5 ms·

My favourite bits in this release: 1. Fix of the repeated-tries of non-idempotent requests bug. 2. Dynamic modules. 3. HTTP/2!! 4. reuseport in listen. 5.

My favourite bits in this release: 1. Fix of the repeated-tries of non-idempotent requests bug. 2. Dynamic modules. 3. HTTP/2!! 4. reuseport in listen. 5. SSLv3 disabled by default. 6. UDP Load Balancing.

tomschlick 11y ago
Dynamic modules will be the best thing since sliced bread. I have wanted to use a StatsD plugin for metrics but having to manually compile has kept me from doing so for 2 years. I don't want that technical debt sticking around.
- zepolen 11y ago
  Sounds like you should be automating more stuff, there is little reason compiling something like nginx should cause technical debt. Especially since nginx versions in stable distros are usually really old versions, and when it comes to security take a while to get patched up.
  - tomschlick 11y ago
    While thats true that it could be more automated, its a whole lot easier to automate an "apt-get install nginx-statsd" than manually compiling and having to make sure it doesn't break between versions. Basically I don't want to "own" the process.
    - vacri 11y ago
      It's like the old joke: New linux users use the default kernel of a distro because it 'just works', power users compile their own kernel to get every drop of performance, and senior users use the default kernel because it 'just works'...
      - tomschlick 11y ago
        Yup, plus you get the benefit of thousands of other people running the exact same setup which helps report/fix bugs.
takeda 11y ago
> UDP Load Blancing Isn't that just a feature creep? Doesn't look like anything that would be useful in a web server and load balancing of UDP is different than TCP. Layer 3 load balancing (e.g. LVS) would probably be more suitable.
- pritambaral 11y ago
  Nginx is not a web server. Nginx is a reverse-proxy. Nginx's sees a massive share of its usage as a web server, sure, but – from the very beginning – it was always intended to be a good reverse-proxy. Apart from http, nginx also supports mail (imap, pop3, smtp), stream sockets (tcp and unix), and few third-party ones too (like rtmp). And now, UDP as well. One of most needed features expected of a good reverse-proxy is load-balancing. Nginx is already quite good at it, but lacked UDP load balancing (like HAproxy – another reverse-proxy – does). That is no longer the case, and I'm sure the people that have asked HAproxy to support UDP will be pleased that nginx does it now.
  - MichaelGG 11y ago
    I suppose its support for static content and other HTTP-ish-server features mislead people. I use it, saw the mail stuff and figured it was "weird". Had no idea it could do general TCP proxying.
  - hrez 11y ago
    For reverse-proxy/LB it kinda sucks. No standard healthchecks for a long-long time and nowdays only in commercial version? Yes, you can compile in 3d party plugin but that just underscores the lacking.
    - Forbidden 11y ago
      You're completely wrong. Opensource version has always had in-flight healthchecks that work just perfect, see: https://www.youtube.com/watch?v=yQvcHy_tPjI https://www.youtube.com/watch?v=yQvcHy_tPjI
      - 11y ago
toomanythings2 11y ago
HTTP/2 has been available for a while now. iirc, SSLv3 has also been disabled for a while.
- pritambaral 11y ago
  TFA is a stable channel announcement. Everything in it has been available for a while now, but under the mainline channel. Like a new release of Ubuntu getting Linux 4.4 while Arch and Gentoo are on 4.5 already.

tomschlick 11y ago

Dynamic modules will be the best thing since sliced bread. I have wanted to use a StatsD plugin for metrics but having to manually compile has kept me from doing so for 2 years. I don't want that technical debt sticking around.

zepolen 11y ago
Sounds like you should be automating more stuff, there is little reason compiling something like nginx should cause technical debt. Especially since nginx versions in stable distros are usually really old versions, and when it comes to security take a while to get patched up.
- tomschlick 11y ago
  While thats true that it could be more automated, its a whole lot easier to automate an "apt-get install nginx-statsd" than manually compiling and having to make sure it doesn't break between versions. Basically I don't want to "own" the process.
  - vacri 11y ago
    It's like the old joke: New linux users use the default kernel of a distro because it 'just works', power users compile their own kernel to get every drop of performance, and senior users use the default kernel because it 'just works'...
    - tomschlick 11y ago
      Yup, plus you get the benefit of thousands of other people running the exact same setup which helps report/fix bugs.

takeda 11y ago

> UDP Load Blancing Isn't that just a feature creep? Doesn't look like anything that would be useful in a web server and load balancing of UDP is different than TCP. Layer 3 load balancing (e.g. LVS) would probably be more suitable.

pritambaral 11y ago
Nginx is not a web server. Nginx is a reverse-proxy. Nginx's sees a massive share of its usage as a web server, sure, but – from the very beginning – it was always intended to be a good reverse-proxy. Apart from http, nginx also supports mail (imap, pop3, smtp), stream sockets (tcp and unix), and few third-party ones too (like rtmp). And now, UDP as well. One of most needed features expected of a good reverse-proxy is load-balancing. Nginx is already quite good at it, but lacked UDP load balancing (like HAproxy – another reverse-proxy – does). That is no longer the case, and I'm sure the people that have asked HAproxy to support UDP will be pleased that nginx does it now.
- MichaelGG 11y ago
  I suppose its support for static content and other HTTP-ish-server features mislead people. I use it, saw the mail stuff and figured it was "weird". Had no idea it could do general TCP proxying.
- hrez 11y ago
  For reverse-proxy/LB it kinda sucks. No standard healthchecks for a long-long time and nowdays only in commercial version? Yes, you can compile in 3d party plugin but that just underscores the lacking.
  - Forbidden 11y ago
    You're completely wrong. Opensource version has always had in-flight healthchecks that work just perfect, see: https://www.youtube.com/watch?v=yQvcHy_tPjI https://www.youtube.com/watch?v=yQvcHy_tPjI
    - 11y ago

toomanythings2 11y ago

HTTP/2 has been available for a while now. iirc, SSLv3 has also been disabled for a while.

pritambaral 11y ago
TFA is a stable channel announcement. Everything in it has been available for a while now, but under the mainline channel. Like a new release of Ubuntu getting Linux 4.4 while Arch and Gentoo are on 4.5 already.