Tag: release
-
NGINX Gateway Fabric 2.8: IP allow and deny lists, passive health checks, and cookie-based session persistence
NGINX Gateway Fabric 2.8 adds AccessPolicy, which allows or denies traffic to a Gateway or route by client IP address. Passive health checks in UpstreamSettingsPolicy let you decide how many failed attempts take an upstream server out of rotation and for how long, and cookie-based session persistence now works on NGINX Open Source. NGINX Gateway…
-
NGINX Ingress Controller 5.7: HTTP/2 to your upstreams, Opaque Secrets, and cert-manager challenges behind HTTPS redirects
NGINX Ingress Controller 5.7 speaks HTTP/2 to your upstream services, set per upstream or picked up from a Service’s appProtocol. An Opaque Secret now works anywhere a TLS, CA, htpasswd, or API key Secret does, so you can use a Secret created by other tooling as it is. HTTP-01 challenges from cert-manager complete on hosts…
-
NGINX 1.31.7: Native GeoIP2 support, HTTP/2 priorities, and QUIC improvements
Knowing where traffic comes from can help you decide where it goes. NGINX Open Source 1.31.7 brings GeoIP2 and GeoLite2 database support to the existing native GeoIP modules, giving users a straightforward path to current geolocation data. This release also adds modern HTTP/2 prioritization, improves reloads and binary upgrades for BPF-enabled QUIC deployments, and includes…
-
NGINX Gateway Fabric 2.7: Gateway API 1.6 conformance, external authentication, and fewer snippets
NGINX Gateway Fabric 2.7 is a significant release, targeting Gateway API conformance, data plane improvements, and workflow enhancements. TCPRoute and UDPRoute graduate to v1 with Gateway API 1.6, TLS listeners gain Terminate mode, and a new HTTPExternalAuthFilter calls out to an authorization proxy without an NGINX snippet. Seven more NGINX settings move out of snippets…
-
NGINX Ingress Controller 5.6: HSTS without snippets, a faster start on large clusters, and improved configuration safety
NGINX Ingress Controller 5.6 implements more support for configuring NGINX through resources instead of through snippets. HTTP Strict Transport Security (HSTS) becomes a first-class policy across VirtualServer, VirtualServerRoute, and Ingress. Two new annotations close configuration gaps for teams moving off Ingress-NGINX, and the X-Forwarded base headers can now be turned off through the ConfigMap. Operational…
-
NGINX 1.31.5: Control API, predicate locations, early body inspection, and more
For over two decades, NGINX has been the workhorse of the modern web. Its classic request-processing architecture—reading HTTP headers, matching a URI location path, and streaming payload data to backend services—built the foundation of modern web traffic management. However, the way web applications and AI agent systems communicate is fundamentally evolving. Modern application stacks rely…
-
NGINX 1.31.4: PROXY Protocol v2, Stricter Validation and More
NGINX 1.31.4 is an incremental release focused on the protocols we all depend on. Backends behind a stream or mail proxy can now see a client’s TLS details alongside its address thanks to PROXY protocol v2, HTTP/2 and gRPC requests to your upstreams follow the standards more closely, and NGINX has stricter checks on malformed…
-
NGINX Gateway Fabric 2.6: F5 WAF for NGINX Comes to the Gateway API
NGINX Gateway Fabric 2.6 marks our initial foray into implementing enterprise grade security capabilities into the Gateway API standard. This release brings F5 WAF for NGINX support to a Gateway API implementation, making NGINX Gateway Fabric one of the first Gateway API implementations to offer enterprise-grade WAF capabilities natively. Here’s what else is new: F5…
-
NGINX Gateway Fabric 2.5.0: Enterprise-Grade Features and Gateway API 1.5 Conformance
NGINX Gateway Fabric 2.5.0 is here, and this one is a big deal. The release doubles down on enterprise-grade capabilities while keeping us at the forefront of Gateway API conformance. NGF remains one of the top conformant implementations of the Gateway API spec, and this release reinforces why. Here’s what’s new. Gateway API 1.5 Conformance…
-
NGINX OSS 1.29.6 and 1.29.7: Open-sourced Session Persistence, Multipath TCP and More
NGINX 1.29.6 and 1.29.7 introduce significant updates and mark the first in a planned series to add capabilities to NGINX Open Source formerly limited to NGINX Plus. With updates to core runtime behavior and network support, these releases ensure that NGINX can continue to meet the needs of modern applications and AI workloads. Highlights of these releases include: Together, these changes expand what operators can do with NGINX Open Source while simplifying configurations for optimizing performance to proxied services. …
-
CORS Policy in NGINX Ingress Controller v5.4.0: Patterns for VirtualServer and Ingress
Starting with NGINX Ingress Controller (NIC) v5.4.0, you can define CORS behavior once in a Policy resource and apply it consistently across both VirtualServer and Ingress traffic paths. Across this blog, we’re focused on: Why Use a Policy For CORS? Many teams start with per-resource tuning and quickly end up with drift. Using a dedicated…
-
What’s New in NGINX Open Source 1.29.3 and 1.29.4
The latest NGINX open source updates arrive as a pair. NGINX 1.29.3 delivers new capabilities around TLS observability, header management, and TLS handshake efficiency. NGINX 1.29.4 adds new privacy enhancements and improved security. Across the two releases, we’re focused on: Together, these updates make it easier for operators, security teams, and developers to maintain secure, efficient, and predictable infrastructure at scale. HTTP/2 to Upstream Support …