aarch64 GetPageSpeed extras repository for CentOS/RHEL 9

Update: nginx-module-unbrotli-1.30.6+0.0.3-2.el9.gps

Fri, 30 Oct 2026 03:34:36 +0000

Package: nginx-module-unbrotli
Summary: Decompresses Brotli-encoded responses for clients that do not support it

Description:
The ngx_unbrotli module is a filter that decompresses responses with Content-Encoding: br for clients that do not support Brotli encoding method. It allows to save I/O by unconditional Brotli compression of responses. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_unbrotli_filter_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-unbrotli-1.30.6+0.0.3-2.el9.gps.aarch64 [20 KiB]

(no changelog entry)

Update: nginx-module-media-framework-1.30.6+2.3.1-1.el9.gps

Fri, 30 Oct 2026 02:19:22 +0000

Package: nginx-module-media-framework
Summary: Kaltura Live Media Framework

Description:
A distributed framework for live video streaming. The system is composed of multiple components, each one responsible for a specific function. Enable modules by placing at the top of your /etc/nginx/nginx.conf file: load_module modules/ngx_http_api_module.so; load_module modules/ngx_http_pckg_core_module.so; load_module modules/ngx_kmp_in_module.so; load_module modules/ngx_kmp_out_module.so; load_module modules/ngx_live_module.so; load_module modules/ngx_rtmp_kmp_module.so; load_module modules/ngx_rtmp_module.so; load_module modules/ngx_stream_kmp_cc_module.so; load_module modules/ngx_stream_kmp_rtmp_module.so; load_module modules/ngx_stream_ts_module.so; load_module modules/ngx_ts_kmp_module.so;

Changes:

nginx-module-media-framework-1.30.6+2.3.1-1.el9.gps.aarch64 [467 KiB]	Changelog by Danila Vershinin (2026-10-30): - Carefully updated to upstream module version 2.3.1
nginx-module-media-framework-1.30.6+2.3.0-1.el9.gps.aarch64 [467 KiB]	Changelog by Danila Vershinin (2026-10-29): - Carefully updated to upstream module version 2.3.0

Update: nginx-module-rtmp-1.30.6+1.2.2-6.el9.gps

Thu, 29 Oct 2026 20:53:27 +0000

Package: nginx-module-rtmp
Summary: NGINX RTMP module

Description:
NGINX-based Media Streaming Server To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_rtmp_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-rtmp-1.30.6+1.2.2-6.el9.gps.aarch64 [189 KiB]

(no changelog entry)

Update: nginx-module-rtmp-selinux-1.30.6+1.2.2-6.el9.gps

Thu, 29 Oct 2026 20:53:27 +0000

Package: nginx-module-rtmp-selinux
Summary: SELinux policy module required to run nginx-module-rtmp

Description:
This package contains SELinux policy module necessary to run nginx-module-rtmp.

Changes:

nginx-module-rtmp-selinux-1.30.6+1.2.2-6.el9.gps.aarch64 [9 KiB]

(no changelog entry)

Update: nginx-module-nftset-access-1.30.6+3.0.0-5.el9.gps

Thu, 29 Oct 2026 20:53:06 +0000

Package: nginx-module-nftset-access
Summary: Zero-latency IP blocking using Linux kernel nftables sets

Description:
High-performance NGINX module for IP-based access control using Linux kernel nftables sets. Key Features: - Blacklist/Whitelist modes: Block or allow IPs based on nftables set membership - Multiple sets: Check against multiple nft sets in one directive - Live updates: Modify nft sets without reloading NGINX - Honeypot auto-add: Automatically add malicious IPs to nftables sets with configurable timeouts - Built-in rate limiting: Per-IP rate limiting with auto-ban to nftables sets - JavaScript challenges: Proof-of-work challenges to filter bots - Dual-stack support: Works with both IPv4 and IPv6 nftables sets - Custom status codes: Return any HTTP status when blocking - CIDR support: Use interval sets for network ranges - Prometheus metrics: Native /metrics endpoint for monitoring - JSON stats API: Detailed statistics endpoint - LRU cache: Shared memory cache for high-performance lookups Successor to ipset-access module, using modern nftables instead of legacy ipset. Compatible with realip module for proper client IP detection behind proxies. Note: This module requires CAP_NET_ADMIN capability. The selinux subpackage includes a systemd override and helper library to enable this automatically. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_nftset_access_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-nftset-access-1.30.6+3.0.0-5.el9.gps.aarch64 [38 KiB]

