http module new defect minor 2012 Wrong header Connection, when keepalive is disabled accepted defect minor 2032 Odd image_filter behavior on site behind HTTP authentication new enhancement minor 2048 Document that 'proxy_buffering off' disables caching assigned Yaroslav Zhuravlev defect minor 2060 Nginx doesn't take case http_502 as unsuccessful attempt in ngx_http_grpc_module accepted defect minor 2090 proxy_pass cannot have URI part if in some situations. new enhancement minor 2109 Content-Type header is dropped when HTTP2 is used( HTTP status 204 only) accepted defect minor 2119 Add support for Maxmind's GeoIP2 new enhancement minor 2120 Add Support for IP2Location and IP2Proxy BIN Database new enhancement minor 2127 ngx_http_realip_module changes $remote_addr which leads to wrong ips in X-Forwarded-For received by upstream service accepted defect minor 2131 NGNIX needs root cert in the chain for Client validation. new enhancement minor 2132 ssl_ocsp / ssl_stapling for ngx_mail_ssl_module new enhancement minor 2148 proxy_ssl_verify does not support iPAddress subjectAlternativeName accepted enhancement minor 2161 Allow accessing arbitrary cookies. new enhancement minor 2167 variable support in proxy_protocol stream module new enhancement minor 2182 Nginx doesn't delete temp cache files after a crash new enhancement minor 2199 Online documentation: converting rewrite rules typo new enhancement minor 2216 Add .mjs to known JS MIME types new enhancement minor 2219 Space escaping in unquoted strings new defect minor 2222 add_after_body concatenates (upstream proxied) gziped content with uncompressed local data new enhancement minor 2224 HTTP/2 in nginx does not use double-GOAWAY for graceful connection shutdown reopened enhancement minor 2233 Packages for Debian Bullseye should include 32-bit x86 binaries new enhancement minor 2242 DNS UDP proxy with UNIX socket is not working accepted defect minor 2254 cache loader ignores reopen signal new enhancement minor 2258 add_header directive: A colon added after the header name passes Nginx syntax validation and breaks the website once applied new enhancement minor 2268 http2 client set both host and :authority header, server throws 400 bad request error accepted defect minor 2275 Support Encrypted Client Hello new enhancement minor 2282 Add audio/x-flac to MIME types new enhancement minor 2291 Regex plus variable in Nginx `proxy_redirect` accepted defect minor 2300 Link variable index from map module docs new enhancement minor 2301 Add examples for core variables new enhancement minor 2310 Document behaviour for all config statements in nested location blocks accepted defect minor 2322 client_max_body_size doesn't work in named location new defect minor 2332 Include $request_id in error.log messages new enhancement minor 2350 Option to have set_real_ip_from use the proxied client ip when using proxy protocol. new enhancement minor 2351 Support reading file ETag from additional sources new enhancement minor 2376 GRPC: upstream rejected request with error while reading response header from upstream reopened defect minor 2391 bad parsing of Content-Type (sub_filter_types) new enhancement minor 2395 `proxy_pass https://example` if `upstream example { server example.com; }` is defined, uses port `80`, not `443` per `https` new enhancement minor 2401 Deployment on Heroku: add options to handle SIGTERM new enhancement minor 2410 Add a doctype to autoindex HTML output accepted enhancement minor 2419 new variable is needed(the port of nginx server which sending the request to back-end) new enhancement minor 2421 proxy_next_upstream_tries might be ignored with upstream keepalive accepted enhancement minor 2426 Nginx repository for debian doesn't have 1.22.1 deb for Buster new defect minor 2429 Ship FHS compliant packages (/var/run > /run) new defect minor 2434 Support dark mode in error pages new enhancement minor 2438 Improve fastcgi_cache_key documentation accepted task minor 2441 pkg-oss - build error accepted defect minor 2448 Restrict Request Response Cycle Length new enhancement minor 2449 "Allow using OpenSSL 3.0 ""provider"" API instead of deprecated ""engine"" API" new enhancement minor 2454 image_filter resize is not working correctly with some PNG files.