Package: nginx-mod Version: 1:1.30.6-4~gps1+ubuntu2204+stable Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 3936 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.6-1, nginx-mod-r1.30.6, nginx-r1.30.6 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.6-4~gps1+ubuntu2204+stable_amd64.deb Size: 1023336 SHA512: a1a32424706d1178a207cc9df704ed9ff865a2f8c8c38a6190d22fdaf98c8a1fa3d05d46d38869cec1dca33e46ab4d56b29509cc793d35ef95f34b255c3b7dc7 SHA256: 3a946b1e8fb72c595c9120b7022d0856da296cbb4f9c73fbc8c67ec777ef7fb4 SHA1: 74d2799a3e95e009cafcc8a1b7a35ac8a7548aa8 MD5sum: ace2e21ded16ff55a2c4835bf1c58fca Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod Version: 1:1.30.5-4~gps1+ubuntu2204+stable Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 3936 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.5-1, nginx-mod-r1.30.5, nginx-r1.30.5 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.5-4~gps1+ubuntu2204+stable_amd64.deb Size: 1022320 SHA512: 40886d53e49b285c48703bd4375086231b44c4b2442131e3f33bf056d674861c419ca9c22b5a7ba1905b416aa2e922bf2ec95a76b2287cdcc27e7926c886af75 SHA256: 1cb43d7ac1d2ba74e285dfafa04479c1f70e272e8e685df21fda5fdf91530031 SHA1: b1d0df4b5488ecb9d9df9b5961ca2cd3f2f94c89 MD5sum: 7599f95d4394c1f6e477e3b5d969e9ea Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.6-4~gps1+ubuntu2204+stable Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 47 Depends: nginx-mod (= 1:1.30.6-4~gps1+ubuntu2204+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.6-4~gps1+ubuntu2204+stable_amd64.deb Size: 11652 SHA512: cfc1acfb209f9a1cef6b248fc47cb9ba09c1b850fc8acf4734fda388d0cd1f16537f2709d8be65dfbe498713d61b8bf908515f0770d2cafde3051ed98a17ecb7 SHA256: 032cf88a2e2cc6fb0c25c77fb08efa6eda9a0d912e2908725420c8e4b58a3baa SHA1: 76a29cf61bff0528bcbbac61b2087b61395d4c56 MD5sum: 1abd6bdaf2cea686f654ce435e23cda4 Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/ Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.5-4~gps1+ubuntu2204+stable Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 47 Depends: nginx-mod (= 1:1.30.5-4~gps1+ubuntu2204+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.5-4~gps1+ubuntu2204+stable_amd64.deb Size: 11652 SHA512: 39366a2e9e0c6089dc65938c4f1f8a248993a1db76c5468f14a42829055a82f00d63ba9c196f7701f8c3fd75093c090d2bb67eb694e32679100d119594c561cf SHA256: 234111a3d67d3fad389c9948a53d4c0c512af71f2fded4e6785009cf6433d451 SHA1: 51e952d6f336884882d90df4405e9782d2723f27 MD5sum: 9aab7480e1a82ab1f8841285e9dbb89d Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/