Learn about Centmin Mod LEMP Stack today
Register Now

Nginx [nginx-announce] nginx-1.17.4

Discussion in 'Nginx and PHP-FPM news & discussions' started by eva2000, Sep 25, 2019.

  1. eva2000

    eva2000 Administrator Staff Member

    41,724
    9,395
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +14,431
    Local Time:
    12:45 AM
    Nginx 1.17.x
    MariaDB 5.5/10.x
    Changes with nginx 1.17.4 24 Sep 2019

    *) Change: better detection of incorrect client behavior in HTTP/2.

    *) Change: in handling of not fully read client request body when
    returning errors in HTTP/2.

    *) Bugfix: the "worker_shutdown_timeout" directive might not work when
    using HTTP/2.

    *) Bugfix: a segmentation fault might occur in a worker process when
    using HTTP/2 and the "proxy_request_buffering" directive.

    *) Bugfix: the ECONNABORTED error log level was "crit" instead of
    "error" on Windows when using SSL.

    *) Bugfix: nginx ignored extra data when using chunked transfer
    encoding.

    *) Bugfix: nginx always returned the 500 error if the "return" directive
    was used and an error occurred during reading client request body.

    *) Bugfix: in memory allocation error handling.


    --
    Maxim Dounin
    http://nginx.org/
    _______________________________________________
    nginx-announce mailing list
    [email protected]
    http://mailman.nginx.org/mailman/listinfo/nginx-announce

    Continue reading...
     
    • Informative Informative x 1
  2. pamamolf

    pamamolf Premium Member Premium Member

    3,477
    335
    83
    May 31, 2014
    Ratings:
    +642
    Local Time:
    5:45 PM
    Nginx-1.17.x
    MariaDB 10.3.x
    Sorry but i have to ask again about that ...

    Are Hpack and dynamic TLS patches working for that version?
     
  3. eva2000

    eva2000 Administrator Staff Member

    41,724
    9,395
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +14,431
    Local Time:
    12:45 AM
    Nginx 1.17.x
    MariaDB 5.5/10.x
    Last version tested is Nginx 1.17.3. I nowadays incrementally enable support for HPACK/dynamic TLS record size patches for Nginx as new versions come out. So 1.17.4 testing is next.
     
    • Informative Informative x 1
  4. pamamolf

    pamamolf Premium Member Premium Member

    3,477
    335
    83
    May 31, 2014
    Ratings:
    +642
    Local Time:
    5:45 PM
    Nginx-1.17.x
    MariaDB 10.3.x
    Thanks !!!

    I will wait for that :)
     
  5. EckyBrazzz

    EckyBrazzz Active Member

    699
    139
    43
    Mar 28, 2018
    >>>>Click here<<<< i'm nearby......
    Ratings:
    +258
    Local Time:
    11:45 AM
    1.17.x Cluster
    10.3.x Cluster & Redis
    Hmm, have HGINX_HPACK='y' and NGINX_DYNAMICTLS='y' but can't find them back:(

    Or I'm missing something here.

     
  6. EckyBrazzz

    EckyBrazzz Active Member

    699
    139
    43
    Mar 28, 2018
    >>>>Click here<<<< i'm nearby......
    Ratings:
    +258
    Local Time:
    11:45 AM
    1.17.x Cluster
    10.3.x Cluster & Redis
    Did some cleanup on this server and lost latest kernel. So placed back the latest kernel.
    Code (Text):
    uname -msr
    Linux 5.3.1-1.el7.elrepo.x86_64 x86_64
    

    Did not make much difference, only got several benefits back of the new kernel

     
  7. pamamolf

    pamamolf Premium Member Premium Member

    3,477
    335
    83
    May 31, 2014
    Ratings:
    +642
    Local Time:
    5:45 PM
    Nginx-1.17.x
    MariaDB 10.3.x
    Hpack and Dynamic TLS must be tested first and then added to Centminmod for the specific version.
     
