Timeline



09/26/18:

08:38 Ticket #1643 (Proxy Protocol documentation has the wrong variables) updated by maxim
Status, Owner changed

09/25/18:

23:05 Ticket #1644 (Educate people about the importance of "Server" HTTP header) created by Ivan Aksamentov
Nginx Inc. should consider increasing the visibility of the problem of …
21:53 Ticket #1641 (Possible buffer overflow in ngx_http_request (1.15.3)) updated by Ivan Aksamentov
Replying to vbart: Ah, I see. I was mislead by all these …
20:42 Changeset in nginx_org [2241:b7ac730b96f3] by Sergey Kandaurov <pluknet@…>
Documented TLS 1.3 early data support with OpenSSL. While here, …
16:56 Ticket #1643 (Proxy Protocol documentation has the wrong variables) created by pnickerson.cashstar.com@…
Looking at the documentation at: …
15:23 Milestone 1.15.4 completed
Status: scheduled Trunk: mainline * 0-RTT support (full)
15:21 Changeset in nginx_org [2240:a9bbf5fbec0b] by Maxim Dounin <mdounin@…>
nginx-1.15.4
15:11 Changeset in nginx [7363:dcd9303b0d73] by Maxim Dounin <mdounin@…>
release-1.15.4 tag
15:11 Changeset in nginx [7362:49d498356538]release-1.15.4 by Maxim Dounin <mdounin@…>
nginx-1.15.4-RELEASE
12:12 Ticket #1641 (Possible buffer overflow in ngx_http_request (1.15.3)) updated by Valentin V. Bartenev
Replying to ivan.aksamentov@…: > Replying to [comment:1
11:07 Changeset in nginx [7365:cd4fa2fab8d8] by Ruslan Ermilov <ru@…>
SSL: fixed unlocked access to sess_id->len.
11:00 Changeset in nginx [7361:c09c7d47acb9] by Maxim Dounin <mdounin@…>
SSL: logging level of "no suitable signature algorithm". The "no …
10:59 Changeset in nginx [7360:8f25a44d9add] by Maxim Dounin <mdounin@…>
SSL: logging level of "no suitable key share". The "no suitable key …
00:58 Ticket #1641 (Possible buffer overflow in ngx_http_request (1.15.3)) updated by Ivan Aksamentov
Replying to mdounin: Okay, sorry for the false alarm. Is …

09/24/18:

22:16 Ticket #1642 (HTTP2 proxy limits client body size even for streaming proxied protocols) closed by Maxim Dounin
wontfix: This is expected behaviour. The client_max_body_size is always …
22:08 Ticket #1641 (Possible buffer overflow in ngx_http_request (1.15.3)) closed by Maxim Dounin
invalid: The recv() call in question uses the buffer defined at the start of …
20:40 Ticket #1642 (HTTP2 proxy limits client body size even for streaming proxied protocols) created by jwatte@…
When we use NGINX for ingress to GRPC using HTTP2, after receiving a …
20:15 build_nginx.sh attached to Ticket #1641 by Ivan Aksamentov
Bash script to build nginx 1.15.3 with LTO
20:04 nginx-lto-build-log.txt.tar.gz attached to Ticket #1641 by Ivan Aksamentov
Full Nginx LTO build log
20:03 versions.txt attached to Ticket #1641 by Ivan Aksamentov
Version info of various tools used
20:01 build_binutils.sh attached to Ticket #1641 by Ivan Aksamentov
Bash script to build binutils 2.31.1 with gold plugin enabled
20:00 Ticket #1641 (Possible buffer overflow in ngx_http_request (1.15.3)) created by Ivan Aksamentov
When building Nginx 1.15.3 with Link-time optimization (LTO) and …
17:26 Changeset in nginx [7359:b5ea47df9bee] by Gena Makhomed <gmm@…>
Cache: status must be less then 599 in *_cache_valid directives. …
16:24 Changeset in nginx_org [2247:0f16ef9a8dbe] by Yaroslav Zhuravlev <yar@…>
Created "nginx objects" section in reference.xml.
16:24 Changeset in nginx_org [2246:32ba43abf9cd] by Yaroslav Zhuravlev <yar@…>
Renamed njs API, njs Changes.
16:10 Changeset in nginx_org [2245:87a0e2c73a25] by Yaroslav Zhuravlev <yar@…>
Refactored njs documentation.
16:10 Changeset in nginx_org [2244:467aef18bf12] by Yaroslav Zhuravlev <yar@…>
Renamed the "About njs" page.
11:40 Ticket #1635 (Nginx (1.13.6) does not ignore Host Header for absoluteURI) closed by Maxim Dounin
invalid: Replying to vic210blu@…: It makes no sense to reopening a …

