#632 |
option to send the access log to stdout
|
new
|
access_log stdout
|
|
enhancement
|
minor
|
#2258 |
add_header directive: A colon added after the header name passes Nginx syntax validation and breaks the website once applied
|
new
|
add_header
|
|
enhancement
|
minor
|
#761 |
The auth_request does not supports query string/arguments
|
new
|
auth,auth_request
|
|
enhancement
|
minor
|
#1215 |
Add support for SHA2 (SHA3?) family for RFC2307 passwords for HTTP Basic authentication
|
new
|
auth Basic
|
|
enhancement
|
minor
|
#557 |
autoindex_show_hidden_files (autoindex feature option to show hidden files
|
new
|
autoindex
|
|
enhancement
|
minor
|
#1738 |
NGINX Not Honoring proxy_cache_background_update with Cache-Control: stale-while-revalidate Header
|
reopened
|
background update cache control stale-while-revalidate
|
|
defect
|
minor
|
#246 |
Don't install config files for unused modules
|
assigned
|
build
|
Ruslan Ermilov
|
enhancement
|
trivial
|
#1463 |
Build in --builddir throws error on nginx.h
|
accepted
|
builddir compile
|
|
defect
|
blocker
|
#1483 |
client_max_body_size vs. auth_request unexpected behaviour
|
new
|
client_max_body_size, auth_request
|
|
enhancement
|
minor
|
#2322 |
client_max_body_size doesn't work in named location
|
new
|
client_max_body_size named location
|
|
defect
|
minor
|
#525 |
Max connection limit too low (http_limit_conn_module)
|
new
|
connection limit http_limit_conn_module
|
|
enhancement
|
minor
|
#2530 |
ACK of packet containing PATH_RESPONSE frame can't update rtt state
|
accepted
|
connection migration
|
|
defect
|
minor
|
#1417 |
Nginx won't start if hostname isn't valid
|
new
|
container
|
|
enhancement
|
minor
|
#2547 |
Support Partitioned Cookies for load balancing according to CHIPS
|
new
|
cookie, loadbalancing, chips
|
|
enhancement
|
minor
|
#2233 |
Packages for Debian Bullseye should include 32-bit x86 binaries
|
new
|
Debian Bullsye i386 32-bit
|
|
enhancement
|
minor
|
#944 |
Enchance $server_addr to return original IP even after local DNAT
|
new
|
dnat server ip
|
|
enhancement
|
major
|
#658 |
Implement new type of "resolver" -- "system" [for Docker usage]
|
new
|
docker dns resolve system
|
|
enhancement
|
minor
|
#781 |
Documentation not clear on auth_basic_user_file
|
new
|
documentation
|
|
task
|
minor
|
#2268 |
http2 client set both host and :authority header, server throws 400 bad request error
|
accepted
|
duplicate host header
|
|
defect
|
minor
|
#2219 |
Space escaping in unquoted strings
|
new
|
escaping unquoted
|
|
defect
|
minor
|
#1242 |
nginx stub_status exhancement
|
new
|
extended status stub_status
|
|
enhancement
|
minor
|
#1306 |
ngx_http_geo_module ranges do not support ipv6
|
new
|
geo
|
|
enhancement
|
minor
|
#2119 |
Add support for Maxmind's GeoIP2
|
new
|
GeoIP
|
|
enhancement
|
minor
|
#2120 |
Add Support for IP2Location and IP2Proxy BIN Database
|
new
|
GeoIP, IP2Location, IP2Proxy
|
|
enhancement
|
minor
|
#2213 |
The get_handler of ngx_http_variable_t is overwritten by ngx_http_regex_compile if existing
|
new
|
get_handler, ngx_http_variable_t
|
|
defect
|
major
|
#617 |
Add secondary groups configuration option in nginx user conf directive
|
new
|
groups, user, permissions
|
|
enhancement
|
minor
|
#2614 |
Memory-leak like issue happens as long as nginx keeps having long-lived gRPC stream connections
|
new
|
grpc, memory, leak
|
|
defect
|
critical
|
#394 |
gzip module doesn't handle all certain HTTP verbs/statuses
|
reopened
|
gzip
|
|
enhancement
|
minor
|
#1083 |
Enable gzip compression only for non "text/html" content
|
new
|
gzip gzip_types html
|
|
enhancement
|
minor
|
#1119 |
Gzip_types support pattern matching
|
new
|
gzip, mime type
|
|
enhancement
|
minor
|
#971 |
Clarify $host and $hostname in embedded variables documentation
|
new
|
$host $hostname
|
|
enhancement
|
minor
|
#2618 |
HTTP session is finalized early
|
new
|
HTTP
|
|
defect
|
blocker
|
#2109 |
Content-Type header is dropped when HTTP2 is used( HTTP status 204 only)
|
accepted
|
http2
|
|
defect
|
minor
|
#1763 |
HTTP/2 prioritization is intermittent and often ineffective
|
new
|
HTTP/2 http2
|
|
enhancement
|
minor
|
#426 |
log entire header and cookie
|
new
|