    • Informative Informative x 1
  8. EckyBrazzz

    EckyBrazzz Active Member

    699
    139
    43
    Mar 28, 2018
    >>>>Click here<<<< i'm nearby......
    Ratings:
    +258
    Local Time:
    11:45 AM
    1.17.x Cluster
    10.3.x Cluster & Redis
    • Like Like x 1
  9. EckyBrazzz

    EckyBrazzz Active Member

    699
    139
    43
    Mar 28, 2018
    >>>>Click here<<<< i'm nearby......
    Ratings:
    +258
    Local Time:
    11:45 AM
    1.17.x Cluster
    10.3.x Cluster & Redis
    @eva2000 Might want to change something to avoid confusion.

    Just run cmupdate to be sure. But under option 4 it still says 1.17.3
    Code (Text):
    -------------------------------------------------------------
    * Current Nginx Version: 1.17.3 (240919-201555-centos7-kvm)
    * Latest Nginx Available: 1.17.4 (centminmod.com/nginxnews)
    -------------------------------------------------------------
    
    -------------------------------------------------------------
     Centmin Mod local code is up to date at /usr/local/src/centminmod
     no available updates at this time...
    -------------------------------------------------------------
    


    Code (Text):
    Nginx Upgrade - Would you like to continue? [y/n] y
    
    Current Nginx Version: 1.17.3 (240919-201555-centos7-kvm)
    
    Install which version of Nginx? (version i.e. type 1.17.3): 
    
     
  10. eva2000

    eva2000 Administrator Staff Member

    41,724
    9,395
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +14,431
    Local Time:
    12:45 AM
    Nginx 1.17.x
    MariaDB 5.5/10.x
    that's because i haven't updated 123.09beta01 yet - been busying on CentOS 8 compatibilty testing research :D

    and well what is says doesn't matter, you can upgrade or downgrade to whatever version in centmin.sh you like :)
     
  11. EckyBrazzz

    EckyBrazzz Active Member

    699
    139
    43
    Mar 28, 2018
    >>>>Click here<<<< i'm nearby......
    Ratings:
    +258
    Local Time:
    11:45 AM
    1.17.x Cluster
    10.3.x Cluster & Redis
    Prio #1 as it's being released soon.

    I don't have a good experiences with a distro upgrade, especially when they have many custom-made specifications.

    But Hpack and Dynamic TLS work on 1.17.4?
     
  12. eva2000

    eva2000 Administrator Staff Member

    41,724
    9,395
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +14,431
    Local Time:
    12:45 AM
    Nginx 1.17.x
    MariaDB 5.5/10.x
    CentOS 8.0 was released today FYI CentOS 8.x - Centmin Mod CentOS 8 Compatibility Worklog ;)

    Just updated 123.09beta01 with Nginx 1.17.4 support for HPACK Full Encoding HTTP/2 patch and TLS dynamic record size patches :)
     
    • Like Like x 2
    • Winner Winner x 1
  13. EckyBrazzz

    EckyBrazzz Active Member

    699
    139
    43
    Mar 28, 2018
    >>>>Click here<<<< i'm nearby......
    Ratings:
    +258
    Local Time:
    11:45 AM
    1.17.x Cluster
    10.3.x Cluster & Redis
    @eva2000 Your the king! "Fast" is your middle name:)

    Only the TLS dynamic I couldn't find in the nginx- V, guess it's normal

    Now the rest of my server-(farm):joyful:

     
    Last edited: Sep 26, 2019
  14. EckyBrazzz

    EckyBrazzz Active Member

    699
    139
    43
    Mar 28, 2018
    >>>>Click here<<<< i'm nearby......
    Ratings:
    +258
    Local Time:
    11:45 AM
    1.17.x Cluster
    10.3.x Cluster & Redis
    @eva2000 Your the king! "Fast" is your middle name:)

    Only the TLS dynamic I couldn't find in the nginx- V, guess it's normal

    Now the rest of my server-(farm):joyful:

     
  15. eva2000

    eva2000 Administrator Staff Member

    41,724
    9,395
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +14,431
    Local Time:
    12:45 AM
    Nginx 1.17.x
    MariaDB 5.5/10.x
    won't show on nginx -V output but you can verify nginx patches in patch_patchnginx_DATETIMESTAMP.log logs in /root/centminlogs

    list last most recent log filtered by grep
    Code (Text):
    ls -lahrt /root/centminlogs/ | grep 'patch_patchnginx' | tail -1
    -rw-r--r--   1 root root 4.6K Sep 25 11:14 patch_patchnginx_250919-111357.log
    

    Code (Text):
    cat /root/centminlogs/patch_patchnginx_250919-111357.log
                                                                     
    ######################################################################
    Patching Nginx for Dynamic TLS Size Support
    ######################################################################
    Cloudflare Nginx Dynamic TLS patch
    https://github.com/cloudflare/sslconfig/raw/master/patches/nginx__dynamic_tls_records.patch
    ######################################################################
    patch -p1 < /usr/local/src/centminmod/patches/cloudflare/nginx__dynamic_tls_records_1015008.patch
    patching file src/event/ngx_event_openssl.c
    Hunk #1 succeeded at 1507 (offset 235 lines).
    Hunk #2 succeeded at 2360 (offset 235 lines).
    Hunk #3 succeeded at 2502 (offset 235 lines).
    patching file src/event/ngx_event_openssl.h
    patching file src/http/modules/ngx_http_ssl_module.c
    Hunk #1 succeeded at 249 (offset 3 lines).
    Hunk #2 succeeded at 615 (offset 4 lines).
    Hunk #3 succeeded at 687 (offset 4 lines).
    Hunk #4 succeeded at 911 (offset 30 lines).
    patching file src/http/modules/ngx_http_ssl_module.h
    Hunk #1 succeeded at 61 (offset 3 lines).
    1017004
    1017004
    /svr-setup/nginx-1.17.4 /svr-setup/nginx-1.17.4
    /svr-setup/nginx-1.17.4 /svr-setup/nginx-1.17.4
    patching nginx http/2 full HPACK encoding support
    patching nginx http/2 full HPACK encoding support
    nginx-1.15.3_http2-hpack.patch
    nginx-1.15.3_http2-hpack.patch
    patch -p1 < /usr/local/src/centminmod/patches/cloudflare/nginx-1.15.3_http2-hpack.patch
    patch -p1 < /usr/local/src/centminmod/patches/cloudflare/nginx-1.15.3_http2-hpack.patch
    patching file auto/modules
    patching file auto/modules
    Hunk #1 succeeded at 423 (offset -15 lines).
    Hunk #1 succeeded at 423 (offset -15 lines).
    patching file auto/options
    patching file auto/options
    Hunk #1 succeeded at 59 with fuzz 2.
    Hunk #1 succeeded at 59 with fuzz 2.
    Hunk #2 succeeded at 225 (offset -1 lines).
    Hunk #2 succeeded at 225 (offset -1 lines).
    Hunk #3 succeeded at 441Hunk #3 succeeded at 441 (offset -1 lines).
     (offset -1 lines).
    patching file src/core/ngx_murmurhash.c
    patching file src/core/ngx_murmurhash.c
    patching file src/core/ngx_murmurhash.h
    patching file src/core/ngx_murmurhash.h
    patching file src/http/v2/ngx_http_v2.c
    patching file src/http/v2/ngx_http_v2.c
    Hunk #2 succeeded at 2094 (offset 16 lines).
    Hunk #2 succeeded at 2094 (offset 16 lines).
    patching file src/http/v2/ngx_http_v2.h
    patching file src/http/v2/ngx_http_v2.h
    Hunk #3 succeeded at 184 (offset 6 lines).
    Hunk #3 succeeded at 184 (offset 6 lines).
    Hunk #4 succeeded at 213 (offset 6 lines).
    Hunk #4 succeeded at 213 (offset 6 lines).
    Hunk #5 succeeded at 261 (offset 8 lines).
    Hunk #5 succeeded at 261 (offset 8 lines).
    Hunk #6 succeeded at 475 (offset 8 lines).
    Hunk #6 succeeded at 475 (offset 8 lines).
    patching file src/http/v2/ngx_http_v2_encode.c
    patching file src/http/v2/ngx_http_v2_encode.c
    patching file src/http/v2/ngx_http_v2_filter_module.c
    patching file src/http/v2/ngx_http_v2_filter_module.c
    patching file src/http/v2/ngx_http_v2_table.c
    patching file src/http/v2/ngx_http_v2_table.c
    patching nginx http/2 full HPACK encoding for nginx 1.17.4
    patching nginx http/2 full HPACK encoding for nginx 1.17.4
    /svr-setup/nginx-1.17.4
    /svr-setup/nginx-1.17.4
    1017004
    1017004
    /usr/local/src/centminmod
    15
    18
    /svr-setup/redis2-nginx-module-0.15/src
    /svr-setup/memc-nginx-module-0.18/src
    1017004
    