(nginx is changing background color) new defect minor 2475 access_log with if does not work when variable name starts with a number new defect minor 2484 When reuseport is not present with listen 443 quic, only HTTP/2 works not HTTP/3 reopened defect minor nginx-1.26 2486 Documentation for client_max_body_size may contain an error new enhancement minor 2490 the backup upstream response inherits the response value of the previous upstream that failed. new defect minor 2509 Support IPv6 interface identifiers outside of URLs new enhancement minor 2526 wrong gpg key for nginx-stable repo new defect minor 2528 nginx reload with quic reuseport: quic packet rejected rc:-1 new defect minor 2529 Can pto timeout check removed from ngx_quic_pto_handler? new defect minor 2530 ACK of packet containing PATH_RESPONSE frame can't update rtt state accepted defect minor 2542 ssl_ecdh_curve is sometimes ignored in server blocks new defect minor 2546 Support RFC 8879: certificate compression new enhancement minor 2547 Support Partitioned Cookies for load balancing according to CHIPS new enhancement minor 2548 Worker infinite loop in ngx_http_do_read_client_request_body() new defect minor 2552 Correct xsl and xslt mimetypes missing from ngxinx mime.types file new enhancement minor 2560 "Inclusive language: rename default branch of official GitHub tracker repo nginx/nginx from ""master"" to ""main""?" new enhancement minor 2562 SSL: use server names from upstream configuration for proxied server's name validation new enhancement minor 2567 sub_filter and gziped payload should trigger warning new enhancement minor 2568 Introduce send_timeout and proxy_send_timeout in the stream module new enhancement minor 2603 RFE: please provide installable interface to allow build and install own ngingx modules new enhancement minor 2604 Errors handling when streaming new defect minor 2607 How to link custom library to nginx new defect minor 2609 Custom 413 Error Page Not Displayed for Oversized Uploads new defect minor 2613 How to make openresty to wait on dependent library to be built before openresty new defect minor 2617 nginx 1.22 - sending GOAWAY to client after 60s new defect minor 2620 IPv6 with HTTP/3 / QUIC don't work new defect minor nginx-1.27 2624 Challenges Configuring HTTP/3 for Multiple Domains with Distinct SSL Certificates in Nginx 1.25.4 new defect minor 2625 nginx proxy_pass variable DNS resolution not updated when there is another proxy_pass with same domain and without variable new defect minor 2627 different nginx behavior as v4 and v6 new defect minor 2630 Unable to remove Cookie from request header new defect minor 2637 Documentation for server_name does not mention special case of underscore new defect minor 2638 nginx fails to restart after upgrade or reinstall of nginx.org RPM package via dnf new defect minor 2640 Rewrite module directives are not inherited into the limit_except block new task minor 2642 proxy_cache_revalidate seems to prevent the cache manager to remove inactive cache objects new defect minor 2643 ssl_reject_handshake not working as expected new defect minor 2644 Different User-Agent detection at nginx and PHP via FastCGI new defect minor 2650 Uncovered edge case in host header validation new defect minor 2657 Specail redirect in location does not resolve upstream names new defect minor 2658 proxy_set_body new defect minor 2666 """Content-Length: 1\t\r\n"" is not treated as a valid Content-Length" new defect minor 2667 Ubuntu repository documentation: keyring may need permissions set accepted defect minor 2669 Problems with using the $ sign in third-party modules in regexp templates new defect minor 2670 Экранирование $ в конфигурации сторонних модулей new defect minor 2673 ngx_http_limit_req_module race condition that can potentialy result in wrong delay calculation new defect minor 2677 Support for resumable uploads new defect minor 2679 Low throughput with HTTP/3 new defect minor 2685 stub_status counter leak when killing old workers new defect minor 55 Неправильно определяется версия Opera accepted somebody defect trivial 241 Ability to align cropped images in image_filter new somebody enhancement trivial 246 Don't install config files for unused modules assigned Ruslan Ermilov enhancement trivial 712 limit_conn and internal redirects accepted defect trivial 838 enable compare operators within if directive new enhancement trivial 1644 "Educate people about the importance of ""Server"" HTTP header" new enhancement trivial 1824 Bypassing cache if worker failed to allocate node in cache keys zone ? new enhancement trivial 2608 Request to Add Documentation Link on Trailing Slash Behavior in Reverse Proxy Setup new enhancement trivial 2641 Q:Does NGINX QUIC Support KTLS? new defect trivial