Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Nginx 1.5.10 released with SPDY 3.1 support

nginx.org

Post reply on HN
Print view View original

1–10 of 29 posts

Re: Nginx 1.5.10 released with SPDY 3.1 support

#3

Post by d0ugie »

Nice, Nginx!

Anyone know if this version of Nginx comes with SPDY enabled?

If so can it be installed with SPDY enabled in binaries through package managers, and if not, should 1.5.10 be compiled using --with-http_ssl_module and --with-http_spdy_module in order to take advantage of this?

If someone compiles 1.5.10 without that argument and then one day decides he wants to light up SPDY, does he need to recompile Nginx or is there a quicker solution? Thanks!

Re: Nginx 1.5.10 released with SPDY 3.1 support

#5

Post by bungle »

d0ugie wrote: post #3

Nice, Nginx! Anyone know if this version of Nginx comes with SPDY enabled? If so can it be installed with SPDY enabled in binaries through package managers, and if not, should 1.5.10 be compiled using --with-http_ssl_module and --with-http_spdy_module in order to take advantage of this? If someone compiles 1.5.10 without that argument and then one day decides he wants to light up SPDY, does he need to recompile Nginx…

Yes, it works with their official packages, at least. Just updated today.

Here is the basic config I'm using with it:

  listen                        x.x.x.x:443 default_server deferred spdy;
  listen                        [x:x:x:x::x]:443 default_server deferred spdy ipv6only=on;
  spdy_headers_comp             7;
  ssl                           on;
  ssl_certificate               /etc/ssl/private/x.crt;
  ssl_certificate_key           /etc/ssl/private/x.key;
  ssl_trusted_certificate       /etc/ssl/private/x.trust;
  ssl_protocols                 TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers                   EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS;
  ssl_prefer_server_ciphers     on;
  ssl_stapling                  on;
  ssl_stapling_verify           on;
  resolver                      8.8.8.8 x.x.x.x
  add_header                    Strict-Transport-Security "max-age=15768000; includeSubDomains";
  add_header                    X-Frame-Options   DENY;
  add_header                    Alternate-Protocol  443:npn-spdy/3;

Re: Nginx 1.5.10 released with SPDY 3.1 support

#6

Post by welder »

d0ugie wrote: post #3

Nice, Nginx! Anyone know if this version of Nginx comes with SPDY enabled? If so can it be installed with SPDY enabled in binaries through package managers, and if not, should 1.5.10 be compiled using --with-http_ssl_module and --with-http_spdy_module in order to take advantage of this? If someone compiles 1.5.10 without that argument and then one day decides he wants to light up SPDY, does he need to recompile Nginx…

Just verified on my server and Spdy is enabled if you use the mainline package from:

http://nginx.org/en/linux_packages.html#mainline

You can check your Spdy connections in Chrome from this page:

chrome://net-internals/#spdy

Re: Nginx 1.5.10 released with SPDY 3.1 support

#7

Post by nly »

bungle wrote: post #5
d0ugie wrote: post #3

Nice, Nginx! Anyone know if this version of Nginx comes with SPDY enabled? If so can it be installed with SPDY enabled in binaries through package managers, and if not, should 1.5.10 be compiled using --with-http_ssl_module and --with-http_spdy_module in order to take advantage of this? If someone compiles 1.5.10 without that argument and then one day decides he wants to light up SPDY, does he need to recompile Nginx…

Yes, it works with their official packages, at least. Just updated today. Here is the basic config I'm using with it: listen x.x.x.x:443 default_server deferred spdy; listen [x:x:x:x::x]:443 default_server deferred spdy ipv6only=on; spdy_headers_comp 7; ssl on; ssl_certificate /etc/ssl/private/x.crt; ssl_certificate_key /etc/ssl/private/x.key; ssl_trusted_certificate /etc/ssl/private/x.trust; ssl_protocols TLSv1 TLSv…

Any specific reason why you went for an STS timeout of 6 months?

Re: Nginx 1.5.10 released with SPDY 3.1 support

#8

Post by grk »

IgorPartola wrote: post #4
BobVerg wrote: post #2

There are official Linux packages with the latest version: http://nginx.org/en/linux_packages.html#mainline

Don't see the latest version at http://nginx.org/packages , at least for Ubuntu. It's still showing up as 1.4.4.

They're at http://nginx.org/packages/mainline/

Re: Nginx 1.5.10 released with SPDY 3.1 support

#9

Post by spindritf »

IgorPartola wrote: post #4
BobVerg wrote: post #2

There are official Linux packages with the latest version: http://nginx.org/en/linux_packages.html#mainline

Don't see the latest version at http://nginx.org/packages , at least for Ubuntu. It's still showing up as 1.4.4.

It's here http://nginx.org/packages/mainline/

There are two branches: stable[1] and mainline[2]. The cool new stuff goes to mainline first.

[1] http://nginx.org/en/linux_packages.html#stable

[2] http://nginx.org/en/linux_packages.html#mainline

Re: Nginx 1.5.10 released with SPDY 3.1 support

#10

Post by nodesocket »

bungle wrote: post #5
d0ugie wrote: post #3

Nice, Nginx! Anyone know if this version of Nginx comes with SPDY enabled? If so can it be installed with SPDY enabled in binaries through package managers, and if not, should 1.5.10 be compiled using --with-http_ssl_module and --with-http_spdy_module in order to take advantage of this? If someone compiles 1.5.10 without that argument and then one day decides he wants to light up SPDY, does he need to recompile Nginx…

Yes, it works with their official packages, at least. Just updated today. Here is the basic config I'm using with it: listen x.x.x.x:443 default_server deferred spdy; listen [x:x:x:x::x]:443 default_server deferred spdy ipv6only=on; spdy_headers_comp 7; ssl on; ssl_certificate /etc/ssl/private/x.crt; ssl_certificate_key /etc/ssl/private/x.key; ssl_trusted_certificate /etc/ssl/private/x.trust; ssl_protocols TLSv1 TLSv…

What does the following header do?

    add_header                    Alternate-Protocol  443:npn-spdy/3;
Also, what exactly does deferred do on the listen directive?
Post reply on HN