# changelog

author: Andrei Belov <defan@nginx.com>
changelog:
  - 1.9.4-1 (nginx-plus-r7)
  - TCP proxy: access control, connection limiting, bandwidth control
  - TCP proxy: client-side proxy protocol, proxy_bind, listen backlog, tcp_nodelay
  - more efficient connections distribution ("reuseport" parameter in listen)
  - thread pools for reading/sending files without blocking worker processes
  - sub_filter: multiple filters support, variables support
  - HLS: "start", "end" and "offset" arguments support
  - upstream: proxying NTLM authentication requests support
  - dumping entire confgiuration to stdout support ("-T" command-line switch)
  - new metrics in status dataset (incl. SSL handshakes, upstream queue overflows)
  - updated status dashboard


author: Andrei Belov <defan@nginx.com>
changelog:
  - 1.9.4-2 (nginx-plus-r7-p1)
  - bugfix: sub_filter initialization in http{} level
  - bugfix: accidental SSL connection drop in stream proxy
  - updated status dashboard


author: Andrei Belov <defan@nginx.com>
changelog:
  - 1.9.4-3 (nginx-plus-r7-p2)
  - fixed possible segmentation fault on DNS format error
  - fixed PROXY protocol on IPv6 sockets (trac ticket #858)


author: Andrei Belov <defan@nginx.com>
changelog:
  - 1.9.9-1 (nginx-plus-r8)
  - introduced HTTP/2 support
  - caching improvements: proxy_cache_convert_head, slice module
  - dynamic upstreams: ability to keep states between reloads
  - healthchecks: support for arbitrary ports
  - realip module: $realip_remote_addr variable
  - syslog logging: "nohostname" parameter
  - updated status dashboard


author: Andrei Belov <defan@nginx.com>
changelog:
  - 1.9.9-3 (nginx-plus-r8-p2)
  - fixed buffer over-read while logging invalid request headers
  - various fixes in the HTTP/2 protocol support


author: Andrei Belov <defan@nginx.com>
changelog:
  - 1.9.13-1 (nginx-plus-r9)
  - introduced standalone packages with dynamic modules
  - UDP proxy support added to the stream module
  - upstream: retrieving servers configuration via DNS SRV records
  - resolver: TCP fallback on retrieving large DNS responses
  - proxy: changed handling of non-idempotent requests (POST, LOCK, PATCH)
  - cache: improved meta-data accounting
  - core: support for automatic binding of worker processes to available CPUs
  - core: the "aio_write" directive (offload write operations to thread pools)
  - added support for setting custom "server_tokens" string
  - updated status dashboard


author: Andrei Belov <defan@nginx.com>
changelog:
  - 1.11.3-1 (nginx-plus-r10)
  - new dynamic modules available: ModSecurity, nginScript
  - support for client authorization using the JSON Web Token (JWT)
  - stream: variables, resolver, map/geo/geo_ip/split_clients modules
  - support for multiple SSL certificate types per server/SNI name
  - transparent proxy mode support
  - IP_BIND_ADDRESS_NO_PORT socket option for upstream connections
  - HTTP/2: unbuffered upload support, general bugfixes
  - new variables: $request_id, $proxy_protocol_port, $realip_remote_port


author: Andrei Belov <defan@nginx.com>
changelog:
  - libmodsecurity updated to v3.0.0-erc1.3-nginx
  - ModSecurity-nginx updated to v0.1.3
  - improved SecRule parser (OWASP CRS v3.0.0 compatible)
  - improved calculation of various scores in "anomaly scoring" mode
  - disruptive actions are now explicitly marked in nginx error log
  - log level for disruptive actions increased to "warn"


author: Andrei Belov <defan@nginx.com>
changelog:
  - base version updated to 1.11.10-1 (nginx-plus-r12)
  - libmodsecurity updated to v3.0.0-erc1.5-nginx
  - ModSecurity-nginx updated to v0.1.4
  - fixed segfaults on nginx reloads
  - performance improvements in SecRule parser


author: Andrei Belov <defan@nginx.com>
changelog:
  - libmodsecurity updated to v3.0.0-erc1.6-nginx
  - ModSecurity-nginx updated to v0.1.5
  - improved rules configuration merging
  - improved performance in multi-worker setups
  - reduced amount of logging for valid requests
  - include the modsec-rules-check command-line tool


