Pre OSS commit

Author: nginx

content/nginx/open-source-components.md

@@ -12,7 +12,7 @@ weight: 500
 Open source components included in the F5 NGINX Plus (package name is `nginx-plus`) are:
 
 
-- nginx/OSS 1.25.5, distributed under 2-clause BSD license.
+- nginx/OSS 1.27.2, distributed under 2-clause BSD license.
 
   Homepage: <https://nginx.org>
 

content/nginx/releases.md

@@ -18,6 +18,69 @@ We do not issue updates for releases that have reached EoSD. For this reason, we
 The initial release dates for NGINX Plus are noted in this document.
 New releases are announced on the [NGINX Product Support Announcements](https://interact.f5.com/Customer-Preference-Center.html) mailing list.
 
+<span id="r33"></span>
+## NGINX Plus Release 33 (R33)
+_19 November 2024_<br/>
+_Based on NGINX Open Source 1.27.2_
+
+NGINX Plus R33 is a feature release:
+
+- Licensing: Each NGINX Plus instance now requires a JWT license file. The JWT must be obtained from [MyF5](https://account.f5.com/myf5) and is expected to be located at `/etc/nginx/` for Linux or
+`/usr/local/etc/nginx/` for FreeBSD or at the path specified by the [`license_token`](https://nginx.org/en/docs/ngx_mgmt_module.html#license_token) in the [`mgmt`](https://nginx.org/en/docs/ngx_mgmt_module.html) context.
+
+- NGINX usage reporting: Usage report is sent to F5 licensing endpoint [every hour](https://nginx.org/en/docs/ngx_mgmt_module.html#usage_report) using the [secure](https://nginx.org/en/docs/ngx_mgmt_module.html#ssl_verify) connection. The initial usage report should be sent once NGINX Plus starts after installation or upgrade to R33. If the initial usage report is not received by the endpoint, NGINX Plus will stop processing traffic. A 180-day grace period can be [enabled](https://nginx.org/en/docs/ngx_mgmt_module.html#enforce_initial_report) to submit the initial usage report.
+
+  Optionally, for network-restricted environments, reporting can be [configured](https://nginx.org/en/docs/ngx_mgmt_module.html#usage_report) to [NGINX Instance Manager]({{< relref "nim/index.md" >}}) from which the report can be sent to F5 licensing endpoint.
+
+  For more information about licensing and usage reporting, see [About subscription licenses]({{< relref "solutions/about-subscription-licenses.md" >}}) article and [`ngx_mgmt_module`](https://nginx.org/en/docs/ngx_mgmt_module.html) module documentation.
+
+- OCSP stapling support and client certificate validation with OCSP
+in the [stream](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html) module with the
+[`ssl_ocsp`](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_ocsp) and [`ssl_ocsp_responder`](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_ocsp_responder) directives.
+
+- SSL key logging with the
+`ssl_key_log` directive for [http](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_key_log), [stream](https://nginx.org/en/docs/stream/ngx_stream_ssl_module.html#ssl_key_log),
+[proxy](https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_key_log), [grpc](https://nginx.org/en/docs/http/ngx_http_grpc_module.html#grpc_ssl_key_log), [uwsgi](https://nginx.org/en/docs/http/ngx_http_uwsgi_module.html#uwsgi_ssl_key_log) that allows logging SSL keys created during client and upstream connections to the file.
+The argument is a file name in the `SSLKEYLOGFILE` format compatible with Wireshark.
+
+- SSL Certificate Caching: Fixed loading of trusted CA bundles containing entries with duplicate Distinguished Name (DN).
+
+- Change: the [`ssl_client_certificate`](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_client_certificate) directive is not required for client SSL certificates verification.
+
+- Response trailers support in proxy with the [`proxy_pass_trailers`](https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_pass_trailers) directive that allows passing trailer fields from a proxied server to a client.
+
+- The [NGINX JavaScript]({{< relref "nginx/admin-guide/dynamic-modules/nginscript.md" >}}) module was updated to version [0.8.7](https://nginx.org/en/docs/njs/changes.html#njs0.8.7), featuring QuickJS [runtime support](https://nginx.org/en/docs/njs/engine.html).
+
+- Added initial support for Post Quantum Cryptography.
+
+NGINX Plus R33 is supported on:
+
+- AlmaLinux 8, 9
+- Alpine Linux 3.17, 3.18, 3.19, 3.20
+- Amazon Linux 2 LTS, 2023
+- Debian 11, 12
+- FreeBSD 13, 14
+- Oracle Linux 8.1+, 9
+- RHEL 8.1+, 9.0+
+- Rocky Linux 8, 9
+- SUSE Linux Enterprise Server 12, 15 SP5+
+- Ubuntu 20.04 LTS, 22.04 LTS, 24.04 LTS
+
+**Notes:**
+
+- Alpine Linux 3.16 is removed
+- Alpine Linux 3.17 is deprecated
+- Alpine Linux 3.20 is new in this release
+- CentOS 7.4+ is removed
+- RHEL 7.4+ is removed
+- Oracle Linux 7.4+ is removed
+- SUSE Linux Enterprise Server 12 is deprecated
+- support for s390x architecture removed
+- the [Lua]({{< relref "nginx/admin-guide/dynamic-modules/lua.md" >}}) module is no longer available for SUSE Linux Enterprise Server 12
+
+More information: [Announcing NGINX Plus R33](https://community.f5.com/kb/technicalarticles/announcing-nginx-plus-r33-release/336403)
+
+
 <span id="r32"></span>
 ## NGINX Plus Release 32 (R32)
 _29 May 2024_<br/>

content/nginx/technical-specs.md

@@ -10,7 +10,7 @@ toc: true
 weight: 400
 ---
 
-NGINX Plus is available in binary form only; it is not available in source form. Please [inquire](https://www.nginx.com/contact-sales/) for additional platforms and modules.
+NGINX Plus is available only as a binary; it is not distributed as source code. For additional platforms and modules, [contact us](https://www.f5.com/products/get-f5).
 