     
  16. EckyBrazzz

    EckyBrazzz Active Member

    699
    139
    43
    Mar 28, 2018
    >>>>Click here<<<< i'm nearby......
    Ratings:
    +258
    Local Time:
    11:45 AM
    1.17.x Cluster
    10.3.x Cluster & Redis
    Yup, looks almost the same. Only I have kernel 5.3, while the patch is for 5.1

    Code (Text):
    cat /root/centminlogs/patch_patchnginx_250919-113435.log
    1017004
    1017004
                 ____  _                    _   __  _                  
                / ___|| |  ___   _   _   __| | / _|| |  __ _  _ __  ___
               | |    | | / _ \ | | | | / _` || |_ | | / _` || '__|/ _ \
               | |___ | || (_) || |_| || (_| ||  _|| || (_| || |  |  __/
                \____||_| \___/  \__,_| \__,_||_|  |_| \__,_||_|   \___|
                                                                      
     _   _         _                ____                                   _      
    | \ | |  __ _ (_) _ __  __  __ |  _ \  _   _  _ __    __ _  _ __ ___  (_)  ___
    |  \| | / _` || || '_ \ \ \/ / | | | || | | || '_ \  / _` || '_ ` _ \ | | / __|
    | |\  || (_| || || | | | >  <  | |_| || |_| || | | || (_| || | | | | || || (__
    |_| \_| \__, ||_||_| |_|/_/\_\ |____/  \__, ||_| |_| \__,_||_| |_| |_||_| \___|
            |___/                          |___/                                  
                   _____  _      ____    ____         _         _    
                  |_   _|| |    / ___|  |  _ \  __ _ | |_  ___ | |__
                    | |  | |    \___ \  | |_) |/ _` || __|/ __|| '_ \
                    | |  | |___  ___) | |  __/| (_| || |_| (__ | | | |
                    |_|  |_____||____/  |_|    \__,_| \__|\___||_| |_|
                                                                    
