Package: nginx-mod Version: 1:1.30.4-4~gps1+ubuntu2404+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3930 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.4-1, nginx-mod-r1.30.4, nginx-r1.30.4 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.4-4~gps1+ubuntu2404+stable_arm64.deb Size: 955940 SHA512: e84b9f3cfef06a3da53f532be87c4e9718e0c8196e204318c2eae253e9932e9379fab72aa21396a7a0378310e8b0d45c5d80234a198b42e5733416b397246a03 SHA256: b754b93e18eaa92c54bbdc7bceccaf8b464ebf390040de2e9c000ef0785d9f23 SHA1: 1a96cd70156beb0deddbc28e46641f5c0d79d20e MD5sum: 821dcd0ef269c166c047098f8e319b45 Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.4-4~gps1+ubuntu2404+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 47 Depends: nginx-mod (= 1:1.30.4-4~gps1+ubuntu2404+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.4-4~gps1+ubuntu2404+stable_arm64.deb Size: 11652 SHA512: f3c33a3b92e1c64cdace2b0e218816f1bec573d18f4c7cf8d5b34134a294dab40af941baf44eab5b7c2c9de50db9ca466610cb5d87ffb5a51f73b085849b5d67 SHA256: 6ce9e14809e073f756d6db1038047bb7f5d238bacf98d83b0e0f686d4759eb73 SHA1: cdaa2aadab2a9d565d2536c982a2e122eb137c93 MD5sum: 8754e2ea052cac2f1644aedf401e94c7 Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/