author: Andrei Belov <defan@nginx.com>
changelog:
  - libmodsecurity updated to 3.0.0-1 (v3/master as of ab3afb2)
  - ModSecurity-nginx updated to 1.0.0-1 (master as of 7e328a3)
  - performance improvements in libmodsecurity
  - memory leak fixes in ModSecurity-nginx


author: Andrei Belov <defan@nginx.com>
changelog:
  - libmodsecurity updated to 3.0.0-2 (v3/master as of 077b182)
  - ModSecurity-nginx updated to 1.0.0-2 (master as of 6d5f759)
  - memory leak fixes in libmodsecurity and ModSecurity-nginx


author: Andrei Belov <defan@nginx.com>
changelog:
  - base version updated to 1.13.10-2 (nginx-plus-r15-p1)
  - explicitly disabled libmaxmind feature due to the fact that
    on CentOS libmaxmind is not available out of the box
    (EPEL repository required)


author: Andrei Belov <defan@nginx.com>
changelog:
  - libmodsecurity updated to v3.0.2-72-g156527a, see changelog at
    https://github.com/SpiderLabs/ModSecurity/blob/156527a6f8880ee56bfd75023647ca3a98e97200/CHANGES
  - ModSecurity-nginx updated to 1.0.0-3 (master as of 37b76e8)


author: Andrei Belov <defan@nginx.com>
changelog:
  - base version updated to 1.15.2-1 (nginx-plus-r16)
  - libmodsecurity updated to v3.0.2-72-g156527a, see changelog at
    https://github.com/SpiderLabs/ModSecurity/blob/156527a6f8880ee56bfd75023647ca3a98e97200/CHANGES
  - ModSecurity-nginx updated to 1.0.0-3 (master as of 37b76e8)


author: Andrei Belov <defan@nginx.com> - 0.1.5-4.amzn1.ngx
changelog:
  - Change: libmodsecurity updated to v3.0.0-erc1.7-nginx.
  - Bugfix: a lot of improvements and fixes in libmodsecurity.


author: Andrei Belov <defan@nginx.com> - 1.0.0-1.amzn1.ngx
changelog:
  - Change: libmodsecurity updated to v3.0.0 (GA).
  - Change: ModSecurity-nginx updated to v1.0.0 (GA).


author: Andrei Belov <defan@nginx.com> - 1.0.0-2.amzn1.ngx
changelog:
  - Base version updated to 1.13.7-2 (nginx-plus-r14-p1).
  - Change: libmodsecurity updated to 3.0.0-1 (v3/master as of ab3afb2).
  - Change: ModSecurity-nginx updated to 1.0.0-1 (master as of 7e328a3).
  - Feature: performance improvements in libmodsecurity.
  - Bugfix: memory leak in ModSecurity-nginx.


author: Andrei Belov <defan@nginx.com> - 1.0.0-3.amzn1.ngx
changelog:
  - Change: libmodsecurity updated to 3.0.0-2 (v3/master as of 077b182).
  - Change: ModSecurity-nginx updated to 1.0.0-2 (master as of 6d5f759).
  - Bugfix: memory leaks in libmodsecurity and ModSecurity-nginx.


author: Andrei Belov <defan@nginx.com> - 16+1.0.0-5.amzn1.ngx
changelog:
  - Base version updated to 1.15.2-1 (nginx-plus-r16).
  - Change: libmodsecurity updated to v3.0.2-72-g156527a, see changelog at
    https://github.com/SpiderLabs/ModSecurity/blob/156527a/CHANGES
  - Change: ModSecurity-nginx updated to 1.0.0-3 (master as of 37b76e8).


author: Andrei Belov <defan@nginx.com> - 16+1.0.0-6.amzn1.ngx
changelog:
  - Change: libmodsecurity updated to v3.0.3, see changelog at
    https://github.com/SpiderLabs/ModSecurity/releases/tag/v3.0.3
  - Feature: recommended modsecurity.conf bundled into the package as
    /etc/nginx/modsec/modsecurity.conf.