    ######################################################################
    Patching Nginx for Dynamic TLS Size Support
    ######################################################################
    Cloudflare Nginx Dynamic TLS patch
    https://github.com/cloudflare/sslconfig/raw/master/patches/nginx__dynamic_tls_records.patch
    ######################################################################
    patch -p1 < /usr/local/src/centminmod/patches/cloudflare/nginx__dynamic_tls_records_1015008.patch
    patching file src/event/ngx_event_openssl.c
    Hunk #1 succeeded at 1507 (offset 235 lines).
    Hunk #2 succeeded at 2360 (offset 235 lines).
    Hunk #3 succeeded at 2502 (offset 235 lines).
    patching file src/event/ngx_event_openssl.h
    patching file src/http/modules/ngx_http_ssl_module.c
    Hunk #1 succeeded at 249 (offset 3 lines).
    Hunk #2 succeeded at 615 (offset 4 lines).
    Hunk #3 succeeded at 687 (offset 4 lines).
    Hunk #4 succeeded at 911 (offset 30 lines).
    patching file src/http/modules/ngx_http_ssl_module.h
    Hunk #1 succeeded at 61 (offset 3 lines).
    1017004
    1017004
    /svr-setup/nginx-1.17.4 /svr-setup/nginx-1.17.4 ~
    /svr-setup/nginx-1.17.4 /svr-setup/nginx-1.17.4 ~
    patching nginx http/2 full HPACK encoding support
    patching nginx http/2 full HPACK encoding support
    nginx-1.15.3_http2-hpack.patch
    nginx-1.15.3_http2-hpack.patch
    patch -p1 < /usr/local/src/centminmod/patches/cloudflare/nginx-1.15.3_http2-hpack.patch
    patch -p1 < /usr/local/src/centminmod/patches/cloudflare/nginx-1.15.3_http2-hpack.patch
    patching file auto/modules
    Hunk #1 succeeded at 423 (offset -15 lines).
    patching file auto/options
    Hunk #1 succeeded at 59 with fuzz 2.
    Hunk #2 succeeded at 225 (offset -1 lines).
    Hunk #3 succeeded at 441 (offset -1 lines).
    patching file src/core/ngx_murmurhash.c
    patching file src/core/ngx_murmurhash.h
    patching file src/http/v2/ngx_http_v2.c
    Hunk #2 succeeded at 2094 (offset 16 lines).
    patching file src/http/v2/ngx_http_v2.h
    Hunk #3 succeeded at 184 (offset 6 lines).
    Hunk #4 succeeded at 213 (offset 6 lines).
    Hunk #5 succeeded at 261 (offset 8 lines).
    Hunk #6 succeeded at 475 (offset 8 lines).
    patching file src/http/v2/ngx_http_v2_encode.c
    patching file src/http/v2/ngx_http_v2_filter_module.c
    patching file auto/modules
    Hunk #1 succeeded at 423 (offset -15 lines).
    patching file auto/options
    Hunk #1 succeeded at 59 with fuzz 2.
    Hunk #2 succeeded at 225 (offset -1 lines).
    Hunk #3 succeeded at 441 (offset -1 lines).
    patching file src/core/ngx_murmurhash.c
    patching file src/core/ngx_murmurhash.h
    patching file src/http/v2/ngx_http_v2.c
    Hunk #2 succeeded at 2094 (offset 16 lines).
    patching file src/http/v2/ngx_http_v2.h
    Hunk #3 succeeded at 184 (offset 6 lines).
    Hunk #4 succeeded at 213 (offset 6 lines).
    Hunk #5 succeeded at 261 (offset 8 lines).
    Hunk #6 succeeded at 475 (offset 8 lines).
    patching file src/http/v2/ngx_http_v2_encode.c
    patching file src/http/v2/ngx_http_v2_filter_module.c
    patching file src/http/v2/ngx_http_v2_table.c
    
