Issue NGINX 1.21.4

formed Main branch production NGINX 1.21.4 , within which the development of new capabilities continues (in a parallel supported stable branch 1.20, only changes related to the elimination of serious errors and vulnerabilities are made).

Basic changes :

  • stopped support for the installation of HTTP / 2 connections using the NPN extension (Next Protocol Negotiation) instead of ALPN;
  • The closing of SSL connections is provided when using the ALPN extension client, if the supported protocol is not selected during the connection matching process;
  • In the “SendFile_max_chunk” directive, the default value is changed by 2 megabytes;
  • in the Stream module Added proxy_half_close , with which you can configure the behavior when closing the proximized connection TCP on one of the sides (“TCP Half-Close”);
  • in the Stream module Added SSL_ALPN To define the list of supported ALPN protocols (H2, HTTP / 1.1) and the variable $ ssl_alpn_protocol , reflecting the AlpN protocol consistent with the client;
  • Added support for the call ssl_sendfile () when using OpenSSL 3.0;
  • Added directive “ mp4_start_key_frame ” in the NGX_HTTP_MP4_Module module for broadcasting video stream, starting from a keyframe.
  • Fixed Setting $ CONTENT_LENGTH variable when using Chunked Transfer Encoding;
  • Fixed connection caching error when receiving an answer in incorrect length from the proximated backend;
  • Fixed logging with the level of “error” instead of “info” with incorrect headers from the backends;
  • Fixed query hang errors when using HTTP / 2 and AIO_WRITE directives.
/Media reports.