Nginx [nginx-announce] nginx-1.17.4

Sorry but i have to ask again about that ...

Are Hpack and dynamic TLS patches working for that version?

 

Thanks !!!

I will wait for that

 

Hmm, have HGINX_HPACK='y' and NGINX_DYNAMICTLS='y' but can't find them back

Or I'm missing something here.

 

Did some cleanup on this server and lost latest kernel. So placed back the latest kernel.

Code (Text):

uname -msr
Linux 5.3.1-1.el7.elrepo.x86_64 x86_64

Did not make much difference, only got several benefits back of the new kernel

 

Hpack and Dynamic TLS must be tested first and then added to Centminmod for the specific version.

 

@pamamolf thx, going back a small step.

 

@eva2000 Might want to change something to avoid confusion.

Just run cmupdate to be sure. But under option 4 it still says 1.17.3

Code (Text):

-------------------------------------------------------------
* Current Nginx Version: 1.17.3 (240919-201555-centos7-kvm)
* Latest Nginx Available: 1.17.4 (centminmod.com/nginxnews)
-------------------------------------------------------------

-------------------------------------------------------------
 Centmin Mod local code is up to date at /usr/local/src/centminmod
 no available updates at this time...
-------------------------------------------------------------

Code (Text):

Nginx Upgrade - Would you like to continue? [y/n] y

Current Nginx Version: 1.17.3 (240919-201555-centos7-kvm)

Install which version of Nginx? (version i.e. type 1.17.3): 

 

Prio #1 as it's being released soon.

I don't have a good experiences with a distro upgrade, especially when they have many custom-made specifications.

But Hpack and Dynamic TLS work on 1.17.4?

 

@eva2000 Your the king! "Fast" is your middle name

Only the TLS dynamic I couldn't find in the nginx- V, guess it's normal

Now the rest of my server-(farm)

 

@eva2000 Your the king! "Fast" is your middle name

Only the TLS dynamic I couldn't find in the nginx- V, guess it's normal

Now the rest of my server-(farm)

 

Yup, looks almost the same. Only I have kernel 5.3, while the patch is for 5.1

Code (Text):

cat /root/centminlogs/patch_patchnginx_250919-113435.log
1017004
1017004
             ____  _                    _   __  _                  
            / ___|| |  ___   _   _   __| | / _|| |  __ _  _ __  ___
           | |    | | / _ \ | | | | / _` || |_ | | / _` || '__|/ _ \
           | |___ | || (_) || |_| || (_| ||  _|| || (_| || |  |  __/
            \____||_| \___/  \__,_| \__,_||_|  |_| \__,_||_|   \___|
                                                                  
 _   _         _                ____                                   _      
| \ | |  __ _ (_) _ __  __  __ |  _ \  _   _  _ __    __ _  _ __ ___  (_)  ___
|  \| | / _` || || '_ \ \ \/ / | | | || | | || '_ \  / _` || '_ ` _ \ | | / __|
| |\  || (_| || || | | | >  <  | |_| || |_| || | | || (_| || | | | | || || (__
|_| \_| \__, ||_||_| |_|/_/\_\ |____/  \__, ||_| |_| \__,_||_| |_| |_||_| \___|
        |___/                          |___/                                  
               _____  _      ____    ____         _         _    
              |_   _|| |    / ___|  |  _ \  __ _ | |_  ___ | |__
                | |  | |    \___ \  | |_) |/ _` || __|/ __|| '_ \
                | |  | |___  ___) | |  __/| (_| || |_| (__ | | | |
                |_|  |_____||____/  |_|    \__,_| \__|\___||_| |_|
                                                                
