Configuring HTTPS servers
To configure an HTTPS server, the ssl parameter must be enabled on listening sockets in the server block, and the locations of the server certificate and private key files should be specified: server { listen 443 ssl; server_name www.example.com; ssl_certificate www.example.com.crt; ssl_certificate_key www.example.com.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; ssl_ciphers HIGH:!aNULL:!MD5;
Module ngx_http_api_module
Enables collection of virtual http or stream server status information in the specified zone. Several servers may share the same zone. Starting from 1.17.0, status information can be collected per location. The special value off disables statistics collection in nested location blocks. Note that the statistics is collected in the context of a location where processing ends. It may be different fro
Module ngx_http_js_module
The ngx_http_js_module module is used to implement location and variable handlers in njs — a subset of the JavaScript language. Download and install instructions are available here. The example works since 0.4.0. http { js_import http.js; js_set $foo http.foo; js_set $summary http.summary; js_set $hash http.hash; resolver 10.0.0.1; server { listen 8000; location / { add_header X-Foo $foo; js_conte
Module ngx_http_auth_request_module
The ngx_http_auth_request_module module (1.5.4+) implements client authorization based on the result of a subrequest. If the subrequest returns a 2xx response code, the access is allowed. If it returns 401 or 403, the access is denied with the corresponding error code. Any other response code returned by the subrequest is considered an error. For the 401 error, the client also receives the “WWW-Au
Module ngx_http_grpc_module
Makes outgoing connections to a gRPC server originate from the specified local IP address with an optional port. Parameter value can contain variables. The special value off cancels the effect of the grpc_bind directive inherited from the previous configuration level, which allows the system to auto-assign the local IP address and port. The transparent parameter allows outgoing connections to a gR
nginx news
njs-0.8.1 version has been released, featuring the js_periodic directive for http and stream.
Development guide
For general purposes, nginx code uses two integer types, ngx_int_t and ngx_uint_t, which are typedefs for intptr_t and uintptr_t respectively. Most functions in nginx return the following codes: NGX_OK — Operation succeeded. NGX_ERROR — Operation failed. NGX_AGAIN — Operation incomplete; call the function again. NGX_DECLINED — Operation rejected, for example, because it is disabled in the configur
Development guide | nginx documentation
For general purposes, nginx code uses two integer types, ngx_int_t and ngx_uint_t, which are typedefs for intptr_t and uintptr_t respectively. Most functions in nginx return the following codes: NGX_OK — Operation succeeded. NGX_ERROR — Operation failed. NGX_AGAIN — Operation incomplete; call the function again. NGX_DECLINED — Operation rejected, for example, because it is disabled in the configur
Building nginx from Sources
The build is configured using the configure command. It defines various aspects of the system, including the methods nginx is allowed to use for connection processing. At the end it creates a Makefile. The configure command supports the following parameters: --help prints a help message. --prefix=path defines a directory that will keep server files. This same directory will also be used for all re
Module ngx_stream_ssl_preread_module
The ngx_stream_ssl_preread_module module (1.11.5) allows extracting information from the ClientHello message without terminating SSL/TLS, for example, the server name requested through SNI or protocols advertised in ALPN. This module is not built by default, it should be enabled with the --with-stream_ssl_preread_module configuration parameter. Selecting an upstream based on server name: map $ssl_
Core functionality
If accept_mutex is enabled, worker processes will accept new connections by turn. Otherwise, all worker processes will be notified about new connections, and if volume of new connections is low, some of the worker processes may just waste system resources. There is no need to enable accept_mutex on systems that support the EPOLLEXCLUSIVE flag (1.11.3) or when using reuseport. Prior to version 1.11
Beginner’s Guide
This guide gives a basic introduction to nginx and describes some simple tasks that can be done with it. It is supposed that nginx is already installed on the reader’s machine. If it is not, see the Installing nginx page. This guide describes how to start and stop nginx, and reload its configuration, explains the structure of the configuration file and describes how to set up nginx to serve out st
Module ngx_http_stub_status_module
The ngx_http_stub_status_module module provides access to basic status information. This module is not built by default, it should be enabled with the --with-http_stub_status_module configuration parameter. location = /basic_status { stub_status; } This configuration creates a simple web page with basic status data which may look like as follows: Active connections: 291 server accepts handled requ
Server names
Server names are defined using the server_name directive and determine which server block is used for a given request. See also “How nginx processes a request”. They may be defined using exact names, wildcard names, or regular expressions: server { listen 80; server_name example.org www.example.org; ... } server { listen 80; server_name *.example.org; ... } server { listen 80; server_name mail.*;
Module ngx_http_headers_module
The ngx_http_headers_module module allows adding the “Expires” and “Cache-Control” header fields, and arbitrary fields, to a response header. expires 24h; expires modified +24h; expires @24h; expires 0; expires -1; expires epoch; expires $expires; add_header Cache-Control private;
Module ngx_http_realip_module
The ngx_http_realip_module module is used to change the client address and optional port to those sent in the specified header field. This module is not built by default, it should be enabled with the --with-http_realip_module configuration parameter. set_real_ip_from 192.168.1.0/24; set_real_ip_from 192.168.2.1; set_real_ip_from 2001:0db8::/32; real_ip_header X-Forwarded-For; real_ip_recursive on
Module ngx_http_secure_link_module
The ngx_http_secure_link_module module (0.7.18) is used to check authenticity of requested links, protect resources from unauthorized access, and limit link lifetime. The authenticity of a requested link is verified by comparing the checksum value passed in a request with the value computed for the request. If a link has a limited lifetime and the time has expired, the link is considered outdated.
Alphabetical index of directives
absolute_redirect accept_mutex accept_mutex_delay access_log (ngx_http_log_module) access_log (ngx_stream_log_module) add_after_body add_before_body add_header add_trailer addition_types aio aio_write alias allow (ngx_http_access_module) allow (ngx_stream_access_module) ancient_browser ancient_browser_value api auth_basic auth_basic_user_file auth_delay auth_http auth_http_header auth_http_pass_cl
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
http://nginx.org/en/CHANGES-1.10
http://nginx.org/en/CHANGES?1.5.10