(no changelog entry)

Update: nginx-module-nftset-access-selinux-1.30.6+3.0.0-5.el9.gps

Thu, 29 Oct 2026 20:53:06 +0000

Package: nginx-module-nftset-access-selinux
Summary: SELinux policy module required to run nginx-module-nftset-access

Description:
This package contains SELinux policy module necessary to run nginx-module-nftset-access. Additionally, it includes a capability helper that allows NGINX workers to retain CAP_NET_ADMIN after dropping privileges, and a systemd drop-in to automatically configure the required capabilities for the nginx service.

Changes:

nginx-module-nftset-access-selinux-1.30.6+3.0.0-5.el9.gps.aarch64 [15 KiB]

(no changelog entry)

Update: nginx-module-live-common-1.30.6+2.3.1-2.el9.gps

Thu, 29 Oct 2026 20:52:43 +0000

Package: nginx-module-live-common
Summary: Kaltura Media Framework Common NGINX Module

Description:
Shared module for exposing an HTTP API, sending HTTP events, parsing JSON, KMP/KSMP definitions, etc., used by most Kaltura Media Framework NGINX modules. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_api_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-live-common-1.30.6+2.3.1-2.el9.gps.aarch64 [68 KiB]	(no changelog entry)
nginx-module-live-common-1.30.6+2.3.0-2.el9.gps.aarch64 [68 KiB]	(no changelog entry)

Update: nginx-module-ipset-access-1.30.6+2.0.10-5.el9.gps

Thu, 29 Oct 2026 20:52:21 +0000

Package: nginx-module-ipset-access
Summary: Zero-latency IP blocking using Linux kernel ipsets (v2)

Description:
High-performance NGINX module for IP-based access control using Linux kernel ipsets. Key Features: - Blacklist/Whitelist modes: Block or allow IPs based on ipset membership - Honeypot auto-add: Automatically add malicious IPs to ipsets with configurable timeouts and custom HTTP status codes - Built-in rate limiting: Per-IP rate limiting with auto-ban to ipsets - JavaScript challenges: Proof-of-work challenges to filter bots - Dual-stack support: Works with both IPv4 and IPv6 ipsets - FirewallD compatible: Integrates with firewall-cmd managed ipsets - Whitelist bypass: Whitelisted IPs skip rate limiting and challenges - Dry-run mode: Test rules in production without blocking - Prometheus metrics: Native /metrics endpoint for monitoring - LRU cache: Shared memory cache for high-performance lookups Uses libipset directly (no CLI fallback) for kernel-level performance. Compatible with realip module for proper client IP detection behind proxies. Note: This module requires CAP_NET_ADMIN capability. The selinux subpackage includes a systemd override and helper library to enable this automatically. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_ipset_access_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-ipset-access-1.30.6+2.0.10-5.el9.gps.aarch64 [37 KiB]

(no changelog entry)

Update: nginx-module-ipset-access-selinux-1.30.6+2.0.10-5.el9.gps

Thu, 29 Oct 2026 20:52:21 +0000

Package: nginx-module-ipset-access-selinux
Summary: SELinux policy module required to run nginx-module-ipset-access

Description:
This package contains SELinux policy module necessary to run nginx-module-ipset-access. Additionally, it includes a capability helper that allows NGINX workers to retain CAP_NET_ADMIN after dropping privileges, and a systemd drop-in to automatically configure the required capabilities for the nginx service.

Changes:

nginx-module-ipset-access-selinux-1.30.6+2.0.10-5.el9.gps.aarch64 [15 KiB]

(no changelog entry)

Update: nginx-1.30.6-75.el9.gps

Thu, 29 Oct 2026 15:31:12 +0000

Package: nginx
Summary: High performance web server

Description:
nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server.

Changes:

nginx-1.30.6-75.el9.gps.aarch64 [1.1 MiB]

Changelog by Danila Vershinin (2026-10-29):

- Bump bundled nginx-module-gps-license 1.10.0 -> 1.11.0: the default
  license token lookup now tries the canonical
  /etc/getpagespeed/license.jwt first (one file licenses every
  GetPageSpeed product on the host), then the legacy
  /etc/nginx/license.jwt, which keeps working forever; an explicit
  gps_license_token still wins

nginx-1.30.6-74.el9.gps.aarch64 [1.1 MiB]

Changelog by Danila Vershinin (2026-10-17):

- Bump bundled nginx-module-gps-license 1.9.1 -> 1.10.0: the 503 page
  button label is now reason-aware (missing="Set up your token",
  expired="Renew license", invalid="Fix your token", revoked="Restart
  subscription") and its URL carries ?ref=nginx503 so landing-page
  analytics can attribute 503-driven arrivals.

