What’s New in Nginx 1.30.0: Upstream Configuration Changes Explained
Nginx 1.30.0 Release
The latest version of the popular web server software, Nginx 1.30.0, brings significant improvements to upstream configurations.
According to the official Nginx blog, “Nginx 1.30.0 introduces several important features to improve performance, security, and usability.”
Main Features
- Keepalive Connections: Persistent connections to backends are established without requiring explicit configuration.
- HTTP/2 Support: Communication with upstream servers is now possible over HTTP/2, expanding the protocol support offered by Nginx.
- Encrypted ClientHello (ECH): Encrypts the TLS ClientHello message, providing an additional layer of protection against eavesdropping attacks.
- Early Hints Status Code 103: Nginx can now send response headers to clients before the upstream has finished generating the full response.
- Sticky Sessions: Nginx routes repeat requests from a client to the same upstream server, ideal for stateful applications requiring consistent treatment.
- Multipath TCP (MPTCP) Support: A single TCP connection utilizes multiple network paths simultaneously, enhancing throughput and resilience in environments with multiple interfaces.
- TLS and Certificate Changes: Nginx introduces TLS certificate compression for both OpenSSL and BoringSSL builds, along with new SSL variables and improved compatibility with OpenSSL 4.0 and AWS-LC.
- Max Headers Directive: Operators can set a limit on the number of request headers Nginx accepts, mitigating certain types of abusive or malformed requests.
The Nginx 1.30.0 release offers numerous benefits for users, including enhanced performance, improved security, and expanded functionality.
About Author
English