diff --git a/content/nginxaas-azure/changelog.md b/content/nginxaas-azure/changelog.md index 6f88bcebf..3cf816fbf 100644 --- a/content/nginxaas-azure/changelog.md +++ b/content/nginxaas-azure/changelog.md @@ -13,6 +13,15 @@ To see a list of currently active issues, visit the [Known issues]({{< ref "/ngi To review older entries, visit the [Changelog archive]({{< ref "/nginxaas-azure/changelog-archive" >}}) section. +## October 10, 2025 + +- {{% icon-feature %}} **NGINXaaS is now running NGINX Plus Release 35 (R35) in the Stable Upgrade Channel** + + NGINXaaS for Azure deployments using the **Stable** [Upgrade Channel]({{< ref "/nginxaas-azure/quickstart/upgrade-channels.md" >}}) have now been automatically upgraded to [NGINX Plus Release 35 (R35)]({{< ref "/nginx/releases.md#nginxplusrelease-35-r35" >}}). This upgrade also includes updates to the following NGINX Plus modules: + - `nginx-plus-module-njs` + For a complete list of allowed directives, see the [Configuration Directives List]({{< ref "/nginxaas-azure/getting-started/nginx-configuration/overview/#configuration-directives-list" >}}). + + The [ACME protocol support](https://nginx.org/en/docs/http/ngx_http_acme_module.html) feature, available in NGINX Plus R35 as a [dynamic module]({{< ref "/nginx/admin-guide/dynamic-modules/acme.md" >}}), is not currently supported in NGINXaaS due to active-active deployments. ## September 18, 2025 diff --git a/content/nginxaas-azure/getting-started/nginx-configuration/overview.md b/content/nginxaas-azure/getting-started/nginx-configuration/overview.md index b333c9e45..21534c5ca 100644 --- a/content/nginxaas-azure/getting-started/nginx-configuration/overview.md +++ b/content/nginxaas-azure/getting-started/nginx-configuration/overview.md @@ -52,7 +52,8 @@ Some directives are not supported because of specific limitations. If you includ | ssl_engine | No hardware SSL accelerator is available. | | debug_points | NGINXaaS does not provide access to NGINX processes for debugging. | | fastcgi_bind
grpc_bind
memcached_bind
proxy_bind
scgi_bind
uwsgi_bind | Source IP specification for active-active deployments is not allowed. | - | quic_bpf | QUIC connection migration is not currently supported for active-active deployments. | + | quic_bpf | QUIC connection migration is not currently supported for active-active deployments. + | acme_issuer
uri
account_key
contact
ssl_trusted_certificate
ssl_verify
state_path
accept_terms_of_service
acme_shared_zone
acme_certificate
| ACME protocol support for active-active deployments is not supported. {{< /table >}} @@ -125,6 +126,8 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [auth_jwt_leeway](https://nginx.org/en/docs/http/ngx_http_auth_jwt_module.html#auth_jwt_leeway)\ [auth_jwt_require](https://nginx.org/en/docs/http/ngx_http_auth_jwt_module.html#auth_jwt_require)\ [auth_jwt_type](https://nginx.org/en/docs/http/ngx_http_auth_jwt_module.html#auth_jwt_type)\ +[auth_oidc](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#auth_oidc)\ +[auth_require](https://nginx.org/en/docs/http/ngx_http_auth_require_module.html#auth_require)\ [auth_request](https://nginx.org/en/docs/http/ngx_http_auth_request_module.html#auth_request)\ [auth_request_set](https://nginx.org/en/docs/http/ngx_http_auth_request_module.html#auth_request_set)\ [autoindex](https://nginx.org/en/docs/http/ngx_http_autoindex_module.html#autoindex)\ @@ -144,8 +147,12 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [client_body_timeout](https://nginx.org/en/docs/http/ngx_http_core_module.html#client_body_timeout)\ [client_header_buffer_size](https://nginx.org/en/docs/http/ngx_http_core_module.html#client_header_buffer_size)\ [client_header_timeout](https://nginx.org/en/docs/http/ngx_http_core_module.html#client_header_timeout)\ +[client_id](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#client_id)\ [client_max_body_size](https://nginx.org/en/docs/http/ngx_http_core_module.html#client_max_body_size)\ +[client_secret](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#client_secret)\ +[config_url](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#config_url)\ [connection_pool_size](https://nginx.org/en/docs/http/ngx_http_core_module.html#connection_pool_size)\ +[cookie_name](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#cookie_name)\ [create_full_put_path](https://nginx.org/en/docs/http/ngx_http_dav_module.html#create_full_put_path)\ [daemon](https://nginx.org/en/docs/ngx_core_module.html#daemon)\ [dav_access](https://nginx.org/en/docs/http/ngx_http_dav_module.html#dav_access)\ @@ -157,6 +164,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [directio](https://nginx.org/en/docs/http/ngx_http_core_module.html#directio)\ [directio_alignment](https://nginx.org/en/docs/http/ngx_http_core_module.html#directio_alignment)\ [disable_symlinks](https://nginx.org/en/docs/http/ngx_http_core_module.html#disable_symlinks)\ +[early_hints](https://nginx.org/en/docs/http/ngx_http_core_module.html#early_hints)\ [empty_gif](https://nginx.org/en/docs/http/ngx_http_empty_gif_module.html#empty_gif)\ [env](https://nginx.org/en/docs/ngx_core_module.html#env)\ [error_log](https://nginx.org/en/docs/ngx_core_module.html#error_log)\ @@ -164,6 +172,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [etag](https://nginx.org/en/docs/http/ngx_http_core_module.html#etag)\ [events](https://nginx.org/en/docs/ngx_core_module.html#events)\ [expires](https://nginx.org/en/docs/http/ngx_http_headers_module.html#expires)\ +[extra_auth_args](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#extra_auth_args)\ [f4f](https://nginx.org/en/docs/http/ngx_http_f4f_module.html#f4f)\ [f4f_buffer_size](https://nginx.org/en/docs/http/ngx_http_f4f_module.html#f4f_buffer_size)\ [fastcgi_buffer_size](https://nginx.org/en/docs/http/ngx_http_fastcgi_module.html#fastcgi_buffer_size)\ @@ -232,6 +241,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [grpc_set_header](https://nginx.org/en/docs/http/ngx_http_grpc_module.html#grpc_set_header)\ [grpc_socket_keepalive](https://nginx.org/en/docs/http/ngx_http_grpc_module.html#grpc_socket_keepalive)\ [grpc_ssl_certificate](https://nginx.org/en/docs/http/ngx_http_grpc_module.html#grpc_ssl_certificate)\ +[grpc_ssl_certificate_cache](https://nginx.org/en/docs/http/ngx_http_grpc_module.html#grpc_ssl_certificate_cache)\ [grpc_ssl_certificate_key](https://nginx.org/en/docs/http/ngx_http_grpc_module.html#grpc_ssl_certificate_key)\ [grpc_ssl_ciphers](https://nginx.org/en/docs/http/ngx_http_grpc_module.html#grpc_ssl_ciphers)\ [grpc_ssl_conf_command](https://nginx.org/en/docs/http/ngx_http_grpc_module.html#grpc_ssl_conf_command)\ @@ -302,6 +312,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [internal](https://nginx.org/en/docs/http/ngx_http_core_module.html#internal)\ [internal_redirect](http://nginx.org/en/docs/http/ngx_http_internal_redirect_module.html#internal_redirect)\ [ip_hash](https://nginx.org/en/docs/http/ngx_http_upstream_module.html#ip_hash)\ +[issuer](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#issuer)\ [js_access (ngx_stream_js_module)](https://nginx.org/en/docs/stream/ngx_stream_js_module.html#js_access)\ [js_body_filter](https://nginx.org/en/docs/http/ngx_http_js_module.html#js_body_filter)\ [js_content](https://nginx.org/en/docs/http/ngx_http_js_module.html#js_content)\ @@ -343,6 +354,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [js_var (ngx_stream_js_module)](https://nginx.org/en/docs/stream/ngx_stream_js_module.html#js_var)\ [keepalive](https://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive)\ [keepalive_disable](https://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_disable)\ +[keepalive_min_timeout](https://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_min_timeout)\ [keepalive_requests (ngx_http_core_module)](https://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_requests)\ [keepalive_time (ngx_http_core_module)](https://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_time)\ [keepalive_timeout (ngx_http_core_module)](https://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_timeout)\ @@ -385,6 +397,8 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [log_format (ngx_stream_log_module)](https://nginx.org/en/docs/stream/ngx_stream_log_module.html#log_format)\ [log_not_found](https://nginx.org/en/docs/http/ngx_http_core_module.html#log_not_found)\ [log_subrequest](https://nginx.org/en/docs/http/ngx_http_core_module.html#log_subrequest)\ +[logout_uri](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#logout_uri)\ +[logout_token_hint](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#logout_token_hint)\ [mail](https://nginx.org/en/docs/mail/ngx_mail_core_module.html#mail)\ [map (ngx_http_map_module)](https://nginx.org/en/docs/http/ngx_http_map_module.html#map)\ [map (ngx_stream_map_module)](https://nginx.org/en/docs/stream/ngx_stream_map_module.html#map)\ @@ -431,6 +445,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [msie_refresh](https://nginx.org/en/docs/http/ngx_http_core_module.html#msie_refresh)\ [multi_accept](https://nginx.org/en/docs/ngx_core_module.html#multi_accept)\ [ntlm](https://nginx.org/en/docs/http/ngx_http_upstream_module.html#ntlm)\ +[oidc_provider](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#oidc_provider)\ [open_file_cache](https://nginx.org/en/docs/http/ngx_http_core_module.html#open_file_cache)\ [open_file_cache_errors](https://nginx.org/en/docs/http/ngx_http_core_module.html#open_file_cache_errors)\ [open_file_cache_min_uses](https://nginx.org/en/docs/http/ngx_http_core_module.html#open_file_cache_min_uses)\ @@ -450,6 +465,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [pop3_auth](https://nginx.org/en/docs/mail/ngx_mail_pop3_module.html#pop3_auth)\ [pop3_capabilities](https://nginx.org/en/docs/mail/ngx_mail_pop3_module.html#pop3_capabilities)\ [port_in_redirect](https://nginx.org/en/docs/http/ngx_http_core_module.html#port_in_redirect)\ +[post_logout_uri](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#post_logout_uri)\ [postpone_output](https://nginx.org/en/docs/http/ngx_http_core_module.html#postpone_output)\ [preread_buffer_size (ngx_stream_core_module)](https://nginx.org/en/docs/stream/ngx_stream_core_module.html#preread_buffer_size)\ [preread_timeout (ngx_stream_core_module)](https://nginx.org/en/docs/stream/ngx_stream_core_module.html#preread_timeout)\ @@ -526,6 +542,8 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [proxy_ssl (ngx_stream_proxy_module)](https://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_ssl)\ [proxy_ssl_certificate (ngx_http_proxy_module)](https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_certificate)\ [proxy_ssl_certificate (ngx_stream_proxy_module)](https://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_ssl_certificate)\ +[proxy_ssl_certificate_cache (ngx_http_proxy_module)](https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_certificate_cache)\ +[proxy_ssl_certificate_cache (ngx_stream_proxy_module)](https://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_ssl_certificate_cache)\ [proxy_ssl_certificate_key (ngx_http_proxy_module)](https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_certificate_key)\ [proxy_ssl_certificate_key (ngx_stream_proxy_module)](https://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_ssl_certificate_key)\ [proxy_ssl_ciphers (ngx_http_proxy_module)](https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_ciphers)\ @@ -570,6 +588,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [real_ip_header](https://nginx.org/en/docs/http/ngx_http_realip_module.html#real_ip_header)\ [real_ip_recursive](https://nginx.org/en/docs/http/ngx_http_realip_module.html#real_ip_recursive)\ [recursive_error_pages](https://nginx.org/en/docs/http/ngx_http_core_module.html#recursive_error_pages)\ +[redirect_uri](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#redirect_uri)\ [referer_hash_bucket_size](https://nginx.org/en/docs/http/ngx_http_referer_module.html#referer_hash_bucket_size)\ [referer_hash_max_size](https://nginx.org/en/docs/http/ngx_http_referer_module.html#referer_hash_max_size)\ [request_pool_size](https://nginx.org/en/docs/http/ngx_http_core_module.html#request_pool_size)\ @@ -633,6 +652,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [scgi_store](https://nginx.org/en/docs/http/ngx_http_scgi_module.html#scgi_store)\ [scgi_store_access](https://nginx.org/en/docs/http/ngx_http_scgi_module.html#scgi_store_access)\ [scgi_temp_file_write_size](https://nginx.org/en/docs/http/ngx_http_scgi_module.html#scgi_temp_file_write_size)\ +[scope](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#scope)\ [scgi_temp_path](https://nginx.org/en/docs/http/ngx_http_scgi_module.html#scgi_temp_path)\ [secure_link](https://nginx.org/en/docs/http/ngx_http_secure_link_module.html#secure_link)\ [secure_link_md5](https://nginx.org/en/docs/http/ngx_http_secure_link_module.html#secure_link_md5)\ @@ -654,6 +674,8 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [session_log](https://nginx.org/en/docs/http/ngx_http_session_log_module.html#session_log)\ [session_log_format](https://nginx.org/en/docs/http/ngx_http_session_log_module.html#session_log_format)\ [session_log_zone](https://nginx.org/en/docs/http/ngx_http_session_log_module.html#session_log_zone)\ +[session_store](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#session_store)\ +[session_timeout](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#session_timeout)\ [set (ngx_http_rewrite_module)](https://nginx.org/en/docs/http/ngx_http_rewrite_module.html#set)\ [set (ngx_stream_set_module)](https://nginx.org/en/docs/stream/ngx_stream_set_module.html#set)\ [set_real_ip_from (ngx_http_realip_module)](https://nginx.org/en/docs/http/ngx_http_realip_module.html#set_real_ip_from)\ @@ -683,6 +705,8 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [ssl_certificate (ngx_mail_ssl_module)](https://nginx.org/en/docs/mail/ngx_mail_ssl_module.html#ssl_certificate)\ [ssl_certificate (ngx_stream_ssl_module)](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_certificate)\ [ssl_certificate (ngx_mgmt_module)](https://nginx.org/en/docs/ngx_mgmt_module.html#ssl_certificate)\ +[ssl_certificate_cache (ngx_http_ssl_module)](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_certificate_cache)\ +[ssl_certificate_cache (ngx_stream_ssl_module)](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_certificate_cache)\ [ssl_certificate_key (ngx_http_ssl_module)](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_certificate_key)\ [ssl_certificate_key (ngx_mail_ssl_module)](https://nginx.org/en/docs/mail/ngx_mail_ssl_module.html#ssl_certificate_key)\ [ssl_certificate_key (ngx_stream_ssl_module)](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_certificate_key)\ @@ -696,6 +720,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [ssl_conf_command (ngx_http_ssl_module)](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_conf_command)\ [ssl_conf_command (ngx_mail_ssl_module)](https://nginx.org/en/docs/mail/ngx_mail_ssl_module.html#ssl_conf_command)\ [ssl_conf_command (ngx_stream_ssl_module)](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_conf_command)\ +[ssl_crl (ngx_http_oidc_module)](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#ssl_crl)\ [ssl_crl (ngx_http_ssl_module)](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_crl)\ [ssl_crl (ngx_mail_ssl_module)](https://nginx.org/en/docs/mail/ngx_mail_ssl_module.html#ssl_crl)\ [ssl_crl (ngx_mgmt_module)](https://nginx.org/en/docs/ngx_mgmt_module.html#ssl_crl)\ @@ -707,6 +732,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [ssl_ecdh_curve (ngx_stream_ssl_module)](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_ecdh_curve)\ [ssl_handshake_timeout](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_handshake_timeout)\ [ssl_name](https://nginx.org/en/docs/ngx_mgmt_module.html#ssl_name)\ +[ssl_object_cache_inheritable](https://nginx.org/en/docs/ngx_core_module.html#ssl_object_cache_inheritable)\ [ssl_ocsp](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ocsp)\ [ssl_ocsp_cache](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ocsp_cache)\ [ssl_ocsp_responder](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ocsp_responder)\ @@ -739,6 +765,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [ssl_stapling_file](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling_file)\ [ssl_stapling_responder](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling_responder)\ [ssl_stapling_verify](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling_verify)\ +[ssl_trusted_certificate (ngx_http_oidc_module)](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#ssl_trusted_certificate)\ [ssl_trusted_certificate (ngx_http_ssl_module)](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_trusted_certificate)\ [ssl_trusted_certificate (ngx_mail_ssl_module)](https://nginx.org/en/docs/mail/ngx_mail_ssl_module.html#ssl_trusted_certificate)\ [ssl_trusted_certificate (ngx_stream_ssl_module)](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_trusted_certificate)\ @@ -750,6 +777,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [ssl_verify_depth (ngx_http_ssl_module)](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_verify_depth)\ [ssl_verify_depth (ngx_mail_ssl_module)](https://nginx.org/en/docs/mail/ngx_mail_ssl_module.html#ssl_verify_depth)\ [ssl_verify_depth (ngx_stream_ssl_module)](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_verify_depth)\ +[stall_threshold](https://nginx.org/en/docs/ngx_core_module.html#stall_threshold)\ [ssl_verify_depth (ngx_mgmt_module)](https://nginx.org/en/docs/ngx_mgmt_module.html#ssl_verify_depth)\ [starttls](https://nginx.org/en/docs/mail/ngx_mail_ssl_module.html#starttls)\ [state (ngx_http_upstream_module)](http://nginx.org/en/docs/http/ngx_http_upstream_module.html#state)\ @@ -790,6 +818,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [userid_p3p](https://nginx.org/en/docs/http/ngx_http_userid_module.html#userid_p3p)\ [userid_path](https://nginx.org/en/docs/http/ngx_http_userid_module.html#userid_path)\ [userid_service](https://nginx.org/en/docs/http/ngx_http_userid_module.html#userid_service)\ +[userinfo](https://nginx.org/en/docs/http/ngx_http_oidc_module.html#userinfo)\ [uuid_file](https://nginx.org/en/docs/ngx_mgmt_module.html#uuid_file)\ [uwsgi_buffer_size](https://nginx.org/en/docs/http/ngx_http_uwsgi_module.html#uwsgi_buffer_size)\ [uwsgi_buffering](https://nginx.org/en/docs/http/ngx_http_uwsgi_module.html#uwsgi_buffering)\ @@ -834,6 +863,7 @@ NGINXaaS for Azure supports a limited set of NGINX directives. [uwsgi_send_timeout](https://nginx.org/en/docs/http/ngx_http_uwsgi_module.html#uwsgi_send_timeout)\ [uwsgi_socket_keepalive](https://nginx.org/en/docs/http/ngx_http_uwsgi_module.html#uwsgi_socket_keepalive)\ [uwsgi_ssl_certificate](https://nginx.org/en/docs/http/ngx_http_uwsgi_module.html#uwsgi_ssl_certificate)\ +[uwsgi_ssl_certificate_cache](https://nginx.org/en/docs/http/ngx_http_uwsgi_module.html#uwsgi_ssl_certificate_cache)\ [uwsgi_ssl_certificate_key](https://nginx.org/en/docs/http/ngx_http_uwsgi_module.html#uwsgi_ssl_certificate_key)\ [uwsgi_ssl_conf_command](https://nginx.org/en/docs/http/ngx_http_uwsgi_module.html#uwsgi_ssl_conf_command)\ [uwsgi_ssl_crl](https://nginx.org/en/docs/http/ngx_http_uwsgi_module.html#uwsgi_ssl_crl)\