Package: nginx-mod Version: 1:1.30.6-4~gps1+ubuntu2404+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3930 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.6-1, nginx-mod-r1.30.6, nginx-r1.30.6 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.6-4~gps1+ubuntu2404+stable_arm64.deb Size: 955816 SHA512: e4ab03802b8d0e88e4b6228858c9d1cc816bbebeb1a43ecf460ff5366329e69d118f8fa1b7d9a1f4c9fc764ea2ed97a61519ce6c24d7355ad2e199bb1cb23ed2 SHA256: 8ae3f61bfc74e36c21ddca70b2b6dac249cd47c972210b39b237c07f564607c7 SHA1: 0340e44d189ebf80953a58951b21eea850e86e8c MD5sum: 75faa11de44ddde510fcf6afb2646702 Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod Version: 1:1.30.5-4~gps1+ubuntu2404+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3930 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.5-1, nginx-mod-r1.30.5, nginx-r1.30.5 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.5-4~gps1+ubuntu2404+stable_arm64.deb Size: 955540 SHA512: 360452c4cb481bc84408cfc9974be035819801763fcacdcef31a3dd17c435034e34ad5e3d0e0976af4feee1ad3f0631fb962684517cef482e74150dc886e1063 SHA256: d1595b9efcdca9c99e159a4ec401ca1613f6c7e0f1e2313a408be299d7f1ae3a SHA1: a8e3d77cb5a2038c5320668b066da749f3b646ca MD5sum: dd0d9c2a62c2743914dd97172c4db48c Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.6-4~gps1+ubuntu2404+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 47 Depends: nginx-mod (= 1:1.30.6-4~gps1+ubuntu2404+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.6-4~gps1+ubuntu2404+stable_arm64.deb Size: 11652 SHA512: 7b5828e4e59aae42c4d2c02b9f6b630b99459d056fa4d9e2df378df00e87edd7c6a99fadc1cddcf7f49d6f12570deb350bb8509753e14cc17e39fc25c13a4825 SHA256: 6b5ef90a4eaae87d5dec35ab975077bad84bbd43262a6615d0a609145df42fcc SHA1: d09688a91b9a6ccab0f86cc4dc13fbc80318cfa2 MD5sum: cb1ac0e7f96197ef166506ff7b73e90e Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/ Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.5-4~gps1+ubuntu2404+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 47 Depends: nginx-mod (= 1:1.30.5-4~gps1+ubuntu2404+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.5-4~gps1+ubuntu2404+stable_arm64.deb Size: 11644 SHA512: 075e8315ed3a47505d92ef51648286a6ad8087ec998dc27ab48b7ada321bc2d69fd6979b2cc8f495ff16bcec603d7adef3994a10c9ec62dfeb6db22079eb6dd1 SHA256: 9fa758cacb19d33d7746c3540d50bb0ad9b87b1e1c395ced4c85ad4088c5644e SHA1: 3d7813d8eb681b4d574bdb538df07ef90416655d MD5sum: 121c3c9023aa5331ec44a42a76df64df Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/