Update: nginx-ech-1.30.6-75.el9.gps

Thu, 29 Oct 2026 15:31:12 +0000

Package: nginx-ech
Summary: Encrypted Client Hello key management for NGINX

Description:
Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule. The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/sysconfig/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/

Changes:

nginx-ech-1.30.6-75.el9.gps.aarch64 [25 KiB]

Changelog by Danila Vershinin (2026-10-29):

- Bump bundled nginx-module-gps-license 1.10.0 -> 1.11.0: the default
  license token lookup now tries the canonical
  /etc/getpagespeed/license.jwt first (one file licenses every
  GetPageSpeed product on the host), then the legacy
  /etc/nginx/license.jwt, which keeps working forever; an explicit
  gps_license_token still wins

nginx-ech-1.30.6-74.el9.gps.aarch64 [25 KiB]

Changelog by Danila Vershinin (2026-10-17):

- Bump bundled nginx-module-gps-license 1.9.1 -> 1.10.0: the 503 page
  button label is now reason-aware (missing="Set up your token",
  expired="Renew license", invalid="Fix your token", revoked="Restart
  subscription") and its URL carries ?ref=nginx503 so landing-page
  analytics can attribute 503-driven arrivals.

Update: nginx-module-length-hiding-1.30.6+1.1.1-3.el9.gps

Wed, 28 Oct 2026 20:45:07 +0000

Package: nginx-module-length-hiding
Summary: NGINX Length Hiding Filter Module

Description:
NGINX length hiding filter module provides functionality to append randomly generated HTML comment to the end of response body to hide correct response length and make it difficult for attackers to guess secure token To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_length_hiding_filter_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-length-hiding-1.30.6+1.1.1-3.el9.gps.aarch64 [20 KiB]

(no changelog entry)

Update: nginx-module-bot-verifier-1.30.6+0.0.18-2.el9.gps

Tue, 27 Oct 2026 09:18:13 +0000

Package: nginx-module-bot-verifier
Summary: A search index bot verification module for NGINX

Description:
[BETA] This module has been tested on a handful of production websites. This is an NGINX module designed to validate actors claiming to be search engine indexers. It is right to disable security mechanisms for valid search engine bots to ensure your controls do not interfere with page rankings on any of the search providers. The issue is that the User Agent header cannot be trusted. In order to ensure you are allowing only valid search engine indexers, you must validate according to their published standards. This module performs that validation and caches the results to ensure you do not pay validation penalties on every request. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_bot_verifier_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-bot-verifier-1.30.6+0.0.18-2.el9.gps.aarch64 [41 KiB]

(no changelog entry)

Update: nginx-module-brotli-1.30.6+0.1.4-6.el9.gps

Tue, 27 Oct 2026 06:18:19 +0000

Package: nginx-module-brotli
Summary: NGINX Brotli dynamic modules

Description:
NGINX Brotli dynamic modules

Changes:

nginx-module-brotli-1.30.6+0.1.4-6.el9.gps.aarch64 [27 KiB]

Changelog by Danila Vershinin (2026-10-25):

- Ship data-only Gixy metadata for the restricted Brotli ratio alphabet.
- Co-own vendor policy directories without adding analyzer dependencies.

nginx-module-brotli-1.30.6+0.1.4-5.el9.gps.aarch64 [26 KiB]

Changelog by Danila Vershinin (2026-10-25):

- Ship data-only Gixy metadata for the restricted Brotli ratio alphabet.
- Co-own vendor policy directories without adding analyzer dependencies.

