NGINX Plus Technical Specifications

Alpine Linux

• 3.9 (x86_64)
• 3.10 (x86_64)
• 3.11 (x86_64)

Amazon Linux

• 2018.03+ (x86_64)

Amazon Linux 2

• LTS (x86_64)

CentOS

• 6.5+ (x86_64)
• 7.4+ (x86_64, ppc64le)
• 8.0+ (x86_64)

Debian

• 9 (x86_64)
• 10 (x86_64)

FreeBSD

• 11.2+ (amd64, x86_64)
• 12.0+ (amd64, x86_64)

Oracle Linux

• 6.5+ (x86_64)
• 7.4+ (x86_64)

Red Hat Enterprise Linux (RHEL)

• 6.5+ (x86_64)
• 7.4+ (x86_64, ppc64le)
• 8.0+ (x86_64, aarch64)

SUSE Linux Enterprise Server (SLES)

• 12 (x86_64)
• 15 (x86_64)

Ubuntu

• 16.04 LTS (x86_64, aarch64, ppc64le)
• 18.04 LTS (x86_64, aarch64)
• 19.10 (x86_64)
• 20.04 (x86_64, aarch64)

Notes:

• CentOS, Oracle Linux, and RHEL 6.5 users: see this advisory when upgrading to version 6.6.
• nginx-ha-keepalive and nginx-sync modules not supported in Alpine Linux.

Brotli

• Alpine Linux: Not supported
• Amazon Linux/Amazon Linux 2: Not supported
• CentOS/RHEL 6.5+, 7.4+: Not supported
• Debian 9: Not supported
• Oracle Linux: Not supported
• SLES 12: Not supported

GeoIP

• CentOS/RHEL 8.0+: Not supported
• FreeBSD: Not supported

GeoIP2

• CentOS/RHEL 7.4+: ppc64le not supported (x86_64 only)
• SLES: Not supported

NGINX ModSecurity WAF

• CentOS/Oracle Linux/RHEL: ppc64le not supported (x86_64 only)
• Ubuntu: aarch64 and ppc64le not supported (x86_64 only)

OpenTracing

• CentOS/Oracle Linux/RHEL 6.5+: Not supported
• SLES 12: Not supported

Core

• Core – Control basic functioning (mutexes, events, thread pools, workers, and so on)

Clustering

• Zone Sync – Synchronize shared memory zones among nodes in a cluster

HTTP Core

• HTTP Core – Process HTTP traffic
• Addition – Prepend and append data to a response
• Auto Index – Generate directory listings
• Charset – Add character set in Content-Type field of HTTP response header, and define or convert between character sets
• Empty GIF – Generate empty image response
• Gunzip – Decompress responses for clients that don’t support compression
• Gzip – Use GZIP to compress HTTP responses
• Gzip Static – Serve pre-compressed files from disk
• Headers – Add fields to HTTP response headers, including Cache-Control and Expires
• Index – Specify index files used in directory requests
• Random Index – Select random index file for directory request
• Real IP – Determine true origin IP address for proxied traffic
• SSI – Process Server Side Includes (SSI) commands
• User ID – Set cookies that uniquely identify clients
• WebDAV – Implement WebDAV file management

HTTP Access Control and Authentication

• Access – Control access based on client IP address (support access control lists [ACLs])
• Auth Basic – Implement HTTP Basic Authentication scheme
• Auth JWT – Validate JSON Web Tokens
• Auth Request – Determine client authorization using subrequests to external authentication server
• Referer – Control access based on Referer field in HTTP request header
• Secure Link – Process encrypted, time-limited links to content

HTTP Advanced Configuration

• Browser – Create variables based on User-Agent field in HTTP request header
• Cache Slice – Create byte-range segments of large files, for more efficient caching
• Geo – Create variables based on client IP address
• Map – Create variables based on other variables in requests
• Rewrite – Test and change URI of request
• Split Clients – Partition clients for A/B testing
• Sub – Replace text string in response (rewrite content)

HTTP Logging

• Log – Log HTTP transactions locally or to syslog
• Session Log – Log HTTP transactions aggregated per session

HTTP Media Delivery

• F4F – Stream HDS (Adobe HTTP Dynamic Streaming; filename extensions .f4f, .f4m, .f4x)
• FLV – Stream FLV (Flash Video; filename extension .flv)
• HLS – Stream HLS (Apple HTTP Live Streaming; filename extensions .m3u8, .ts) dynamically generated from MP4 or MOV (filename extensions .m4a, .m4v, .mov, .mp4, and .qt)
• MP4 – Stream MP4 (filename extensions .m4a, .m4v, .mp4)
• Streaming of RTMP and DASH is provided by the third-party RTMP module

HTTP Proxying

• FastCGI – Proxy and cache requests to FastCGI server
• gRPC – Proxy requests to gRPC server
• Memcached – Proxy requests to memcached server
• Mirror – Send copy of requests to one or more additional servers
• Proxy – Proxy and cache requests to HTTP server
• SCGI – Proxy and cache requests to SCGI server
• Upstream – Proxy and cache requests to load-balanced pool of servers
• Upstream Health Checks – Verify servers in load-balanced pool are operational
• uwsgi – Proxy and cache requests to uwsgi server

HTTP Transaction Shaping

• Limit Connections – Limit concurrent connections from a client IP address or other keyed value
• Limit Requests – Limit rate of request processing for a client IP address or other keyed value
• Limit Responses – Limit rate of responses per client connection

HTTP/2 and SSL/TLS

• HTTP/2 – Process HTTP/2 traffic
• SSL/TLS – Process HTTPS traffic

Mail

• Mail Core – Proxy mail traffic
• Auth HTTP – Offload authentication processing from HTTP server
• IMAP – Implement capabilities and authentication methods for IMAP
• POP3 – Implement authentication methods for POP3 traffic
• Proxy – Support proxy-related parameters for mail protocols
• SMTP – Define accepted SASL authentication methods for SMTP clients
• SSL/TLS – Implement SSL, STARTTLS, and TLS for mail protocols

Programmability and Monitoring

• NGINX Plus API – Provide REST API for accessing metrics, configuring upstream server groups dynamically, and managing key-value pairs, without the need to reload NGINX configuration
• Key-Value Store – Create variables with values taken from key-value pairs managed by the NGINX Plus API

TCP and UDP Load Balancing

• Stream – Process TCP and UDP traffic
• Access – Support IP-based access control lists (ACLs)
• Geo – Create variables based on client IP address
• Limit Conn – Limit concurrent connections by key
• Log – Log TCP and UDP transactions
• Map – Create variables based on other variables in requests
• Proxy – Proxy requests to TCP and UDP servers
• Real IP – Determine true origin IP address for proxied traffic
• Return – Return specified value to client and close connection
• Split Clients – Partition clients for A/B testing
• SSL/TLS – Process TCP traffic secured with SSL/TLS
• SSL/TLS Preread – Forward TCP traffic secured with SSL/TLS without decrypting it
• Upstream – Proxy and cache requests to load-balanced pool of servers
• Upstream Health Checks – Verify servers in load-balanced pool are operational