Optimizing Resource Usage for Complex SSL Configurations in NGINX

Last week’s release of NGINX 1.27.4 mainline version features optimized resource usage for complex SSL configurations.

In this nginx.org blog post, Sr. Software Engineer Aleksei Bavshin breaks down the details: Optimizing Resource Usage for Complex SSL Configurations in NGINX – NGINX Community Blog

3 Likes

Thanks for the write up explaining the improvements and fixes :slight_smile:

Nginx 1.27.4 working nicely. Though had to use an updated patch for Nginx 1.27.4 when switching from OpenSSL/BoringSSL to AWS-LC crypto library Fix Nginx build by smittals2 · Pull Request #2181 · aws/aws-lc · GitHub and aws-lc/tests/ci/integration/nginx_patch/aws-lc-nginx.patch at 028cd9fb59c30b6a0e06a369a27b6e0f2956e211 · aws/aws-lc · GitHub :slight_smile:

AWS-LC benefits of BoringSSL including Post-Quantum KEX support with reintroduction of OCSP Stapling support that BoringSSL removed :nerd_face:

Thanks @s.miller
Did you implement the yield operation for http3 in this version?