Liam Crilly

NGINX Plus R20 builds on the enhancements made in R19 to rate limiting, adding real-time monitoring and logging; connection limiting now has the same features. We also added prefix matching in the key-value store, DNS resolution per upstream group, new PROXY Protocol variables, and improved security for HTTP/2.

NGINX Plus R19 extends our monitoring capabilities, both with a larger set of metrics and new ways to analyze them; adds a dry-run mode for testing the effect of rate limiting; enhances the key-value store to support IP address ranges; and makes rate limiting more dynamic.

We have released updates to NGINX Open Source and NGINX Plus to fix vulnerabilities in the HTTP/2 protocol that were announced today (CVE-2019-9511, CVE-2019-9513, and CVE-2019-9516). Upgrade as soon as possible to NGINX 1.17.3, NGINX 1.16.1, or NGINX Plus R18 P1.

NGINX announces the latest branches of NGINX Open Source, the stable 1.16 branch and the mainline 1.17 branch. New to the stable branch are improvements to UDP proxying, the Random load‑balancing method, support for TLS 1.3 early data, dynamic loading of SSL certificates, and more.

NGINX and NGINX Plus can act as an OAuth 2.0 Relying Party, sending access tokens to the Idenity Provider for validation and only proxying requests that pass the validation process.

NGINX Plus R18 introduces dynamic loading of SSL/TLS certificates, enhances our OpenID Connect reference implementation, and supports port ranges for virtual servers. It also includes enhancements to the key-value store, health checks, NGINX Plus clustering, and the NGINX JavaScript module.

NGINX Plus R17 introduces support for two-stage rate limiting and TLS 1.3, the latest version of the Transport Layer Security protocol. Configuration of OpenID Connect is simpler and NGINX WAF is 2x faster than before. The NGINX JavaScript module has also been updated.

NGINX Plus R16 is a single, elastic ingress and egress tier for applications, consolidating the functionality of a load balancer, API gateway, and WAF with new features like cluster‑aware rate limiting, key‑value store, Random with Two Choices, enhanced UDP load balancing, and more.

NGINX Plus R15 introduces native gRPC proxying (used by Istio and other service mesh architectures), HTTP/2 server push, state sharing in a cluster, API gateway enhancements, OpenID Connect integration, NGINX JavaScript (njs) module enhancements, a new ALPN variable, dynamic module updates, and more.

In Microsoft Azure, you can use JWTs with NGINX Plus to handle authentication against Active Directory outside your app's code.