I-Nginx iyiseva yewebhu esebenza kahle engasindi/ummeleli ohlanekezelwe kanye nommeleli
Ngemuva kwezinyanga eziyi-11 zokuthuthuka, ukwethulwa kwe- igatsha elisha elizinzile leseva ye-HTTP esebenza kahle kakhulu kanye neseva elibamba enamaphrothokholi amaningi nginx 1.24.0, ehlanganisa izinguquko ezinqwabelene egatsheni eliyinhloko le-1.23.x.
Ngokuzayo, zonke izinguquko egatsheni elizinzile le-1.24 zizohlotshaniswa nokususwa kweziphazamisi ezinkulu nokuba sengozini. Ngokushesha, igatsha eliyinhloko le-nginx 1.25 lizokwakhiwa, lapho ukuthuthukiswa kwezici ezintsha kuzoqhubeka.
Ngokombiko we-Netcraft kaMashi, i-nginx isetshenziswa ku-18,94% yazo zonke izingosi ezisebenzayo (20,08% ngonyaka owodwa odlule, 20,15% eminyakeni emibili edlule), okuyindawo yesibili edume kakhulu kulesi sigaba. (Isabelo se-Apache sihambisana no-20,52% (22,58 % ngonyaka odlule, amapulatifomu amabili asekelwe ku-nginx ne-LuaJIT) - 7,94% (8,01%).
Izindaba eziphambili ku-nginx 1.24.0
Kule nguqulo entsha evela ku-nginx 1.24.0 Iphrothokholi ye-TLSv1.3 ivulwa ngokuzenzakalelayo Futhi kungenxa yokuthi ihlanganisa ukuvikeleka okuningi nokusebenza okuthuthukisiwe, ngaphezu kokusiza ukusheshisa ukuxhumana okubethelwe nakakhulu ngezinketho ezifana nesiqalo samanga se-TLS kanye ne-Zero Round Trip Time (0RTT).
Olunye ushintsho oluphawulekayo enguqulweni entsha ukuthi sihlinzeke ngokuzungezisa ukhiye wokubethela okuzenzakalelayo kumathikithi eseshini ye-TLS, asetshenziswa uma kusetshenziswa inkumbulo eyabiwe kumyalelo we-ssl_session_cache.
Ku-Windows, kungezwe usekelo lwe izinhlamvu ezingekho I-ASCII emagameni wefayela kumamojula we-ngx_http_autoindex_module kanye ne-ngx_http_dav_module, kanye nomyalelo ohlanganisayo. Ku-Windows, i-nginx nayo yakhiwe nge-OpenSSL 3.0.
Of ezinye izinguquko eziphuma ku-nginx 1.24.0:
- Usekelo olungeziwe lweziguquko ze-"$proxy_protocol_tlv_*", ezigcina amanani ezinkambu ze-TLV (Type-Length-Value) ezivela kuphrothokholi ye-PROXY v2 Type-Length-Value.
- Kwengezwe ukusekelwa kobubanzi bebhayithi kumojuli ye-ngx_http_gzip_static_module.
- Kwengezwe ipharamitha ye-ipv4=off kumyalelo wesixazululi, okuvumela ukuthi ukhubaze ukubhekwa kwekheli le-IPv4 lapho uxazulula amagama namakheli.
- I-API eklanywe kabusha yangaphakathi, imigqa kanhlokweni manje isidluliswa njengohlu oluxhunyiwe.
- Kuhlinzekwe ukuhlanganisa kweyunithi yezinhlamvu zesihloko esiqanjwe ngokufanayo lapho idluliselwa ku-FastCGI, SCGI kanye nezingemuva ze-uwsgi, ngendlela engu-$r->header_in() ye-ngx_http_perl_module kanye nasezinguqulweni ezithi "$http_…", "$sent_http_…", "$ sent_trailer_..." , “$upstream_http_…” kanye ne-“$upstream_trailer_…”.
- Inikeze isexwayiso uma kwenzeka kweqa ukumiswa kwamaphrothokholi asetshenziselwa isokhethi yokulalela.
- Izinga lokungena lamaphutha amaningi e-SSL lehlisiwe ukusuka ku-Critical kuya kulwazi.
- Ukusetshenziswa kwememori okulungiselelwe ekucushweni ngommeleli we-SSL.
- Shintsha: Ileveli yelogi "yobude bedatha yinde kakhulu", "ubude bufushane kakhulu", "inguqulo yefa elibi", "awekho ama-algorithms wesiginesha eyabiwe", "ubude benhlabamkhosi embi", "isandiso se-sigalgs esingekho", "ubude obubethelwe bude kakhulu" » , «ubude obubi», «isibuyekezo sokhiye omubi», «idatha exubile yokuxhawula nokungaxhawulani», «ama-cc atholwe kusenesikhathi», «idatha phakathi kwama-ccs nokuqedwa», «ubude bephakethe yinde kakhulu», «izixwayiso eziningi kakhulu», " irekhodi lincane kakhulu", futhi "uthole isiphetho ngaphambi kwe-ccs".
Okokugcina uma unentshisekelo yokwazi kabanzi ngakho ungabheka imininingwane Kulesi sixhumanisi esilandelayo.
Kubasebenzisi abajwayelekile abangenawo umsebenzi wokuqinisekisa ukuhambisana namamojula wezinkampani zangaphandle, kunconywa ukusebenzisa igatsha eliyinhloko, ngokusekelwe kulokho okutholakala kuzo izinguqulo zomkhiqizo wezohwebo i-Nginx Plus njalo ngemva kwezinyanga ezintathu.
Thola nginx 1.24.0
Kulabo abanentshisekelo yokuthola inguqulo entsha, kufanele benze okulandelayo, kuye ngesimo sokusabalalisa kwabo.
Ku-RHEL nokuphuma kokunye, kufanele wengeze indawo yokugcina ngomyalo olandelayo:
sudo nano /etc/yum.repos.d/nginx.repo
Bese wengeza lokhu ekugcineni
[nginx] name=nginx repo baseurl=https://nginx.org/packages/rhel/$releasever/$basearch/ gpgcheck=0 enabled=1
Futhi sifaka nge:
dnf install nginx
Ngenkathi ku-Ubuntu nokuphuma kwayo, kufanele bathayiphe okulandelayo:
sudo nano etc/apt/sources.list.d/nginx.list
Bese wengeza lokhu kufayela:
deb https://nginx.org/packages/ubuntu/ $(lsb_release -sc) nginx deb-src https://nginx.org/packages/ubuntu/ $(lsb_release -sc) nginx
Futhi siyaqhubeka ukufaka nge:
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys $key sudo apt update sudo apt install nginx
Okokugcina, kulabo abakhetha ukuhlanganiswa kwephakheji, lokhu kungenziwa ngemiyalo elandelayo (uma isivele ilandiwe futhi ingaphakathi kwekhodi yekhodi):
./configure make sudo make install