How to install nginx in CentOS/RHEL 9 (x86_64)

High performance web server

License: BSD Vendor: GetPageSpeed LLC https://nginx.org/

Install

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install dnf-plugins-core
sudo dnf config-manager --enable getpagespeed-extras-testing
sudo dnf -y install nginx

Description

nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server.

Compatibility

This package is compatible with all RHEL-based distributions, including CentOS, AlmaLinux, Oracle Linux, Rocky Linux, etc.

RPMs

Package	Size	Built	Changes
nginx-1.30.4-65.el9.gps.x86_64	1.1 MiB	2026-09-09	Danila Vershinin - SELinux: support "quic_bpf on;" (QUIC connection migration) behind a new · default-off boolean. The stock policy grants httpd_t nothing on the bpf · class, so enabling quic_bpf made nginx refuse to start with "failed to · create BPF map (13: Permission denied)". nginx-gps policy module 1.1 adds · the empirically-captured allows (bpf map/prog permissions plus the bpf, · perfmon and net_admin capability checks), all gated behind the boolean · nginx_quic_bpf, off by default: nothing changes for any install until · "setsebool -P nginx_quic_bpf 1". Verified on Rocky Linux 10 enforcing: · start, reload, binary upgrade and HTTP/3 traffic all clean with zero AVCs; · with the boolean off, behavior is exactly as before.
nginx-1.30.4-64.el9.gps.x86_64	1.1 MiB	2026-08-26	Danila Vershinin - nginx-ech: new subpackage for ECH (RFC 9849) key generation and rotation, · at parity with nginx-mod-ech (shared nginx-ech-keygen implementation) · - assert ECH is live at build time: a bogus ssl_ech_file must fail the · configuration test instead of degrading to a silent no-op
nginx-1.30.4-63.el9.gps.x86_64	1.1 MiB	2026-08-19	Danila Vershinin - link against openssl35 (OpenSSL 3.5 LTS, ABI-isolated private prefix) · instead of quictls: native OpenSSL QUIC API, real 0-RTT, post-quantum · X25519MLKEM768 key exchange, CVE stream tracked to April 2030