Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

What NGINX Modules Are You Using?

HajtHajt Member

Comments

  • LeviLevi Veteran

    Does nginx brotli still maintained?

  • eva2000eva2000 Veteran
    edited May 2025

    @Levi said: Does nginx brotli still maintained?

    Should be. I have it disabled by default but users can optionally enable for Centmin Mod Nginx :)

    currently doing testing for Centmin Mod for AlmaLinux 10

    nginx version: nginx/1.28.0 (240525-135105-almalinux10-hyperv-docker-2118dac)
    built by gcc 14.2.1 20250110 (Red Hat 14.2.1-7) (GCC)
    built with OpenSSL 3.5.0 8 Apr 2025
    TLS SNI support enabled
    configure arguments: --with-ld-opt='-Wl,-E -L/usr/local/zlib-cf/lib -L/usr/local/nginx-dep/lib -lpcre2-8 -ljemalloc -Wl,-z,relro,-z,now -Wl,-rpath,/usr/local/nginx-dep/lib:/usr/local/zlib-cf/lib:/usr/local/nginx-dep/lib -pie -fuse-ld=gold -Wl,-Bsymbolic-functions -Wl,--as-needed' --with-cc-opt='-I/usr/local/zlib-cf/include -I/usr/local/nginx-dep/include -m64 -march=x86-64 -fPIC -g -O3 -fstack-protector-strong -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Wno-pointer-sign -Wp,-D_FORTIFY_SOURCE=2' --prefix=/usr/local/nginx --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --build=240525-135105-almalinux10-hyperv-docker-2118dac --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.5.2 --add-module=../ngx_cache_purge-2.5.3 --add-dynamic-module=../ngx_devel_kit-0.3.2 --add-dynamic-module=../set-misc-nginx-module-0.33 --add-dynamic-module=../echo-nginx-module-0.63 --add-module=../redis2-nginx-module-0.15 --add-module=../ngx_http_redis-0.4.0-cmm --add-module=../memc-nginx-module-0.20 --add-module=../srcache-nginx-module-0.33 --add-dynamic-module=../headers-more-nginx-module-0.38 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.3 --with-zlib-opt=-fPIC --with-http_ssl_module --with-http_v2_module

    With additional modules variables enabled and switch from OpenSSL 3.5.0 to Amazon AWS-LC crypto library and HTTP/3 QUIC

    AWS_LC_SWITCH='y'
    NGINX_VIDEO='y' (enables --with-http_flv_module --with-http_mp4_module --add-module=../nginx-rtmp-module  --with-http_slice_module)
    NGINX_LIBBROTLI='y'
    NGINX_GEOIPTWOLITE='y'
    NGINX_NJS='y' (enables njs module https://nginx.org/en/docs/njs/)
    

    nginx -V
    nginx version: nginx/1.28.0 (240525-152359-almalinux10-hyperv-docker-2118dac-br-a71f931)
    built by gcc 14.2.1 20250110 (Red Hat 14.2.1-7) (GCC)
    built with OpenSSL 1.1.1 (compatible; AWS-LC 1.52.0) (running with AWS-LC 1.52.0)
    TLS SNI support enabled
    configure arguments: --with-ld-opt='-Wl,-E -L/usr/local/zlib-cf/lib -L/opt/aws-lc-install/lib64 -lcrypto -lssl -L/usr/local/nginx-dep/lib -lpcre2-8 -lrt -ljemalloc -Wl,-z,relro,-z,now -Wl,-rpath,/usr/local/nginx-dep/lib:/usr/local/zlib-cf/lib:/opt/aws-lc-install/lib64:/usr/local/nginx-dep/lib -pie -fuse-ld=gold -Wl,-Bsymbolic-functions -Wl,--as-needed' --with-cc-opt='-I/opt/aws-lc-install/include -I/usr/local/zlib-cf/include -I/usr/local/nginx-dep/include -m64 -march=x86-64 -fPIC -g -O3 -fstack-protector-strong -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Wno-pointer-sign -Wp,-D_FORTIFY_SOURCE=2' --prefix=/usr/local/nginx --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --build=240525-152359-almalinux10-hyperv-docker-2118dac-br-a71f931 --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-http_flv_module --with-http_mp4_module --add-module=../nginx-rtmp-module --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --add-module=../ngx_http_geoip2_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --add-module=../njs/nginx --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream --with-stream_ssl_module --with-http_slice_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.5.2 --add-module=../ngx_cache_purge-2.5.3 --add-dynamic-module=../ngx_devel_kit-0.3.2 --add-dynamic-module=../set-misc-nginx-module-0.33 --add-dynamic-module=../echo-nginx-module-0.63 --add-module=../redis2-nginx-module-0.15 --add-module=../ngx_http_redis-0.4.0-cmm --add-module=../memc-nginx-module-0.20 --add-module=../srcache-nginx-module-0.33 --add-dynamic-module=../headers-more-nginx-module-0.38 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.3 --with-zlib-opt=-fPIC --with-http_ssl_module --with-http_v2_module --with-http_v3_module

    Thanked by 3dedipromo Hajt 0xC7
  • stream module to proxy TCP traffic.

  • I like https://github.com/VirtuBox/nginx-ee because it comes with everything I typically need

    Thanked by 2Hajt nghialele
  • HajtHajt Member

    @4pple5auc3 I've never seen that before - thanks for sharing!

  • aRNoLDaRNoLD Member

    @Hajt said:
    @4pple5auc3 I've never seen that before - thanks for sharing!

    And the best part is, the code writer made the green color words for Nginx's green.

    Thanked by 1ariq01
  • LeviLevi Veteran

    Anyone use naxsi? Alternative to mod_sec.

    Thanked by 1Hajt
  • RubbenRubben Member

    wdym nginx has modules??

  • @Levi said:
    Anyone use naxsi? Alternative to mod_sec.

    I'm using it in as part of my OPNsense setup, (where I have the Nginx plugin to proxy TCP/UDP streams), but it's not great protection.

    My main WAF is Safeline, which is built on Nginx and is surprisingly good: https://github.com/chaitin/safeline

    Thanked by 2Hajt ariq01
Sign In or Register to comment.