http-core-module log header
|
|
enhancement
|
minor
|
#1293 |
nginx http proxy stops sending request data after first byte of server response is received
|
new
|
http proxy upstream
|
|
enhancement
|
minor
|
#88 |
HttpRewriteModule - Feature Request - enhanced control structures
|
new
|
HttpRewriteModule request enhancement
|
somebody
|
enhancement
|
minor
|
#609 |
Apply xslt-html-parser patch to http_xslt_module (used by Diazo)
|
new
|
http_xslt_module, xslt-html-parser
|
|
enhancement
|
minor
|
#1422 |
Support IPv6 zone identifiers in URLs, e.g. for proxy_pass
|
new
|
ipv6 proxy zone link-local
|
|
enhancement
|
minor
|
#2012 |
Wrong header Connection, when keepalive is disabled
|
accepted
|
keepalive
|
|
defect
|
minor
|
#1857 |
libmaxminddb / geoip2 implementation as nginx essetial modules
|
new
|
libmaxminddb,geoip,geoip2
|
|
enhancement
|
major
|
#712 |
limit_conn and internal redirects
|
accepted
|
limit_conn index x-accel-redirect
|
|
defect
|
trivial
|
#2528 |
nginx reload with quic reuseport: quic packet rejected rc:-1
|
new
|
listen quic reuseport quic packet rejected rc:-1
|
|
defect
|
minor
|
#1467 |
Problem of location matching with a given request
|
accepted
|
location, manual
|
Yaroslav Zhuravlev
|
defect
|
minor
|
#2254 |
cache loader ignores reopen signal
|
new
|
log reopen
|
|
enhancement
|
minor
|
#1104 |
. (dot) is not allow for syslog tag
|
new
|
log syslog
|
|
enhancement
|
minor
|
#1285 |
map regexp positional captures interfere with location regexp positional captures
|
new
|
map location
|
|
defect
|
minor
|
#1446 |
gzip_types can't handle types longer than 46 chars
|
new
|
mime
|
|
defect
|
minor
|
#2216 |
Add .mjs to known JS MIME types
|
new
|
mime js javascript
|
|
enhancement
|
minor
|
#1607 |
mirror + limit_req = writing connections
|
accepted
|
mirror
|
|
defect
|
minor
|
#774 |
modern_browser // gecko version overwrites msie version
|
accepted
|
moder_browser gecko msie version
|
|
defect
|
minor
|
#55 |
Неправильно определяется версия Opera
|
accepted
|
ngx_http_browser_module, opera
|
somebody
|
defect
|
trivial
|
#1710 |
ngx_http_dav_module: Allow to configure some anti-overwrite
|
new
|
ngx_http_dav_module
|
|
enhancement
|
minor
|
#1025 |
No country detected for requests with X-Forwarded-For 127.0.0.1 or any reserved IP address
|
new
|
ngx_http_geoip_module, geoip
|
|
enhancement
|
minor
|
#1458 |
ngx_http_ssl_module http block config bug
|
new
|
ngx_http_ssl_module
|
|
defect
|
minor
|
#2465 |
Execute system commands with njs (JavaScript)
|
new
|
njs
|
|
enhancement
|
major
|
#2579 |
OCSP stapling vs. $ssl_server_name
|
reopened
|
OCSP $ssl_server_name
|
|
defect
|
major
|
#2449 |
Allow using OpenSSL 3.0 "provider" API instead of deprecated "engine" API
|
new
|
openssl, provider, tpm, pkcs11, engine
|
|
enhancement
|
minor
|
#165 |
Nginx worker processes don't seem to have the right group permissions
|
accepted
|
permissions socket
|
somebody
|
enhancement
|
minor
|
#2441 |
pkg-oss - build error
|
accepted
|
pkg-oss, docker
|
|
defect
|
minor
|
#1472 |
Downloads stop after 1GB depending of network
|
accepted
|
proxy
|
|
enhancement
|
minor
|
#1535 |
proxy_bind and resolver IP version mismatch
|
new
|
proxy_bind, resolver
|
|
enhancement
|
minor
|
#1216 |
Confusing use of 'URI' when referring to a path in the proxy_pass documentation
|
new
|
proxy_pass
|
|
defect
|
minor
|
#2625 |
nginx proxy_pass variable DNS resolution not updated when there is another proxy_pass with same domain and without variable
|
new
|
proxy_pass dns
|
|
defect
|
minor
|
#1788 |
stream proxy_pass ipv6 first
|
new
|
proxy_pass resolver
|
|
enhancement
|
minor
|
#1639 |
Add support for writing PROXY protocol v2 to upstream
|
new
|
proxy protocol proxy-protocol proxy_protocol
|
|
enhancement
|
minor
|
#2167 |
variable support in proxy_protocol stream module
|
new
|
proxy_protocol, stream, variable
|
|
enhancement
|
minor
|
#1459 |
Can't vary on request headers set by proxy_set_header (rev. proxy mode)
|
accepted
|
proxy_set_header vary cache
|
|
enhancement
|
minor
|
#2621 |
QUIC ACKs could be delayed by congestion controllers
|
new
|
quic, ack
|
|
defect
|
minor
|
#2529 |
Can pto timeout check removed from ngx_quic_pto_handler?