    patching file src/http/v2/ngx_http_v2_table.c
    
    patching nginx http/2 full HPACK encoding for nginx 1.17.4
    patching nginx http/2 full HPACK encoding for nginx 1.17.4
    /svr-setup/nginx-1.17.4 ~
    /svr-setup/nginx-1.17.4 ~
    1017004
    /svr-setup /svr-setup/nginx-1.17.4 ~
    Cloning into 'liburing'...
    prefix                        /usr
    includedir                    /usr/include
    libdir                        /usr/lib
    mandir                        /usr/man
    __kernel_rwf_t                no
    make[1]: Entering directory '/svr-setup/liburing/src'
         CC queue.ol
         CC setup.ol
         CC syscall.ol
         CC register.ol
         CC setup.os
         CC queue.os
         CC syscall.os
         CC register.os
         AR liburing.a
    ar: creating liburing.a
     RANLIB liburing.a
         CC liburing.so.1.0.1
    make[1]: Leaving directory '/svr-setup/liburing/src'
    make[1]: Entering directory '/svr-setup/liburing/test'
         CC poll-cancel
         CC poll
         CC ring-leak
         CC fsync
         CC io_uring_setup
         CC io_uring_register
         CC io_uring_enter
         CC nop
         CC sq-full
         CC cq-full
         CC 35fa71a030ca-test
         CC 917257daa0fe-test
         CC b19062a56726-test
         CC eeed8b54e0df-test
         CC link
         CC send_recvmsg
         CC a4c0b3decb33-test
         CC 500f9fbadef8-test
         CC timeout
    /tmp/ccMpoKjT.o: In function `main':
    /svr-setup/liburing/test/500f9fbadef8-test.c:41: warning: the use of `mktemp' is dangerous, better use `mkstemp'
         CC sq-space_left
         CC stdout
    make[1]: Leaving directory '/svr-setup/liburing/test'
    make[1]: Entering directory '/svr-setup/liburing/examples'
         CC io_uring-test
         CC io_uring-cp
         CC link-cp
         CC ucontext-cp
    make[1]: Leaving directory '/svr-setup/liburing/examples'
    sed -e "s%@[email protected]%/usr%g" \
        -e "s%@[email protected]%/usr/lib%g" \
        -e "s%@[email protected]%/usr/include%g" \
        -e "s%@[email protected]%liburing%g" \
        -e "s%@[email protected]%0.1%g" \
        liburing.pc.in >liburing.pc
    make[1]: Entering directory '/svr-setup/liburing/src'
    install -D -m 644 include/liburing/io_uring.h /usr/include/liburing/io_uring.h
    install -D -m 644 include/liburing.h /usr/include/liburing.h
    install -D -m 644 include/liburing/compat.h /usr/include/liburing/compat.h
    install -D -m 644 include/liburing/barrier.h /usr/include/liburing/barrier.h
    install -D -m 644 liburing.a /usr/lib/liburing.a
    install -D -m 755 liburing.so.1.0.1 /usr/lib/liburing.so.1.0.1
    ln -sf liburing.so.1.0.1 /usr/lib/liburing.so.1
    ln -sf liburing.so.1.0.1 /usr/lib/liburing.so
    make[1]: Leaving directory '/svr-setup/liburing/src'
    install -D -m 644 liburing.pc /usr/lib/pkgconfig/liburing.pc
    install -m 755 -d /usr/man/man2
    install -m 644 man/*.2 /usr/man/man2
     0.1 installed
    /svr-setup/nginx-1.17.4 ~
    /svr-setup/nginx-1.17.4 /svr-setup/nginx-1.17.4 ~
    patching nginx for Linux 5.1 Kernel AIO io_ring https://github.com/hakasenyang/openssl-patch/pull/22
    https://lwn.net/Articles/776703/
    https://hub.packtpub.com/linux-5-1-out-with-io_uring-io-interface-persistent-memory-new-patching-improvements-and-more-2/
    patch -p1 < /usr/local/src/centminmod/patches/nginx/nginx_io_uring.patch
    patching file auto/unix
    patching file src/event/modules/ngx_epoll_module.c
    patching file src/event/ngx_event.h
    patching file src/os/unix/ngx_linux_aio_read.c
    patching file src/os/unix/ngx_linux_config.h
    
    patched nginx for Linux 5.1 Kernel AIO io_ring
    
     
  17. EckyBrazzz

    EckyBrazzz Active Member

    699
    139
    43
    Mar 28, 2018
    >>>>Click here<<<< i'm nearby......
    Ratings:
    +258
    Local Time:
    11:45 AM
    1.17.x Cluster
    10.3.x Cluster & Redis
  18. eva2000

    eva2000 Administrator Staff Member

    41,724
    9,395
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +14,431
    Local Time:
    12:45 AM
    Nginx 1.17.x
    MariaDB 5.5/10.x