x86_64 GetPageSpeed extras repository for CentOS/RHEL 8

Update: nginx-module-upsync-1.30.6+2.1.4-2.el8.gps

Wed, 21 Oct 2026 02:10:29 +0000

Package: nginx-module-upsync
Summary: NGINX module for syncing upstreams from consul or etcd

Description:
Syncs upstreams from consul or others, dynamically modify backend-servers attribute(weight, max_fails,...), needn't reload nginx. It may not always be convenient to modify configuration files and restart NGINX. For example, if you are experiencing large amounts of traffic and high load, restarting NGINX and reloading the configuration at that point further increases load on the system and can temporarily degrade performance. The module can be more smoothly expansion and constriction, and will not influence the performance. Another module, nginx-module-stream-upsync supports nginx stream module(TCP protocol), please be noticed. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_upsync_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-upsync-1.30.6+2.1.4-2.el8.gps.x86_64 [63 KiB]

(no changelog entry)

Update: nginx-module-stream-upsync-1.30.6+1.3.0-2.el8.gps

Wed, 21 Oct 2026 02:10:10 +0000

Package: nginx-module-stream-upsync
Summary: NGINX module for syncing stream backends from consul or etcd

Description:
NGINX module which allows to sync upstreams from consul or others, dynamically modify backend-servers attribute(weight, max_fails,...), needn't reload nginx. It may not always be convenient to modify configuration files and restart NGINX. For example, if you are experiencing large amounts of traffic and high load, restarting NGINX and reloading the configuration at that point further increases load on the system and can temporarily degrade performance. The module can be more smoothly expansion and constriction, and will not influence the performance. This module is for stream backends! Another module, nginx-module-upsync is for HTTP backends To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_stream_upsync_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-stream-upsync-1.30.6+1.3.0-2.el8.gps.x86_64 [64 KiB]

(no changelog entry)

Update: nginx-1.30.6-74.el8.gps

Sat, 17 Oct 2026 15:26:05 +0000

Package: nginx
Summary: High performance web server

Description:
nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server.

Changes:

nginx-1.30.6-74.el8.gps.x86_64 [1.0 MiB]

Changelog by Danila Vershinin (2026-10-17):

- Bump bundled nginx-module-gps-license 1.9.1 -> 1.10.0: the 503 page
  button label is now reason-aware (missing="Set up your token",
  expired="Renew license", invalid="Fix your token", revoked="Restart
  subscription") and its URL carries ?ref=nginx503 so landing-page
  analytics can attribute 503-driven arrivals.

Update: nginx-ech-1.30.6-74.el8.gps

Sat, 17 Oct 2026 15:26:05 +0000

Package: nginx-ech
Summary: Encrypted Client Hello key management for NGINX

Description:
Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule. The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/sysconfig/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/

Changes:

nginx-ech-1.30.6-74.el8.gps.x86_64 [25 KiB]

Changelog by Danila Vershinin (2026-10-17):

- Bump bundled nginx-module-gps-license 1.9.1 -> 1.10.0: the 503 page
  button label is now reason-aware (missing="Set up your token",
  expired="Renew license", invalid="Fix your token", revoked="Restart
  subscription") and its URL carries ?ref=nginx503 so landing-page
  analytics can attribute 503-driven arrivals.

Update: nginx-module-doh-1.30.6+0.2-2.el8.gps

Thu, 15 Oct 2026 16:32:10 +0000

Package: nginx-module-doh
Summary: NGINX module for serving DNS-over-HTTPS (DOH) requests

Description:
Simple NGINX module for serving DNS-over-HTTPS (DOH) requests. CAVEAT EMPTOR: This module is experimental, even though I have been using it successfully with both Firefox and Curl, there may be undiscovered bugs. Zone transfer is currently not officially supported. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_doh_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-doh-1.30.6+0.2-2.el8.gps.x86_64 [20 KiB]

(no changelog entry)

Update: nginx-module-tcp-fingerprint-1.30.6+0.1.0-2.el8.gps

Thu, 15 Oct 2026 15:02:35 +0000

Package: nginx-module-tcp-fingerprint
Summary: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables

Description:
Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_tcp_fingerprint_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-tcp-fingerprint-1.30.6+0.1.0-2.el8.gps.x86_64 [25 KiB]

(no changelog entry)