author: Andrei Belov <defan@nginx.com> - 16+1.0.0-7.amzn1.ngx
changelog:
  - Change: libmodsecurity updated to v3.0.3-22-gdccb5e9e, see changelog at
    https://github.com/SpiderLabs/ModSecurity/blob/dccb5e9e/CHANGES
  - Change: ModSecurity-nginx updated to v1.0.0-40-g71ede63, see changelog at
    https://github.com/SpiderLabs/ModSecurity-nginx/blob/71ede63/CHANGES


author: Andrei Belov <defan@nginx.com> - 17+1.0.0-7.amzn1.ngx
changelog:
  - Base version updated to 1.15.7-1 (nginx-plus-r17).
  - Change: libmodsecurity updated to v3.0.3-22-gdccb5e9e, see changelog at
    https://github.com/SpiderLabs/ModSecurity/blob/dccb5e9e/CHANGES
  - Change: ModSecurity-nginx updated to v1.0.0-40-g71ede63, see changelog at
    https://github.com/SpiderLabs/ModSecurity-nginx/blob/71ede63/CHANGES


author: Andrei Belov <defan@nginx.com> - 18+1.0.0-8.amzn1.ngx
changelog:
  - Change: libmodsecurity updated to v3.0.3-96-gbeedddd6, see changelog at
    https://github.com/SpiderLabs/ModSecurity/blob/beedddd6/CHANGES
  - Change: ModSecurity-nginx updated to v1.0.0-58-gd7101e1, see changelog at
    https://github.com/SpiderLabs/ModSecurity-nginx/blob/d7101e1/CHANGES
  - Bugfix: fixed obtaining of server_addr
    (https://github.com/SpiderLabs/ModSecurity-nginx/pull/168).
  - Bugfix: fixed segmentation fault on invalid request line when the
    "error_page" is used
    (https://github.com/SpiderLabs/ModSecurity-nginx/pull/165).


author: Andrei Belov <defan@nginx.com> - 19+1.0.0-9.amzn1.ngx
changelog:
  - Change: libmodsecurity updated to v3.0.3-102-gc41ab31, see changelog at
    https://github.com/SpiderLabs/ModSecurity/blob/c41ab31/CHANGES
  - Bugfix: appearance of section "H" in audit log
    (https://github.com/SpiderLabs/ModSecurity/issues/2000).


author: Andrei Belov <defan@nginx.com> - 19+1.0.0-10.amzn1.ngx
changelog:
  - Change: libmodsecurity updated to v3.0.3-105-g199a9db, see changelog at
    https://github.com/SpiderLabs/ModSecurity/blob/199a9db/CHANGES
  - Bugfix: addressed an issue with logging "nolog"-marked rules
    (https://github.com/SpiderLabs/ModSecurity/pull/2199).


author: Andrei Belov <defan@nginx.com> - 19+1.0.0-11.amzn1.ngx
changelog:
  - Change: libmodsecurity updated to v3.0.3-114-g6624a18, see changelog at
    https://github.com/SpiderLabs/ModSecurity/blob/6624a18/CHANGES


author: Andrei Belov <defan@nginx.com> - 20+1.0.0-11.amzn1.ngx
changelog:
  - Base version updated to 1.17.6-1 (nginx-plus-r20).
  - Change: libmodsecurity updated to v3.0.3-114-g6624a18, see changelog at
    https://github.com/SpiderLabs/ModSecurity/blob/6624a18/CHANGES


author: Igor Ippolitov <iippolitov@nginx.com> - 20+1.0.0-12.amzn1.ngx
changelog:
  - Backported PR2348: rx:exit after full match; fix TX population after
    unused group https://github.com/SpiderLabs/ModSecurity/pull/2348


author: Andrei Belov <defan@nginx.com> - 21+1.0.1-1.amzn1.ngx
changelog:
  - Base version updated to 1.17.9-1 (nginx-plus-r21).
  - libmodsecurity updated to 3.0.4, see changelog at
    https://github.com/SpiderLabs/ModSecurity/blob/v3.0.4/CHANGES


author: Alexey Senin <asenin@nginx.com> - 23+1.0.1-4.amzn1.ngx
changelog:
  - ModSecurity-nginx updated to v1.0.1-23-g21bc821, see changelog at
    https://github.com/SpiderLabs/ModSecurity-nginx/blob/21bc821/CHANGES


