./www/nginx, Lightweight HTTP server and mail proxy server

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 1.28.0nb1, Package name: nginx-1.28.0nb1, Maintainer: osa

Nginx (pronounced engine-x) is a free, open-source, high-performance HTTP
server and reverse proxy, as well as an IMAP/POP3 proxy server. Igor Sysoev
started development of Nginx in 2002, with the first public release in 2004.
Nginx now hosts nearly 12.18% (22.2M) of active sites across all domains.
Nginx is known for its high performance, stability, rich feature set, simple
configuration, and low resource consumption.

Nginx is one of a handful of servers written to address the C10K problem.
Unlike traditional servers, Nginx doesn't rely on threads to handle requests.
Instead it uses a much more scalable event-driven (asynchronous) architecture.
This architecture uses small, but more importantly, predictable amounts of
memory under load.
Even if you don't expect to handle thousands of simultaneous requests, you can
still benefit from Nginx's high-performance and small memory footprint.
Nginx scales in all directions: from the smallest VPS all the way up to
clusters of servers.

Nginx powers several high-visibility sites, such as Netflix, Hulu, Pinterest,
CloudFlare, Airbnb, WordPress.com, GitHub, SoundCloud, Zynga, Eventbrite,
Zappos, Media Temple, Heroku, RightScale, Engine Yard and NetDNA.


Required to run:
[security/openssl] [devel/pcre]

Required to build:
[pkgtools/cwrappers]

Package options: nginx-auth-request, nginx-gzip, nginx-http2, nginx-http3, nginx-memcache, nginx-realip, nginx-slice, nginx-ssl, nginx-status, nginx-uwsgi

Master sites:

Filesize: 1250.108 KB

Version history: (Expand)

CVS history: (Expand)


   2025-04-24 16:16:37 by Thomas Klausner | Files touched by this commit (2412) 
Log message:
*: recursive bump for jpeg -> libjpeg-turbo switch
   2025-04-23 20:33:05 by Sergey A. Osokin | Files touched by this commit (4) | Package updated
Log message:
www/nginx: update to the recent stable version, 1.28.0.

There's a huge list of changes since 1.26.3, so here it's:
https://github.com/nginx/nginx/compare/release-1.26.3...release-1.28.0

Merge all changes have been made for www/nginx-devel to www/nginx.
These two pkgsrces are identical now (except their package names
and revisions).
   2025-04-17 23:53:13 by Thomas Klausner | Files touched by this commit (2449) 
Log message:
*: recursive bump for icu 77 and libxml2 2.14
   2025-04-17 17:14:32 by Sergey A. Osokin | Files touched by this commit (12) | Package updated
Log message:
*/*: update NGINX Javascript from 0.8.9 to 0.8.10

While I'm here, cleanup pcre1 dependency, since it's EoLed, so
please use pcre2 instead.

Bump PKGREVISIONs where it needed.

<ChangeLog>

nginx modules:

*) Feature: reading r.requestText or r.requestBuffer from
   a temp file.
   Previously, an exception was thrown when accessing r.requestText
   or r.requestBuffer if a client request body size exceeded
   client_body_buffer_size.

*) Improvement: improved reporting of unhandled promise rejections.

*) Bugfix: fixed name corruption in variable and header processing.

*) Bugfix: fixed SharedDict.incr() with empty init argument
   for QuickJS engine.

*) Bugfix: accepting response headers with underscore characters
   in Fetch API.

Core:

*) Change: fixed serializeToString().
   Previously, serializeToString() was exclusiveC14n() which returned
   string instead of Buffer. According to the published documentation it
   should be c14n().

*) Feature: added WebCrypto API for QuickJS engine.

*) Feature: added TextEncoder/TextDecoder for QuickJS engine.

*) Feature: added querystring module for QuickJS engine.

*) Feature: added crypto module for QuickJS engine.

*) Feature: added xml module for QuickJS engine.

*) Feature: added support for QuickJS-NG library.

*) Bugfix: fixed buffer.concat() with a single argument in quickjs.

*) Bugfix: added missed syntax error for await in template literal.

*) Bugfix: fixed non-NULL terminated strings formatting in
   exceptions for QuickJS engine.

*) Bugfix: fixed compatibility with recent change in QuickJS
   and QuickJS-NG.

</ChangeLog>
   2025-02-07 10:00:23 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
nginx: update lua-nginx-module to 0.10.28
   2025-02-05 19:23:26 by Sergey A. Osokin | Files touched by this commit (2) | Package updated
Log message:
www/nginx: security update from 1.26.2 to 1.26.3

<ChangeLog>

*) Security: insufficient check in virtual servers handling with TLSv1.3
   SNI allowed to reuse SSL sessions in a different virtual server, to
   bypass client SSL certificates verification (CVE-2025-23419).

*) Bugfix: in the ngx_http_mp4_module.
   Thanks to Nils Bars.

*) Workaround: "gzip filter failed to use preallocated memory" alerts
   appeared in logs when using zlib-ng.

*) Bugfix: nginx could not build libatomic library using the library
   sources if the --with-libatomic=DIR option was used.

*) Bugfix: nginx now ignores QUIC version negotiation packets from
   clients.

*) Bugfix: nginx could not be built on Solaris 10 and earlier with the
   ngx_http_v3_module.

*) Bugfixes in HTTP/3.

</ChangeLog>
   2025-01-14 18:45:00 by Sergey A. Osokin | Files touched by this commit (11) | Package updated
Log message:
*/*: update NGINX JavaScript 0.8.8 -> 0.8.9

Bump PKGREVISIONs for www/nginx, www/nginx-devel, www/unit.

<ChangeLog>

nginx modules:

*) Bugfix: removed extra VM creation per server.
   Previously, when js_import was declared in http or stream blocks,
   an extra copy of the VM instance was created for each server
   block. This was not needed and consumed a lot of memory for
   configurations with many server blocks.

  This issue was introduced in 9b674412 (0.8.6) and was partially
  fixed for location blocks only in 685b64f0 (0.8.7).

Core:

*) Feature: added fs module for QuickJS engine.

</ChangeLog>
   2025-01-14 18:36:28 by Sergey A. Osokin | Files touched by this commit (6) | Package updated
Log message:
www/nginx*: update third-party nchan module, 1.3.6 -> 1.3.7

Bump PKGREVISIONs.

<ChangeLog>

fix: repeated DELETE requests can leave unresponsive subscribers connected to a \ 
channel
fix: channel info subscriber count incorrect when using Redis following unclean \ 
worker exit
     (Thanks, Steven Green)
feature: manually set Redis server roles to master or slave
fix: Redis server blacklist was only applied in cluster mode
     (Thanks, piotr-lwks)
fix: Nchan may fail to connect to non-cluster Redis if more than 1 server is \ 
specified
     (Thanks, Mike Baroukh)
fix: Some invalid message IDs may result in a worker crash
fix: Nchan may fail to reconnect ro a Redis cluster when using many workers due \ 
to a race condition
     (Thanks, Fabio Urquiza)
fix: subscriber info may be incorrect for Redis version >=7
fix: Redis cluster may fail to reconnect to a cluster without consensus
     (Thanks, Fabio Urquiza)

</ChangeLog>