Update: nginx-module-encrypted-session-1.30.6+0.11+0.3.4-2.el9.gps

Mon, 26 Oct 2026 02:10:46 +0000

Package: nginx-module-encrypted-session
Summary: Encrypt and decrypt NGINX variable values

Description:
NGINX module to encrypt and decrypt NGINX variable values. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ndk_http_module.so; load_module modules/ngx_http_encrypted_session_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-encrypted-session-1.30.6+0.11+0.3.4-2.el9.gps.aarch64 [23 KiB]

(no changelog entry)

Update: nginx-module-array-var-1.30.6+0.7+0.3.4-2.el9.gps

Mon, 26 Oct 2026 02:10:28 +0000

Package: nginx-module-array-var
Summary: Array-typed variables for NGINX

Description:
Adds support for array-typed variables to NGINX config files. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ndk_http_module.so; load_module modules/ngx_http_array_var_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-array-var-1.30.6+0.7+0.3.4-2.el9.gps.aarch64 [21 KiB]

(no changelog entry)

Update: nginx-module-echo-1.30.6+0.66-2.el9.gps

Sun, 25 Oct 2026 02:10:32 +0000

Package: nginx-module-echo
Summary: nginx Echo module

Description:
An NGINX module for bringing the power of "echo", "sleep", "time" and more to NGINX's config file To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_echo_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-echo-1.30.6+0.66-2.el9.gps.aarch64 [46 KiB]

(no changelog entry)

Update: nginx-module-phantom-token-1.30.6+2.0.2-2.el9.gps

Sat, 24 Oct 2026 02:10:28 +0000

Package: nginx-module-phantom-token
Summary: Phantom Token NGINX Module

Description:
NGINX module that introspects phantom access tokens according to RFC 7662 To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_curity_http_phantom_token_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-phantom-token-1.30.6+2.0.2-2.el9.gps.aarch64 [28 KiB]

(no changelog entry)

Update: nginx-module-upsync-1.30.6+2.1.4-2.el9.gps

Wed, 21 Oct 2026 02:10:48 +0000

Package: nginx-module-upsync
Summary: NGINX module for syncing upstreams from consul or etcd

Description:
Syncs upstreams from consul or others, dynamically modify backend-servers attribute(weight, max_fails,...), needn't reload nginx. It may not always be convenient to modify configuration files and restart NGINX. For example, if you are experiencing large amounts of traffic and high load, restarting NGINX and reloading the configuration at that point further increases load on the system and can temporarily degrade performance. The module can be more smoothly expansion and constriction, and will not influence the performance. Another module, nginx-module-stream-upsync supports nginx stream module(TCP protocol), please be noticed. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_upsync_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-upsync-1.30.6+2.1.4-2.el9.gps.aarch64 [63 KiB]

(no changelog entry)

Update: nginx-module-stream-upsync-1.30.6+1.3.0-2.el9.gps

Wed, 21 Oct 2026 02:10:28 +0000

Package: nginx-module-stream-upsync
Summary: NGINX module for syncing stream backends from consul or etcd

Description:
NGINX module which allows to sync upstreams from consul or others, dynamically modify backend-servers attribute(weight, max_fails,...), needn't reload nginx. It may not always be convenient to modify configuration files and restart NGINX. For example, if you are experiencing large amounts of traffic and high load, restarting NGINX and reloading the configuration at that point further increases load on the system and can temporarily degrade performance. The module can be more smoothly expansion and constriction, and will not influence the performance. This module is for stream backends! Another module, nginx-module-upsync is for HTTP backends To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_stream_upsync_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-stream-upsync-1.30.6+1.3.0-2.el9.gps.aarch64 [65 KiB]

(no changelog entry)

Update: nginx-module-doh-1.30.6+0.2-2.el9.gps

Thu, 15 Oct 2026 16:33:02 +0000

Package: nginx-module-doh
Summary: NGINX module for serving DNS-over-HTTPS (DOH) requests

Description:
Simple NGINX module for serving DNS-over-HTTPS (DOH) requests. CAVEAT EMPTOR: This module is experimental, even though I have been using it successfully with both Firefox and Curl, there may be undiscovered bugs. Zone transfer is currently not officially supported. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_doh_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-doh-1.30.6+0.2-2.el9.gps.aarch64 [21 KiB]

(no changelog entry)

Update: nginx-module-tcp-fingerprint-1.30.6+0.1.0-2.el9.gps

Thu, 15 Oct 2026 15:02:58 +0000

Package: nginx-module-tcp-fingerprint
Summary: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables

Description:
Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_tcp_fingerprint_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Changes:

nginx-module-tcp-fingerprint-1.30.6+0.1.0-2.el9.gps.aarch64 [27 KiB]

(no changelog entry)