09/22/18:

20:05 Ticket #1635 (Nginx (1.13.6) does not ignore Host Header for absoluteURI) reopened by Victor

09/21/18:

17:49 Changeset in nginx [7357:548a63b354a2] by Sergey Kandaurov <pluknet@…>
SSL: support for TLSv1.3 early data with OpenSSL. In collaboration …
17:31 Changeset in nginx [7356:e3ba4026c02d] by Maxim Dounin <mdounin@…>
SSL: disabled renegotiation checks with SSL_OP_NO_RENEGOTIATION. …
16:49 Changeset in nginx_org [2238:0761b770a94e] by Sergey Kandaurov <pluknet@…>
RFC8470.
15:44 Ticket #1640 (Question on handling NGX_HTTP_CLIENT_CLOSED_REQUEST) closed by Maxim Dounin
worksforme: This particular code always calls ngx_http_terminate_request() unless …
15:41 Ticket #1634 (No response from nginx) closed by Maxim Dounin
fixed: Fix committed, thanks for reporting this.
15:40 Ticket #274 (error_page 400 =444 /; утекают сокеты) closed by Maxim Dounin
fixed: Fix committed, thanks for reporting this.
14:47 Changeset in nginx_org [2239:fc5d2ab333a4] by Artem Konev <artem.konev@…>
Added Unit 1.4 release news.
14:40 Ticket #1634 (No response from nginx) updated by Maxim Dounin <mdounin@…>
In [changeset:"b64adc956643bdd4579e8a8f0b19fe31dca9a9df/nginx"
14:40 Tickets #274,​695 batch updated by Maxim Dounin <mdounin@…>
In [changeset:"1812f1d79d84a11247109f566c161002c0653a52/nginx"
14:33 Changeset in nginx-tests [1379:14bfd6643bbb] by Maxim Dounin <mdounin@…>
Tests: updated rewrite.t for the return r->err_status change.
12:59 Changeset in nginx [7355:b64adc956643] by Maxim Dounin <mdounin@…>
Rewrite: removed r->err_status special handling (ticket #1634). …
12:59 Changeset in nginx [7354:1812f1d79d84] by Maxim Dounin <mdounin@…>
Fixed socket leak with "return 444" in error_page (ticket #274). …
09:05 Ticket #1640 (Question on handling NGX_HTTP_CLIENT_CLOSED_REQUEST) created by jcornez@…
Hello and sorry if this is the wrong place to ask about this. I'm …
06:51 Milestone unit-1.4 completed
Planned features: - frontend ssl support - various bug fixes

09/20/18:

16:55 Ticket #1639 (Add support for writing PROXY protocol v2 to upstream) updated by ko.cloudflare.com@…
Fair enough. I also don't have any numbers at the moment and I guess I …
15:03 Ticket #812 (Fetch OCSP responses on startup, and store across restarts) updated by antoinep92@…
Hi, could someone provide some status on this ? As OCSP is being …
13:07 Ticket #1639 (Add support for writing PROXY protocol v2 to upstream) updated by Maxim Dounin
> I guess the main reason would be that it's faster to parse, …
11:59 Changeset in nginx-tests [1378:ba7e2e60f8b6] by Sergey Kandaurov <pluknet@…>
Tests: fixed grpc_ssl.t prerequisites.
10:25 Ticket #1639 (Add support for writing PROXY protocol v2 to upstream) updated by ko.cloudflare.com@…
I guess the main reason would be that it's faster to parse, especially …

09/19/18:

17:28 Ticket #1639 (Add support for writing PROXY protocol v2 to upstream) updated by Maxim Dounin
This was considered (and I believe there was a patch), yet there were …
16:29 Ticket #1639 (Add support for writing PROXY protocol v2 to upstream) created by ko.cloudflare.com@…
With nginx 1.13.11, support for reading version 2 of the PROXY …
14:26 Changeset in nginx [7358:170922952477] by Nova DasSarma <nova@…>
Removed bgcolor attribute on body in error pages and autoindex. The …
14:11 Ticket #1595 (http2 server can't send the Header [Upgrade] to backend) updated by Sergey Kandaurov
See also https://tools.ietf.org/html/rfc8441

09/18/18:

21:04 Ticket #1636 (CPU 100% with njs on simple base64 decode (2.3.1)) updated by 131@…
Switching to a non https url is a full win, ab -n 10000 -c 200 stays …
18:13 Ticket #1638 (Nginx Systemd is failing to start on reboot) updated by Maxim Dounin
From the details you've provided it looks like nginx hangs on start …
17:01 Milestone njs-0.2.4 completed
Planned features: * refactored njs/stream integration
16:36 Ticket #1638 (Nginx Systemd is failing to start on reboot) updated by saeohioalpha@…
Also, this has happened to me on both of the Linode 16.04.5 VMs that I …
16:34 Ticket #1638 (Nginx Systemd is failing to start on reboot) updated by saeohioalpha@…
There was also an issue here …
16:19 Ticket #1638 (Nginx Systemd is failing to start on reboot) created by saeohioalpha@…
I recently updated my linode VM (UB16.04.5, 4.17.17-x86_64-linode116) …
15:12 Ticket #1636 (CPU 100% with njs on simple base64 decode (2.3.1)) closed by Maxim Dounin
invalid: You are using variables in the proxy_pass directive, and this means …
14:55 Ticket #1637 (nginx:alpine latest (from 9/12/2018) uses alpine v3.7.1) closed by thresh
fixed: The alpine images were rebuilt with fixed apk and pushed to the docker …
14:36 Ticket #1637 (nginx:alpine latest (from 9/12/2018) uses alpine v3.7.1) updated by hairylime@…
Just for completeness - I'm looking at image …
14:29 Ticket #1637 (nginx:alpine latest (from 9/12/2018) uses alpine v3.7.1) created by hairylime@…
There's a critical security problem in apk that requires updates to …
12:26 Ticket #1636 (CPU 100% with njs on simple base64 decode (2.3.1)) updated by 131@…
[…]

09/17/18:

22:44 Ticket #1636 (CPU 100% with njs on simple base64 decode (2.3.1)) created by 131@…
I'm using a simple js_set to base64 decode (via String.bytesFrom) as …
14:24 Ticket #1635 (Nginx (1.13.6) does not ignore Host Header for absoluteURI) closed by Maxim Dounin
invalid: In terms of RFC7230, nginx is not a proxy, it is a server. Quoting …
13:40 Changeset in nginx-tests [1377:09c2291b2bab] by Sergey Kandaurov <pluknet@…>
Tests: relaxed test for no response on SSL renegotiation attempt.
12:01 Ticket #1634 (No response from nginx) updated by Maxim Dounin
Replying to huisuiwyn@…: > It doesn't work for me. With …
11:55 Changeset in nginx-tests [1376:92ba8ef8d6b2] by Sergey Kandaurov <pluknet@…>
Tests: adjusted grpc_ssl.t TODO to expectedly fail on Solaris. The …
11:29 Ticket #1635 (Nginx (1.13.6) does not ignore Host Header for absoluteURI) created by gspoosi@…
If Nginx receives a request with an absolute URI it still validates …
11:12 Ticket #1634 (No response from nginx) updated by huisuiwyn@…
It doesn't work for me. With your patch nginx returns index page …
06:59 Changeset in nginx_org [2236:9f0f4f5c1a30] by Maxim Konovalov <maxim@…>
Regenerated.
06:59 Changeset in nginx_org [2235:7590170efed7] by Maxim Konovalov <maxim@…>
The banner reverted back to nginx.conf-2018 promo.

