Package: nginx-mod Version: 1:1.30.6-4~gps1+ubuntu2604+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3930 Depends: libc6 (>= 2.38), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.6-1, nginx-mod-r1.30.6, nginx-r1.30.6 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.6-4~gps1+ubuntu2604+stable_arm64.deb Size: 966304 SHA512: 5f5b045df9a015dfec3bc46d83426779b5fb79a7d427c5ef015426964005e2c7b93c1263f0e7f36417407e7eb8859dbcc6edfa4012f985e0dde75f4abd68b997 SHA256: d986f252a5920aad8bebdc48ee4e3e95341164525d6ec65ad706d53c87bfb124 SHA1: b1883769a5c986aab74ebd713576b09b86893c46 MD5sum: abf44894baaca91f3f928ae9af6a384b Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.6-4~gps1+ubuntu2604+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 48 Depends: nginx-mod (= 1:1.30.6-4~gps1+ubuntu2604+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.6-4~gps1+ubuntu2604+stable_arm64.deb Size: 11664 SHA512: a376e1d871bc45f536ee90ced49e16074ce1b10634f8bb11cd8077c95a0fab4036a03938e6eb71a18b801406fae900829627ce5b13995c692196e5fc7b96589e SHA256: 45db8af808e9bd6c38b88eb8e2a557369653ae93005efbf16f6cdbafd0a05e69 SHA1: 611b84a6341a685cf7655160fca9820b1ddc01cc MD5sum: dc6027461fe0ceb96237e59f9c8b6f41 Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/