summaryrefslogtreecommitdiffhomepage
path: root/src/stream (unfollow)
AgeCommit message (Expand)AuthorFilesLines
2025-04-10Upstream: fixed passwords support for dynamic certificates.Sergey Kandaurov1-10/+58
2025-02-26SSL: removed stale comments.Sergey Kandaurov1-2/+0
2025-02-26SSL: improved logging of saving sessions from upstream servers.Sergey Kandaurov1-3/+3
2025-02-26SSL: using static storage for NGX_SSL_MAX_SESSION_SIZE buffers.Sergey Kandaurov1-6/+4
2025-02-05SNI: added restriction for TLSv1.3 cross-SNI session resumption.Sergey Kandaurov1-2/+25
2025-01-17Upstream: caching certificates and certificate keys with variables.Sergey Kandaurov1-1/+110
2025-01-17SSL: caching certificates and certificate keys with variables.Sergey Kandaurov3-33/+142
2024-11-22SSL: a new macro to set default protocol versions.Sergey Kandaurov2-18/+2
2024-11-11SSL: fixed MSVC compilation after ebd18ec1812b.蕭澧邦2-4/+12
2024-11-07Upstream: copy upstream zone DNS valid time during config reload.Mini Hawthorne2-1/+12
2024-11-07Upstream: per-upstream resolver.Vladimir Homutov2-6/+58
2024-11-07Upstream: pre-resolve servers on reload.Ruslan Ermilov1-7/+194
2024-11-07Upstream: construct upstream peers from DNS SRV records.Dmitry Volyntsev5-35/+213
2024-11-07Upstream: re-resolvable servers.Ruslan Ermilov9-28/+847
2024-10-31SSL: disabled TLSv1 and TLSv1.1 by default.Sergey Kandaurov2-0/+4
2024-09-20SSL: optional ssl_client_certificate for ssl_verify_client.Sergey Kandaurov1-2/+6
2024-08-22Stream: OCSP stapling.Sergey Kandaurov2-10/+73
2024-08-22Stream: client certificate validation with OCSP.Sergey Kandaurov2-0/+159
2024-08-09Stream ssl_preread: do not reallocate a parsed SNI host.Sergey Kandaurov1-1/+1
2024-06-27Stream: allow servers with no handler.Roman Arutyunyan1-7/+7
2024-05-03Stream pass: disabled passing from or to udp.Roman Arutyunyan1-0/+9
2024-04-11Stream pass: limited the number of passes per connection.Roman Arutyunyan1-0/+51
2024-03-18Fixed undefined behaviour with IPv4-mapped IPv6 addresses.Sergey Kandaurov3-4/+4
2024-03-14Geo: fixed uninitialized memory access.Piotr Sikora1-3/+1
2024-03-22Stream: $server_name.Sergey Kandaurov1-0/+23
2024-01-18Stream: moved fastopen compatibility check.Roman Arutyunyan1-6/+6
2024-03-22Stream: the "setfib" parameter of the "listen" directive.Sergey Kandaurov3-0/+26
2024-03-22Stream: the "accept_filter" parameter of the "listen" directive.Sergey Kandaurov3-0/+28
2024-03-22Stream: the "deferred" parameter of the "listen" directive.Sergey Kandaurov3-0/+24
2024-03-22Stream: reshuffled ngx_stream_listen_opt_t fields.Sergey Kandaurov1-6/+7
2024-03-22Overhauled some diagnostic messages akin to 1b05b9bbcebf.Sergey Kandaurov1-2/+2
2024-03-22Stream: using ngx_stream_ssl_srv_conf_t *sscf naming convention.Sergey Kandaurov2-98/+98
2024-02-21Stream: ngx_stream_pass_module.Roman Arutyunyan1-0/+276
2023-12-14Stream: virtual servers.Roman Arutyunyan7-354/+1416
2023-12-13Stream: socket peek in preread phase.Roman Arutyunyan1-43/+146
2023-05-14Common tree insert function for QUIC and UDP connections.Roman Arutyunyan1-5/+0
2023-05-14Stream: removed QUIC support.Roman Arutyunyan9-490/+3
2023-05-11QUIC: removed "quic_mtu" directive.Roman Arutyunyan1-34/+0
2023-04-06Stream: allow waiting on a blocked QUIC stream (ticket #2479).Roman Arutyunyan1-1/+6
2023-03-24SSL: enabled TLSv1.3 by default.Maxim Dounin2-4/+6
2023-02-22QUIC: OpenSSL compatibility layer.Roman Arutyunyan1-0/+10
2022-12-18Fixed port ranges support in the listen directive.Valentin Bartenev1-1/+1
2022-12-01SSL: fixed ngx_ssl_recv() to reset c->read->ready after errors.Maxim Dounin1-3/+2
2022-11-23Filtering duplicate addresses in listen (ticket #2400).Maxim Dounin1-13/+36
2022-11-02Increased maximum read PROXY protocol header size.Roman Arutyunyan1-4/+6
2022-10-17SSL: improved validation of ssl_session_cache and ssl_ocsp_cache.Sergey Kandaurov1-1/+1
2022-10-12PROXY protocol v2 TLV variables.Roman Arutyunyan1-0/+39
2022-06-29Upstream: optimized use of SSL contexts (ticket #1234).Maxim Dounin1-6/+58
2022-05-23Stream: don't flush empty buffers created for read errors.Aleksei Bavshin1-1/+1
2022-06-07Upstream: handling of certificates specified as an empty string.Sergey Kandaurov1-4/+7