Nginx ndeyepamusoro-inoshanda isingaremi webhu server / reverse proxy uye proxy
Mushure memwedzi ye11 yekuvandudzwa, kuvhurwa kwe iyo itsva yakagadzikana bazi repamusoro-inoshanda HTTP sevha uye yakawanda-protocol proxy server nginx 1.24.0, iyo inobatanidza kuchinja kwekuwedzera mubazi guru re 1.23.x.
Mune ramangwana, shanduko dzese mubazi rakadzikama 1.24 dzinenge dzakabatana nekubviswa kwezvipembenene zvakakomba uye kusasimba. Nenguva isipi, bazi guru re nginx 1.25 richaumbwa, umo kuvandudzwa kwezvinhu zvitsva zvichaenderera mberi.
Sekureva kweNetcraft's Kurume chirevo, nginx inoshandiswa pa18,94% yenzvimbo dzese dzinoshanda (20,08% gore rimwe rapfuura, 20,15% makore maviri apfuura), inova saiti yechipiri inonyanya kufarirwa muchikamu ichi. % gore rapfuura, mapuratifomu maviri akavakirwa panginx uye LuaJIT) - 20,52% (22,58%).
Nhau huru mu nginx 1.24.0
Muiyi vhezheni nyowani inouya kubva nginx 1.24.0 TLSv1.3 protocol inogoneswa nekusarudzika Uye ndezvekuti zvinosanganisira kuchengetedzeka kwakawanda uye kuvandudzwa kwekuita, mukuwedzera pakubatsira kukurumidza kuvharirwa kubatanidza zvakanyanya nesarudzo dzakadai seTLS yenhema kutanga uye Zero Round Trip Nguva (0RTT).
Imwe shanduko inocherechedzwa mushanduro itsva ndeyekuti takapa otomatiki encryption kiyi yekutenderera kweTLS matikiti echikamu, ayo anoshandiswa kana uchishandisa yakagovaniswa ndangariro mu ssl_session_cache rairo.
PaWindows, yakawedzera rutsigiro rwe mavara asina ASCII mumazita emafaira kune ngx_http_autoindex_module uye ngx_http_dav_module modules, pamwe neiyo inosanganisira rairo. PaWindows, nginx inovakwa zvakare ne OpenSSL 3.0.
Of the dzimwe shanduko iyo inomira kubva nginx 1.24.0:
- Yakawedzera tsigiro ye "$proxy_protocol_tlv_*" zvinosiyana, izvo zvinochengeta kukosha kweTLV (Type-Length-Value) inoonekwa muPROXY v2 Type-Length-Value protocol.
- Yakawedzera tsigiro ye byte marenji kune ngx_http_gzip_static_module module.
- Yakawedzera ipv4=off parameter kune inogadzirisa dhairekitori, iyo inobvumidza iwe kudzima IPv4 kero kutarisa paunenge uchigadzirisa mazita nekero.
- Yakagadziridzwazve mukati API, mitsetse yemusoro yave kupfuudzwa seyakabatana runyorwa.
- Yakapihwa concatenation yeakadanwa mazita emusoro tambo kana yapfuudzwa kuFastCGI, SCGI uye uwsgi backends, mune iyo $r->header_in() nzira ye ngx_http_perl_module uye mune zvinosiyana "$http_…", "$sent_http_…", "$ sent_trailer_..." , “$upstream_http_…” uye “$upstream_trailer_…”.
- Yakapa yambiro kana ichipfuura gadziriso yemaprotocol anoshandiswa socket yekuteerera.
- Iyo yekutema matanda yezvikanganiso zvakawanda zveSSL yakaderedzwa kubva kuCritical kuenda kuRuzivo.
- Yakakwenenzverwa kushandiswa kwendangariro mukumisikidzwa neSSL proxy.
- Shanduko: Log level ye "data kureba kwakarebesa", "kurebesa kupfupika", "bad legacy version", "hapana akagovaniswa siginecha algorithms", "bad digest urefu", "isipo sigalgs yekuwedzera", "encrypted kureba zvakareba" » , «kureba kwakashata», «kurebesa kiyi yakaipa», «kukwazisana maoko kwakasanganiswa uye kusabatana kwedata», «ccs yakagamuchirwa kare», «data pakati peccs nepedzwa», «packet urefu hwakareba kwazvo», «yakawanda yambiro yambiro», " rekodhi idiki kwazvo", uye "ndakawana chimbi pamberi peccs".
Finalmente kana iwe uchifarira kuziva zvakawanda nezvazvo unogona kutarisa ruzivo Mune inotevera chinongedzo.
Kune vashandisiwo zvavo vasina basa rekuona kuenderana nevechitatu-bato modules, zvinokurudzirwa kushandisa iyo main bazi, zvichienderana nekuti ndeapi mavhezheni echigadzirwa chekutengesa Nginx Plus anoumbwa mwedzi mitatu yega yega.
Tora nginx 1.24.0
Kune avo vanofarira kukwanisa kuwana shanduro itsva, vanofanira kuita zvinotevera, zvichienderana nenyaya yekugovera kwavo.
Kune RHEL uye zvinobva, unofanira kuwedzera repository nemurairo unotevera:
sudo nano /etc/yum.repos.d/nginx.repo
Uye wedzera izvi pakupedzisira
[nginx] name=nginx repo baseurl=https://nginx.org/packages/rhel/$releasever/$basearch/ gpgcheck=0 enabled=1
Uye isu tinoisa ne:
dnf install nginx
Nepo kune Ubuntu uye zvinobva pazviri, ivo vanofanirwa kunyora zvinotevera:
sudo nano etc/apt/sources.list.d/nginx.list
Uye wedzera izvi kune iyo faira:
deb https://nginx.org/packages/ubuntu/ $(lsb_release -sc) nginx deb-src https://nginx.org/packages/ubuntu/ $(lsb_release -sc) nginx
Uye isu tinoenderera nekuisa ne:
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys $key sudo apt update sudo apt install nginx
Chekupedzisira, kune avo vanosarudza kuunganidzwa kwepakeji, izvi zvinogona kuitwa nemirairo inotevera (kamwe yatorodha pasi uye kuve mukati mekodhi dhairekitori):
./configure make sudo make install