09/15/18:

23:57 Ticket #1634 (No response from nginx) updated by Maxim Dounin
Status changed
Thanks for reporting this. Please try the following patch: […]
10:59 Ticket #195 (Close connection if SSL not enabled for vhost) updated by JemmyLoveJenny@…
Try this patch. You needn't set HTTPS default_server in the config …
00:49 Ticket #1630 (open_file_cache loses trailing newline on changed files) updated by Maxim Dounin
> OK, but would it also be possible to use something like inotify to …

09/14/18:

17:29 Ticket #1630 (open_file_cache loses trailing newline on changed files) updated by Sam Bull
OK, but would it also be possible to use something like inotify to get …
14:11 Ticket #1634 (No response from nginx) created by huisuiwyn@…
I have no responsa nginx from configuration followyn: […] […] 水雞

09/13/18:

18:10 Changeset in nginx_org [2237:5268c13196f2] by Yaroslav Zhuravlev <yar@…>
Documented njs changes triggered by njs-0.2.4.
15:21 Ticket #1633 (Zone configuration in upstream gives signal 11 on heavy loaded server) updated by https://stackoverflow.com/users/6797850/strangedata
Thank you for pointing that out. I'll talk to the sticky module developers.

09/12/18:

23:53 Ticket #1633 (Zone configuration in upstream gives signal 11 on heavy loaded server) closed by Maxim Dounin
invalid: To work with upstreams in shared memory zone, all upstream-related …
16:27 Ticket #1633 (Zone configuration in upstream gives signal 11 on heavy loaded server) updated by https://stackoverflow.com/users/6797850/strangedata
Forgot to add the error.log message: 2018/09/11 12:57:22 [alert] …
16:25 Ticket #1633 (Zone configuration in upstream gives signal 11 on heavy loaded server) created by https://stackoverflow.com/users/6797850/strangedata
I've been testing shared memory zone for an upstream configuration for …

09/11/18:

13:09 Ticket #1632 (Pool cleanups are not called in the daemonization) closed by Maxim Dounin
wontfix: The ngx_daemon() function is not expected to free ngx_cycle or any …
11:45 Changeset in nginx-tests [1375:f168fc46c7a4] by Dmitry Volyntsev <xeioex@…>
Tests: renamed JavaScript to njs.
11:45 Changeset in nginx-tests [1374:fd7766ab0a69] by Dmitry Volyntsev <xeioex@…>
Tests: stream njs module refactored.
11:45 Changeset in nginx-tests [1373:0569baf0cc4a] by Dmitry Volyntsev <xeioex@…>
Tests: style.
05:27 Ticket #1632 (Pool cleanups are not called in the daemonization) created by spacewanderlzx@…
When we run our testsuites with LeakSanitizer, we noticed lots of leak …

09/10/18:

15:57 Changeset in nginx [7353:87d2ea860f38] by Maxim Dounin <mdounin@…>
SSL: restore handlers after blocking. It is possible that after …
15:57 Changeset in nginx [7352:0de0b16a551c] by Maxim Dounin <mdounin@…>
SSL: corrected SSL_ERROR_WANT_WRITE / SSL_ERROR_WANT_READ logging. …
15:57 Changeset in nginx [7351:2b5528023f6b] by Maxim Dounin <mdounin@…>
Lingering close changed to handle NGX_AGAIN. The "do { c->recv() } …
12:30 Ticket #1630 (open_file_cache loses trailing newline on changed files) closed by Maxim Dounin
invalid: If you non-atomically modify a file being served by a web server, you …

09/08/18:

15:37 Ticket #1631 (feature request: support ALTSVC frame) created by wan-qy@…
http/2 has a ALTSVC frame feature that can tell client to send first …

09/07/18:

13:12 Changeset in nginx-tests [1372:4c0ea623343a] by Sergey Kandaurov <pluknet@…>
Tests: style.
11:14 Ticket #1630 (open_file_cache loses trailing newline on changed files) created by Sam Bull
When using open_file_cache, if I modify a file, the server starts …

09/06/18:

11:08 Changeset in nginx_org [2233:8f988cbe1296] by Konstantin Pavlov <thresh@…>
Linux packages: added SLES 15.