|
new
|
quic code
|
|
defect
|
minor
|
#1060 |
limit_req_zone add longer periods
|
new
|
ratelimit
|
|
enhancement
|
minor
|
#1965 |
$request_time less than $upstream_response_time
|
accepted
|
request_time
|
|
defect
|
minor
|
#1179 |
Allow upstreams to be resolved using internal ngx resolver instead of getaddrinfo()
|
new
|
resolver upstream
|
|
enhancement
|
minor
|
#2448 |
Restrict Request Response Cycle Length
|
new
|
Restrict Request Length
|
|
enhancement
|
minor
|
#2608 |
Request to Add Documentation Link on Trailing Slash Behavior in Reverse Proxy Setup
|
new
|
reverse proxy, docs
|
|
enhancement
|
trivial
|
#348 |
Excessive urlencode in if-set
|
accepted
|
rewrite
|
|
defect
|
minor
|
#2199 |
Online documentation: converting rewrite rules typo
|
new
|
RewriteRule
|
|
enhancement
|
minor
|
#1082 |
rpmlint issues centos7
|
assigned
|
rpm rpmlint
|
thresh
|
enhancement
|
minor
|
#1850 |
Content of the variable $sent_http_connection is incorrect
|
accepted
|
$sent_http_connection, sent_http
|
|
defect
|
minor
|
#1644 |
Educate people about the importance of "Server" HTTP header
|
new
|
server header removing stripping hardening server_tokens headers-more-nginx-module
|
|
enhancement
|
trivial
|
#969 |
proxy module does not honour proxy_max_temp_file_size on cacheable responses
|
new
|
slice proxy cache temp
|
|
enhancement
|
minor
|
#692 |
Introduce variable to get SSL cipher bits of current connection
|
new
|
ssl
|
|
enhancement
|
minor
|
#770 |
Enable PolarSSL or Botan as a compile-time alternative to OpenSSL
|
new
|
ssl security
|
|
enhancement
|
minor
|
#1164 |
Option to turn off TLS protocols errors in the logs
|
new
|
ssl tls
|
|
enhancement
|
minor
|
#2568 |
Introduce send_timeout and proxy_send_timeout in the stream module
|
new
|
stream
|
|
enhancement
|
minor
|
#2389 |
"proxy_cache_background_update on" ignored using subrequest (more exactly: nested subrequest)
|
reopened
|
subrequest background cache
|
|
defect
|
major
|
#1388 |
Implement TLS Dynamic Record Sizing (CloudFlare patch ready)
|
new
|
tls
|
|
enhancement
|
minor
|
#2546 |
Support RFC 8879: certificate compression
|
new
|
TLS
|
|
enhancement
|
minor
|
#2275 |
Support Encrypted Client Hello
|
new
|
TLS, security
|
|
enhancement
|
minor
|
#2242 |
DNS UDP proxy with UNIX socket is not working
|
accepted
|
unix socket, stream module, dns proxy
|
|
defect
|
minor
|
#220 |
Feature Request - Per-server proxy_connect_timeout
|
new
|
upstream proxy_connect_timeout
|
somebody
|
enhancement
|
minor
|
#221 |
Feature Request - X-Accel header to singal if another upstream server should be attempted or not
|
new
|
upstream x-accel abort
|
somebody
|
enhancement
|
minor
|
#430 |
Allow variables in userid_domain
|
new
|
userid domain
|
|
enhancement
|
minor
|
#772 |
No Vary header on 304 Response.
|
assigned
|
Vary
|
Maxim Dounin
|
defect
|
minor
|
#242 |
DAV module does not respect if-unmodified-since
|
accepted
|
webdav
|
somebody
|
defect
|
minor
|
#1598 |
Windows Path Length Limitation issue
|
accepted
|
win32
|
|
defect
|
minor
|
#52 |
urlencode/urldecode needed in rewrite and other places
|
accepted
|
|
somebody
|
enhancement
|
minor
|
#68 |
Include larger speed units for HttpLimitReqModule
|
new
|
|
somebody
|
enhancement
|
major
|
#86 |
the "if" directive have problems in location context
|
accepted
|
|
somebody
|
defect
|
minor
|
#129 |
include_shell directive
|
new
|
|
somebody
|
enhancement
|
minor
|