Security

• fixed HTTP2 CVE-2023-44487 @lianglli

Features

• dynamically configure different TLS protocols for different server names without tengine reload based on tengine-ingress @lianglli
• dynamically configure HTTP routes based on multiple values of a specific header, cookie or query parameter without tengine reload based on [tengine-in...

Features

• dynamically reconfigure the servers, locations and upstreams without reloading or restarting worker processes [tengine-ingress] @drawing, @lianglli
• HTTP/3 support (QUIC v1 and draft-29)[XQUIC] @lurker-Chen, @Kulsk, @lianglli
• high-speed UDP transmission with kernel-bypass [XUDP] @D-Wythe, @fengidri
• dynamically reconfigure canary routing based on standard and custom HTTP head...

Changes

• Change: updated ngx_http_proxy_connect_module to v0.0.4 by @chobits in https://github.com/alibaba/tengine/pull/1735
• Bugfix: fixed compilation error in stream_set module by @chobits in https://github.com/alibaba/tengine/pull/1749
• Bugfix: fixed NTLS cert check, move sign/enc certficate to upstream by @dongbeiouba in https://github.com/alibaba/tengine/pull/1753
  • Change: add ne...

Changes

• Change: updated to nginx core 1.22.1 by @jiuzhoucui @chobits in https://github.com/alibaba/tengine/pull/1719 https://github.com/alibaba/tengine/pull/1733 https://github.com/alibaba/tengine/pull/1731
• Security: nginx security advisory (CVE-2022-41741, CVE-2022-41742) by @taomaree in https://github.com/alibaba/tengine/pull/1687
• Feature: ssl proxy module support ntls. by @wa...

Security

• Fixed 1-byte memory overwrite in resolver (CVE-2021-23017)

Feature

• Added new module ngx_openssl_ntls to support NTLS protocol(TLCP and GM/T 0024-2014)

Changes

Changes with Tengine 2.3.4...