######################################################################
Patching Nginx for Dynamic TLS Size Support
######################################################################
Cloudflare Nginx Dynamic TLS patch
https://github.com/cloudflare/sslconfig/raw/master/patches/nginx__dynamic_tls_records.patch
######################################################################
patch -p1 < /usr/local/src/centminmod/patches/cloudflare/nginx__dynamic_tls_records_1015008.patch
patching file src/event/ngx_event_openssl.c
Hunk #1 succeeded at 1507 (offset 235 lines).
Hunk #2 succeeded at 2360 (offset 235 lines).
Hunk #3 succeeded at 2502 (offset 235 lines).
patching file src/event/ngx_event_openssl.h
patching file src/http/modules/ngx_http_ssl_module.c
Hunk #1 succeeded at 249 (offset 3 lines).
Hunk #2 succeeded at 615 (offset 4 lines).
Hunk #3 succeeded at 687 (offset 4 lines).
Hunk #4 succeeded at 911 (offset 30 lines).
patching file src/http/modules/ngx_http_ssl_module.h
Hunk #1 succeeded at 61 (offset 3 lines).
1017004
1017004
/svr-setup/nginx-1.17.4 /svr-setup/nginx-1.17.4 ~
/svr-setup/nginx-1.17.4 /svr-setup/nginx-1.17.4 ~
patching nginx http/2 full HPACK encoding support
patching nginx http/2 full HPACK encoding support
nginx-1.15.3_http2-hpack.patch
nginx-1.15.3_http2-hpack.patch
patch -p1 < /usr/local/src/centminmod/patches/cloudflare/nginx-1.15.3_http2-hpack.patch
patch -p1 < /usr/local/src/centminmod/patches/cloudflare/nginx-1.15.3_http2-hpack.patch
patching file auto/modules
Hunk #1 succeeded at 423 (offset -15 lines).
patching file auto/options
Hunk #1 succeeded at 59 with fuzz 2.
Hunk #2 succeeded at 225 (offset -1 lines).
Hunk #3 succeeded at 441 (offset -1 lines).
patching file src/core/ngx_murmurhash.c
patching file src/core/ngx_murmurhash.h
patching file src/http/v2/ngx_http_v2.c
Hunk #2 succeeded at 2094 (offset 16 lines).
patching file src/http/v2/ngx_http_v2.h
Hunk #3 succeeded at 184 (offset 6 lines).
Hunk #4 succeeded at 213 (offset 6 lines).
Hunk #5 succeeded at 261 (offset 8 lines).
Hunk #6 succeeded at 475 (offset 8 lines).
patching file src/http/v2/ngx_http_v2_encode.c
patching file src/http/v2/ngx_http_v2_filter_module.c
patching file auto/modules
Hunk #1 succeeded at 423 (offset -15 lines).
patching file auto/options
Hunk #1 succeeded at 59 with fuzz 2.
Hunk #2 succeeded at 225 (offset -1 lines).
Hunk #3 succeeded at 441 (offset -1 lines).
patching file src/core/ngx_murmurhash.c
patching file src/core/ngx_murmurhash.h
patching file src/http/v2/ngx_http_v2.c
Hunk #2 succeeded at 2094 (offset 16 lines).
patching file src/http/v2/ngx_http_v2.h
Hunk #3 succeeded at 184 (offset 6 lines).
Hunk #4 succeeded at 213 (offset 6 lines).
Hunk #5 succeeded at 261 (offset 8 lines).
Hunk #6 succeeded at 475 (offset 8 lines).
patching file src/http/v2/ngx_http_v2_encode.c
patching file src/http/v2/ngx_http_v2_filter_module.c
patching file src/http/v2/ngx_http_v2_table.c

