Package: nginx-mod Version: 1:1.30.5-4~gps1+ubuntu2204+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3837 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.5-1, nginx-mod-r1.30.5, nginx-r1.30.5 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.5-4~gps1+ubuntu2204+stable_arm64.deb Size: 962540 SHA512: 63e3e218c617794ac3e3616c033ab726937c30681593ac87a6ee985b716b4fb76fec9250e9e82e60642a446458dfe03908b8a90d95555d49af9c71bbb49eedc9 SHA256: 877dc29dbcf98d00c785879165d6945bac628df904bdbac39338d3dfd89a53f6 SHA1: 2a6d3d11191e516aec36888e95e1997b90dd822c MD5sum: 4b3d15b009befb1cdfea1b9b8649b86a Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod Version: 1:1.30.4-4~gps1+ubuntu2204+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3837 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.4-1, nginx-mod-r1.30.4, nginx-r1.30.4 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.4-4~gps1+ubuntu2204+stable_arm64.deb Size: 962708 SHA512: a5b4e449799ca554c48b1ba64945517a5b6f5ae45208c0cc999d4a394adadb3408efe2c9a27bf235091dc3f5632ab3204f0582c18a36bb40c914e4c7fc672325 SHA256: 6ebf040605514121c76d8255159301627297e2d0766acfcfd0212d044775e541 SHA1: f7866833d9c508c54e066ba1d20ebbff67a12f74 MD5sum: a181b4c59e6503ed5b45c14c922bae75 Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.5-4~gps1+ubuntu2204+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 47 Depends: nginx-mod (= 1:1.30.5-4~gps1+ubuntu2204+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.5-4~gps1+ubuntu2204+stable_arm64.deb Size: 11652 SHA512: 5a191068132dafadcc1dec7810165e9cb86e1316fa1899838583c89fb96ccf40efc2dc6eba3df1357c5ffed6f814f2a76c8471cf0c7069264f497fe5d2ac0925 SHA256: e6cc2c9667908bbb88715e3cc1a03e5f056d9aea28738cb046888731247ca604 SHA1: e7b73054f28e37a1eeccd1602b8953f5b6edafae MD5sum: f17dc1a2fda7b118c899d5ffb2d0e7e0 Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/ Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.4-4~gps1+ubuntu2204+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 47 Depends: nginx-mod (= 1:1.30.4-4~gps1+ubuntu2204+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.4-4~gps1+ubuntu2204+stable_arm64.deb Size: 11652 SHA512: 1409bc5f15e13761fd281e8b4625c6df0229b838df4283d5f1fd21950b394dff3f5f0b3437a6c34b149adaa0938a52138161057937a025180ef6e8bfc1c74e04 SHA256: b5c732225c09c3f1d1df0c5cc9acdc626daadf54d428fcfb619189144aa0ea6b SHA1: e346c53bf4c100fafe788f6d3f22053494f73a72 MD5sum: 6baadfaa1d28cbb96bc6556a119eab68 Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/