NGINX 1.31.4: Proxy Protocol v2, Stricter Validation, and more

Announcements
, ,
1

Hi everyone,

NGINX 1.31.4 mainline is out. It’s an incremental release focused on the protocols we all depend on: stream and mail proxying, HTTP/2 and gRPC upstream behavior, protocol validation, and memory safety. The full writeup is on the blog: NGINX 1.31.4: PROXY Protocol v2, Stricter Validation and More – NGINX Community Blog

Highlights

  • PROXY protocol v2 to upstreams:

  • Standards-correct host handling for HTTP/2 and gRPC upstreams

  • Stricter checks on malformed traffic.

  • Stability and memory-safety fixes

  • New code foundations for structured data

Thank you to our contributors

Starting with this release, contributors are credited by name in the release post. Four contributors shipped code in 1.31.4:

Community inspired development work

The PROXY protocol v2 upstream support was inspired by two prior efforts, both credited in the PR: a commit in the Angie project, and mdewitt11‘s earlier implementation. Thanks to the Angie team and mdewitt11!

Community reports

Thanks to the researchers and users who reported issues fixed in this release: Matt Suiche (Tolmo Inc.) for the chunked parser overflow detection regression, and Tony Wang for the QUIC stream reset flow control issue.

Resources

Head over to the GitHub release page and the CHANGES file for the full picture, and the NGINX documentation for details on the directives mentioned here.

We’re proud of what the team and our community put together. Thanks all!

1 Like