patching file src/http/v2/ngx_http_v2_table.c

patching nginx http/2 full HPACK encoding for nginx 1.17.4
patching nginx http/2 full HPACK encoding for nginx 1.17.4
/svr-setup/nginx-1.17.4 ~
/svr-setup/nginx-1.17.4 ~
1017004
/svr-setup /svr-setup/nginx-1.17.4 ~
Cloning into 'liburing'...
prefix                        /usr
includedir                    /usr/include
libdir                        /usr/lib
mandir                        /usr/man
__kernel_rwf_t                no
make[1]: Entering directory '/svr-setup/liburing/src'
     CC queue.ol
     CC setup.ol
     CC syscall.ol
     CC register.ol
     CC setup.os
     CC queue.os
     CC syscall.os
     CC register.os
     AR liburing.a
ar: creating liburing.a
 RANLIB liburing.a
     CC liburing.so.1.0.1
make[1]: Leaving directory '/svr-setup/liburing/src'
make[1]: Entering directory '/svr-setup/liburing/test'
     CC poll-cancel
     CC poll
     CC ring-leak
     CC fsync
     CC io_uring_setup
     CC io_uring_register
     CC io_uring_enter
     CC nop
     CC sq-full
     CC cq-full
     CC 35fa71a030ca-test
     CC 917257daa0fe-test
     CC b19062a56726-test
     CC eeed8b54e0df-test
     CC link
     CC send_recvmsg
     CC a4c0b3decb33-test
     CC 500f9fbadef8-test
     CC timeout
/tmp/ccMpoKjT.o: In function `main':
/svr-setup/liburing/test/500f9fbadef8-test.c:41: warning: the use of `mktemp' is dangerous, better use `mkstemp'
     CC sq-space_left
     CC stdout
make[1]: Leaving directory '/svr-setup/liburing/test'
make[1]: Entering directory '/svr-setup/liburing/examples'
     CC io_uring-test
     CC io_uring-cp
     CC link-cp
     CC ucontext-cp
make[1]: Leaving directory '/svr-setup/liburing/examples'
sed -e "s%@[email protected]%/usr%g" \
    -e "s%@[email protected]%/usr/lib%g" \
    -e "s%@[email protected]%/usr/include%g" \
    -e "s%@[email protected]%liburing%g" \
    -e "s%@[email protected]%0.1%g" \
    liburing.pc.in >liburing.pc
make[1]: Entering directory '/svr-setup/liburing/src'
install -D -m 644 include/liburing/io_uring.h /usr/include/liburing/io_uring.h
install -D -m 644 include/liburing.h /usr/include/liburing.h
install -D -m 644 include/liburing/compat.h /usr/include/liburing/compat.h
install -D -m 644 include/liburing/barrier.h /usr/include/liburing/barrier.h
install -D -m 644 liburing.a /usr/lib/liburing.a
install -D -m 755 liburing.so.1.0.1 /usr/lib/liburing.so.1.0.1
ln -sf liburing.so.1.0.1 /usr/lib/liburing.so.1
ln -sf liburing.so.1.0.1 /usr/lib/liburing.so
make[1]: Leaving directory '/svr-setup/liburing/src'
install -D -m 644 liburing.pc /usr/lib/pkgconfig/liburing.pc
install -m 755 -d /usr/man/man2
install -m 644 man/*.2 /usr/man/man2
 0.1 installed
/svr-setup/nginx-1.17.4 ~
/svr-setup/nginx-1.17.4 /svr-setup/nginx-1.17.4 ~
patching nginx for Linux 5.1 Kernel AIO io_ring https://github.com/hakasenyang/openssl-patch/pull/22
https://lwn.net/Articles/776703/
https://hub.packtpub.com/linux-5-1-out-with-io_uring-io-interface-persistent-memory-new-patching-improvements-and-more-2/
patch -p1 < /usr/local/src/centminmod/patches/nginx/nginx_io_uring.patch
patching file auto/unix
patching file src/event/modules/ngx_epoll_module.c
patching file src/event/ngx_event.h
patching file src/os/unix/ngx_linux_aio_read.c
patching file src/os/unix/ngx_linux_config.h

patched nginx for Linux 5.1 Kernel AIO io_ring

 

Had a quick look at Add io_uring support to nginx (Fixes #21) by CarterLi · Pull Request #22 · hakasenyang/openssl-patch so no problem with the patch for 5.1