09/05/18:

23:12 Ticket #1629 (use variable in for proxy_ssl in stream module) created by James Callahan
I'd like to be able to use a variable to decide on proxy_ssl when …
13:35 Changeset in nginx_org [2232:9cfca60d8f42] by Maxim Konovalov <maxim@…>
Regenerated.
13:35 Changeset in nginx_org [2231:cda9e349cc22] by Maxim Konovalov <maxim@…>
nginx-plus-r16 promo.

09/04/18:

16:41 Changeset in nginx_org [2234:20a189bdb15f] by Yaroslav Zhuravlev <yar@…>
Updated SSL early data documentation.
11:22 Ticket #1628 ($ssl_session_id is not set when client connected via MSIE11) closed by Maxim Dounin
invalid: The $ssl_session_id variable represents SSL session id. It can be …
10:55 Ticket #1628 ($ssl_session_id is not set when client connected via MSIE11) updated by nskforward@…
Sorry, nginx version is not depended. The following setting solves the …
10:54 Ticket #1628 ($ssl_session_id is not set when client connected via MSIE11) updated by nskforward@…
I upgraded nginx version to 1.15.3 and issue solved
10:40 Ticket #1628 ($ssl_session_id is not set when client connected via MSIE11) updated by nskforward@…
The same wrong behavior in MS Edge browser
10:35 Ticket #1628 ($ssl_session_id is not set when client connected via MSIE11) created by nskforward@…
$ssl_session_id is not set when client connected via MSIE11 Steps: …

09/03/18:

18:26 Changeset in nginx-tests [1371:ece25f998f0d] by Sergey Kandaurov <pluknet@…>
Tests: adjusted TODO in grpc_ssl.t, fix committed. See 23e407a72fe9
18:21 Changeset in nginx-tests [1370:23e407a72fe9] by Sergey Kandaurov <pluknet@…>
Tests: upstream keepalive with grpc pending frames. This is a …
16:34 Changeset in nginx [7350:67c6cb7f477c] by Maxim Dounin <mdounin@…>
gRPC: disabled keepalive when sending control frames was blocked. If …
16:34 Changeset in nginx [7349:f6047a579ca1] by Maxim Dounin <mdounin@…>
gRPC: improved keepalive handling. The code is now able to parse …
16:17 Changeset in nginx [7348:f6e7831a17d4] by Maxim Dounin <mdounin@…>
Uwsgi: added a check on maximum uwsgi request size. Requested by …
16:17 Changeset in nginx [7347:b9b3518fa93b] by Maxim Dounin <mdounin@…>
Uwsgi: style.
08:39 Changeset in nginx-tests [1369:a37d8526e691] by Sergey Kandaurov <pluknet@…>
Tests: adjusted delay in upstream random tests.

08/31/18:

06:42 Ticket #1610 (Writing connections counter leak in stub_status.) updated by dyeldandi@…
My understanding is that since I can't run netstat at exactly the same …

08/30/18:

19:53 Changeset in nginx_org [2230:283b1e67eaa6] by Ruslan Ermilov <ru@…>
Updated docs for the upcoming NGINX Plus release.
11:42 Changeset in nginx [7346:039d3eff14a1] by Roman Arutyunyan <arut@…>
Version bump.
10:57 Ticket #1529 (Could not configure TLS1.3 ciphers in OpenSSL 1.1.1 pre4) updated by Maxim Dounin
Replying to jinham335908093@…: > It's clearly that they …
08:14 Ticket #1614 (proxy cache 404 STALE forever) updated by d.jarosch.syseleven.de@…
Replying to arut: > The log says this: > - 12:09:41 - …
01:25 Ticket #1529 (Could not configure TLS1.3 ciphers in OpenSSL 1.1.1 pre4) updated by jinham335908093@…
Replying to mdounin: > Replying to [comment:5

08/29/18:

19:18 Ticket #1206 (Proxy protocol server information is not surfaced) updated by Maxim Dounin
Replying to andrew.kubos.co@…: > Without this, there's no …
18:59 Ticket #1206 (Proxy protocol server information is not surfaced) updated by andrew.kubos.co@…
I agree that this feels like a significant missing feature. Without …
18:48 Changeset in nginx_org [2229:f134633cff5c] by Yaroslav Zhuravlev <yar@…>
Added info about ES5.1 strict mode for njs.
12:56 Changeset in nginx [7345:fe767c99c2ad] by Roman Arutyunyan <arut@…>
Stream: avoid potential infinite loop at preread phase. Previously …
12:19 Changeset in nginx_org [2228:4ca432d98636] by Maxim Konovalov <maxim@…>
Regenerated.
12:19 Changeset in nginx_org [2227:800d721c79d0] by Maxim Konovalov <maxim@…>
nginx.conf-2018 promo banner adjusted.
12:03 Ticket #1625 (TLS1.3 not available with nginx 1.15.3 and openssl 1.1.1-pre9) closed by Maxim Dounin
invalid: Works fine here. Note that TLS 1.3 in OpenSSL 1.1.1-pre9 switched to …
11:52 Ticket #1626 (sub domain redirecting not as declared) closed by Maxim Dounin
invalid: You wrote a description of your DNS configuration. However, nginx does …
11:40 Ticket #1627 (library/nginx without amd64 support) closed by thresh
invalid: This is an issue on Docker Inc infrastructure side. Please check …
11:38 Ticket #1627 (library/nginx without amd64 support) created by egeneralov@…
== Hello. == Today i recived errors from docker build. "no matching …
10:20 Ticket #1626 (sub domain redirecting not as declared) created by anair.tracmor.com@…
We are using Nginx on our production server. We faced an issue …
09:07 nginx_compile.sh attached to Ticket #1625 by Dryusdan@…
My script to compile nginx :)
09:06 Ticket #1625 (TLS1.3 not available with nginx 1.15.3 and openssl 1.1.1-pre9) created by Dryusdan@…
Hi I compile everytime the last nginx version and the last openssl …
02:04 Ticket #1624 (support json return type in stub_status) created by gnowxilef@…
support json return type in stub_status for easier parsing.

08/28/18:

16:29 Ticket #1610 (Writing connections counter leak in stub_status.) updated by Maxim Dounin
In both cases the number of active connections do not match the total …
15:45 Milestone 1.15.3 completed
Status: scheduled Trunk: mainline * 0-RTT support (partial) …
15:43 Changeset in nginx_org [2226:c57947bf27b7] by Maxim Dounin <mdounin@…>
nginx-1.15.3
15:36 Changeset in nginx [7344:5f6d2e102f4c] by Maxim Dounin <mdounin@…>
release-1.15.3 tag
15:36 Changeset in nginx [7343:28b3e17ca7eb]release-1.15.3 by Maxim Dounin <mdounin@…>
nginx-1.15.3-RELEASE
13:37 Changeset in nginx_org [2225:e2c3d17d0f58] by Yaroslav Zhuravlev <yar@…>
Unified wording of upstream keepalive directives.
12:09 Changeset in nginx_org [2224:0d55b8bddbe9] by Yaroslav Zhuravlev <yar@…>
Updated with Netcraft August 2018 Web Server Survey stats.
12:05 Changeset in nginx [7342:d5da7e71210e] by Maxim Dounin <mdounin@…>
Updated OpenSSL used for win32 builds.
10:53 nginx.conf attached to Ticket #1610 by dyeldandi@…
nginx.conf as reported by nginx -T with paths and server names changed
10:51 Ticket #1610 (Writing connections counter leak in stub_status.) updated by dyeldandi@…
No (major) leaks with http/2 disabled. A week after restart, server …
04:42 Ticket #1617 (preread data ignored when SSL is terminated) updated by James Callahan
> What is the reason for having ssl_preread and ssl termination on the …

08/27/18:

12:28 Ticket #1614 (proxy cache 404 STALE forever) updated by Roman Arutyunyan
The log says this: - 12:09:41 - client connects - sees STALE …
10:21 Ticket #1614 (proxy cache 404 STALE forever) updated by d.jarosch.syseleven.de@…
Replying to arut: > This is not a debug log. It should be …
Note: See TracTimeline for information about the timeline view.