Atomicorp

nginx 1.8.x is now the stable version so nginx-1.6.x is now considered legacy.

Can the Atomic rpms for CentOS 5.x be updated from 1.6.x to 1.8.x?

Thanks.

Anyone else have input on rebasing on 1.8? I think its a good idea, the impact seems to be less than changing an apache, or php version

Any update on the decision to rebase on 1.8.x?

Thanks.

Unless anyone has any objections with it, I think we're going to rebase on 1.8

Great, looking forward to it.

Any updates?

Also, what's your current assessment of the state of modsecurity/nginx in terms of production stability?

Thanks.

High marks for overall coolness factor, the WAF project is farther along but still in development (check out the refactor branch):

https://github.com/SpiderLabs/ModSecurity/

and if you just want to get down to the open issues:
https://github.com/SpiderLabs/ModSecurity/issues

Look for the libmodsecurity tags, and the "missing features" tags for the new nginx library.

We've already done the work to create an nginx ruleset on our side as well. Mike and I were discussing ways to implement it to demonstrate exactly what does and does not work in a reverse proxy config where the WAF is implemented in both nginx and in apache. Practically speaking this is not something you'd do in production because of the duplication of effort, but as a technology demonstrator its a good way to get a feel for what exactly is working in nginx at this point.

Thanks.

Also, what's the status of rebasing the packages on 1.8.x?

Basic ones might be up in quantum this weekend! (blizzard permitting)

Thanks.