Nginx Nginx 1.13.10 Released

Nginx 1.13.10 is officially released now. You will be able to run the SSH command = cmupdate to update Centmin Mod 123.09beta01 code and then run centmin.sh menu option 4 to update Nginx to 1.13.10 just like with Nginx 1.13.9

Nginx 1.13.10 adds

• ALPN ssl_preread parsing support
• gRPC proxy module - for details see Announcing gRPC Support in NGINX - NGINX

Just a heads up for folks using NGINX_HPACK='y' which isn't enabled by default for Cloudflare's HTTP/2 HPACK Full Encoding patch. It's broken in Nginx 1.13.10 due to major changes in code. So I have updated Centmin Mod 123.09beta01 to disable the patch when Nginx 1.13.10 is detected. Nginx 1.13.9 will still get patched if you have set NGINX_HPACK='y'.

Bug listed at HPACK patch broken for Nginx 1.13.10 · Issue #93 · cloudflare/sslconfig for folks who want to follow on.

Example compile of Centmin Mod 123.09beta01 based Nginx 1.13.10 pulled from master dev branch. On centmin.sh menu option 4 specify Nginx version to update to = master to pull and install master branch code Nginx 1.13.10

---

 

Nginx 1.3.10 has been officially released now nginx news

 

yup

 

yeah all day I have been mistyping 1.13.10 as 1.3.10 for some reason

 

Yeah having HTTP/2 HPACK Full Encoding patch is nice compared to HPACK partial encoding in standard Nginx, but the bandwidth savings isn't that substantial with lower traffic. So usually would be fine. For now I suggest using 1.13.10 and just keep an eye on the bug/issue report for updates HPACK patch broken for Nginx 1.13.10 · Issue #93 · cloudflare/sslconfig

 

Yeah it's tricky to navigate. Only thing to do for Centmin Mod is deal with it as the issues come. Centmin Mod Nginx upgrade routine when it fails to compile Nginx will just use the previous Nginx version anyway. So worse case is your don't update to the Nginx version you want and use previous Nginx version. It's not as critical as your sites powered by Centmin Mod Nginx will continue to run as it was anyway just with existing Nginx version and the Nginx version you're trying to upgrade to.

Right now latest Centmin Mod 123.09beta01 code updated in past 48hrs, just detects Nginx versions 1.13.10 and greater and skips cloudflare HPACK patch setting NGINX_HPACK='n' so no breakage for that going forth for now.

 

thanks for heads up HPACK patch broken for Nginx 1.13.10 · Issue #93 · cloudflare/sslconfig

seems that patch is 3 patches in one so would conflict with my dynamic tls patch

 

well kn007 shared his Cloudflare HTTP/2 HPACK Full Encoding patch update for Nginx 1.13.10 compatibility and it does compile and work according to h2load tests. Just need see if all web browsers work with it too HPACK patch broken for Nginx 1.13.10 · Issue #93 · cloudflare/sslconfig

 

Yeah HPACK full vs partial encoding of headers is not going to make much of difference for small sites compared to large sites and depends on the specific site's header size/usage too. For example HTTP/2 and the evolving requirements for implementing many security related headers will increase the header size footprint of each request over time. Might not affect Nginx performance that much, but web servers like h2o and caddy it might as their performance degrades more as you add more headers to their requests from my past experience/benchmarks. Nginx doesn't degrade much at all. Though no idea of reason Nginx folks don't implement HPACK Full encoding as opposed to it's current partial encoding.

 

ah i remember reading that reply.. guess it's just different priorities and not seeing HPACK full encoding as important as they could of added it to Nginx Plus if that was a reason to priortize Nginx Plus over Nginx open source.

 

I am using same patch discussed above in this thread at HPACK patch broken for Nginx 1.13.10 · Issue #93 · cloudflare/sslconfig