OpenResty 1.27.1.1 Released

lijunlong , 17 Oct 2024 (created 15 Oct 2024)

We are happy to announce the new formal release, 1.27.1.1, of the OpenResty web platform based on NGINX and LuaJIT.

Download this version here.

The (portable) source code distribution, the Win32/Win64 binary distributions, and the pre-built binary Linux packages for Ubuntu, Debian, Fedora, CentOS, RHEL, OpenSUSE, Amazon Linux are provided on this Download page.

Version highlights

Nginx core
- Based on the very recent mainline nginx core 1.27.1.
- Added http_v3_module to official prebuilt packages.
- Added http_slice_module to official prebuilt packages.
OpenSSL
- upgraded from version 1.1.1 to 3.0.15.
PCRE
- upgraded from version 8.45 to 10.42.
LuaJIT updated to 2.1-20240815 with various optimizations and bugfixes:
- Improved error handling and stack overflow management
- Enhanced cross-32/64 bit and deterministic bytecode generation
- Disabled hash computation optimization in the OpenResty branch due to potential severe performance degradation (CVE-2024-39702). This issue only exists in the OpenResty branch (agentzh-v2.1) and not in upstream LuaJIT. We thank Zhongwei Yao from Kong Inc. for reporting this issue.
Core modules updates:
- Improved keepalive and balancer functionality
- New SSL-related features, including support for trusted certificates in client verification
- Added support for deriving keys from TLS master secret
- Implemented ngx_http_lua_ffi_ssl_client_random and related functions
lua-resty-websocket upgraded to 0.12 with new features:
- Added send_continue method
- Support for custom sec-websocket-key in client
- Added support for connecting to unix sockets
lua-resty-string updated to 0.16:
- Added AAD support in AES GCM
- Made random.bytes cryptographically strong by default
lua-resty-redis upgraded to v0.31 with performance optimizations
lua-cjson updated to 2.1.0.14 with Lua 5.3 and 5.4 integer support

Full Change logs

Complete change logs since the last (formal) release, 1.25.3.2, can be browsed in the page Change Log for 1.27.1.x.

Testing

We have run extensive testing on our Amazon EC2 test cluster and ensured that all the components (including the Nginx core) play well together. The latest test report can always be found here:

https://qa.openresty.org/

We also always run our OpenResty Edge commercial software based on the latest open source version of OpenResty in our own global CDN network (dubbed "mini CDN") powering our openresty.org and openresty.com websites. See https://openresty.com/ for more details.

Community Support

See the Community Page.

Commercial Support

Commercial technical support and real-time noninvasive online monitoring and profiling solution is provided through the official OpenResty XRay product.