Package: nginx-mod Version: 1:1.30.5-4~gps1+ubuntu2404+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3930 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.5-1, nginx-mod-r1.30.5, nginx-r1.30.5 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.5-4~gps1+ubuntu2404+stable_arm64.deb Size: 955540 SHA512: 360452c4cb481bc84408cfc9974be035819801763fcacdcef31a3dd17c435034e34ad5e3d0e0976af4feee1ad3f0631fb962684517cef482e74150dc886e1063 SHA256: d1595b9efcdca9c99e159a4ec401ca1613f6c7e0f1e2313a408be299d7f1ae3a SHA1: a8e3d77cb5a2038c5320668b066da749f3b646ca MD5sum: dd0d9c2a62c2743914dd97172c4db48c Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod Version: 1:1.30.4-4~gps1+ubuntu2404+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3930 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.4-1, nginx-mod-r1.30.4, nginx-r1.30.4 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.4-4~gps1+ubuntu2404+stable_arm64.deb Size: 955940 SHA512: e84b9f3cfef06a3da53f532be87c4e9718e0c8196e204318c2eae253e9932e9379fab72aa21396a7a0378310e8b0d45c5d80234a198b42e5733416b397246a03 SHA256: b754b93e18eaa92c54bbdc7bceccaf8b464ebf390040de2e9c000ef0785d9f23 SHA1: 1a96cd70156beb0deddbc28e46641f5c0d79d20e MD5sum: 821dcd0ef269c166c047098f8e319b45 Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.5-4~gps1+ubuntu2404+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 47 Depends: nginx-mod (= 1:1.30.5-4~gps1+ubuntu2404+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.5-4~gps1+ubuntu2404+stable_arm64.deb Size: 11644 SHA512: 075e8315ed3a47505d92ef51648286a6ad8087ec998dc27ab48b7ada321bc2d69fd6979b2cc8f495ff16bcec603d7adef3994a10c9ec62dfeb6db22079eb6dd1 SHA256: 9fa758cacb19d33d7746c3540d50bb0ad9b87b1e1c395ced4c85ad4088c5644e SHA1: 3d7813d8eb681b4d574bdb538df07ef90416655d MD5sum: 121c3c9023aa5331ec44a42a76df64df Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/ Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.4-4~gps1+ubuntu2404+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 47 Depends: nginx-mod (= 1:1.30.4-4~gps1+ubuntu2404+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.4-4~gps1+ubuntu2404+stable_arm64.deb Size: 11652 SHA512: f3c33a3b92e1c64cdace2b0e218816f1bec573d18f4c7cf8d5b34134a294dab40af941baf44eab5b7c2c9de50db9ca466610cb5d87ffb5a51f73b085849b5d67 SHA256: 6ce9e14809e073f756d6db1038047bb7f5d238bacf98d83b0e0f686d4759eb73 SHA1: cdaa2aadab2a9d565d2536c982a2e122eb137c93 MD5sum: 8754e2ea052cac2f1644aedf401e94c7 Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/