 <span id="supported-distributions"></span>
 ## Supported Distributions
@@ -22,10 +22,10 @@ NGINX Plus is available in binary form only; it is not available in source form
 
 ### Alpine Linux
 
-- 3.16 (x86_64, aarch64)
 - 3.17 (x86_64, aarch64)
 - 3.18 (x86_64, aarch64)
 - 3.19 (x86_64, aarch64)
+- 3.20 (x86_64, aarch64)
 
 ### Amazon Linux
 
@@ -35,10 +35,6 @@ NGINX Plus is available in binary form only; it is not available in source form
 
 - LTS (x86_64, aarch64)
 
-### CentOS
-
-- 7.4+ (x86_64, aarch64)
-
 ### Debian
 
 - 11 (x86_64, aarch64)
@@ -51,15 +47,13 @@ NGINX Plus is available in binary form only; it is not available in source form
 
 ### Oracle Linux
 
-- 7.4+ (x86_64)
 - 8.1+ (x86_64, aarch64)
 - 9 (x86_64)
 
 ### Red Hat Enterprise Linux (RHEL)
 
-- 7.4+ (x86_64, aarch64)
-- 8.1+ (x86_64, aarch64, s390x)
-- 9.0+ (x86_64, aarch64, s390x)
+- 8.1+ (x86_64, aarch64)
+- 9.0+ (x86_64, aarch64)
 
 ### Rocky Linux
 
@@ -73,8 +67,8 @@ NGINX Plus is available in binary form only; it is not available in source form
 
 ### Ubuntu
 
-- 20.04 LTS (x86_64, aarch64, s390x)
-- 22.04 LTS (x86_64, aarch64, s390x)
+- 20.04 LTS (x86_64, aarch64)
+- 22.04 LTS (x86_64, aarch64)
 - 24.04 LTS (x86_64, aarch64)
 
 **Notes:**
@@ -86,14 +80,14 @@ Except as specified below, dynamic modules are supported on the [same distributi
 
 ### AppProtect
 - AlmaLinux/Rocky Linux: Not supported
-- Alpine Linux 3.16, Alpine Linux 3.17: x86_64 only
+- Alpine Linux: Not supported
 - Amazon Linux 2: x86_64 only
 - Amazon Linux 2023: Not supported
-- CentOS 7.4+: x86_64 only
-- Debian 11, Debian 12: x86_64 only
+- Debian 11: x86_64 only
 - FreeBSD: Not supported
 - Oracle Linux 8: x86_64 only
-- RHEL 7, RHEL 8, RHEL 9: x86_64 only
+- RHEL 8: x86_64 only
+- SLES: Not supported
 - Ubuntu 20.04: x86_64 only
 
 ### Brotli
@@ -104,7 +98,6 @@ Except as specified below, dynamic modules are supported on the [same distributi
 
 - RHEL/Oracle Linux/AlmaLinux/Rocky Linux 8.0+, 9: Not supported
 - FreeBSD: Not supported
-- Amazon Linux 2023: Not supported
 
 ### GeoIP2
 
@@ -118,21 +111,15 @@ Except as specified below, dynamic modules are supported on the [same distributi
 - Amazon Linux 2: Not supported
 - Amazon Linux 2023: Not supported
 
-### Lua
-
-- RHEL 8, RHEL9: s390x not supported
-- Ubuntu: s390x not supported
-
 ### NGINX sync
 
 - FreeBSD: Not supported
 - Alpine Linux: Not supported
 
 ### OpenTelemetry
 
-- RHEL/CentOS/Oracle Linux/ 7: Not supported
-- SLES 12, SLES 15: Not supported
 - Amazon Linux 2: Not supported
+- SLES: Not supported
 
 ### OpenTracing
 
@@ -254,7 +241,7 @@ See [Sizing Guide for Deploying NGINX Plus on Bare Metal Servers](https://www.ng
 
 - [NGINX Plus API](https://nginx.org/en/docs/http/ngx_http_api_module.html) – Provide REST API for accessing metrics, configuring upstream server groups dynamically, and managing key-value pairs, without the need to reload NGINX configuration
 - [Key-Value Store](https://nginx.org/en/docs/http/ngx_http_keyval_module.html) – Create variables with values taken from key-value pairs managed by the [NGINX Plus API](https://nginx.org/en/docs/http/ngx_http_api_module.html#http_keyvals_)
-- [Management](https://nginx.org/en/docs/ngx_mgmt_module.html) – Configure reporting of NGINX Plus installation to [NGINX Management Suite Instance Manager](https://docs.nginx.com/nginx-management-suite/about)
+- [Management](https://nginx.org/en/docs/ngx_mgmt_module.html) – Configure licensing and usage reporting of NGINX Plus installation to F5 licensing endpoint or [NGINX Instance Manager]({{< relref "nim/index.md" >}})
 
 ### TCP and UDP Proxying and Load Balancing