Update: nginx-mod-1.30.6-72.el8.gps

Sat, 17 Oct 2026 15:40:56 +0000

Package: nginx-mod
Summary: High-performance web server

Description:
nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. This version adds some patches to improve performance: * HPACK by Cloudflare * Dynamic TLS records Built with OpenSSL 3.5 (ABI-isolated openssl35 package) to support HTTP/3 with post-quantum X25519MLKEM768 key exchange, ensuring you're at the forefront of web technology. Be careful using this in production. This package merely addresses all the crazy folks who want you to compile NGINX to get the above features. The compiled NGINX is evil for many reasons. For more info, see: https://www.getpagespeed.com/server-setup/where-compilation-went-wrong The lesser, as well as faster evil is here. Packaged install is easier to use in production and is also easier to roll back to stable NGINX version in case there's an issue with those patches.

Changes:

nginx-mod-1.30.6-72.el8.gps.aarch64 [1.0 MiB]

Changelog by Danila Vershinin (2026-10-17):

- Bump bundled nginx-module-gps-license 1.9.1 -> 1.10.0: the 503 page
  button label is now reason-aware (missing="Set up your token",
  expired="Renew license", invalid="Fix your token", revoked="Restart
  subscription") and its URL carries ?ref=nginx503 so landing-page
  analytics can attribute 503-driven arrivals.

Update: nginx-mod-ech-1.30.6-72.el8.gps

Sat, 17 Oct 2026 15:40:56 +0000

Package: nginx-mod-ech
Summary: Encrypted Client Hello key management for NGINX-MOD

Description:
Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/sysconfig/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/sysconfig/nginx-ech-publish and that record is republished automatically after every rotation. ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/

Changes:

nginx-mod-ech-1.30.6-72.el8.gps.aarch64 [35 KiB]

Changelog by Danila Vershinin (2026-10-17):

- Bump bundled nginx-module-gps-license 1.9.1 -> 1.10.0: the 503 page
  button label is now reason-aware (missing="Set up your token",
  expired="Renew license", invalid="Fix your token", revoked="Restart
  subscription") and its URL carries ?ref=nginx503 so landing-page
  analytics can attribute 503-driven arrivals.

aarch64 GetPageSpeed extras repository for CentOS/RHEL 8

Update: nginx-mod-1.30.6-72.el8.gps

Changes:

Update: nginx-mod-ech-1.30.6-72.el8.gps

Changes: