We have released nghttp2 v1.66.0.

Do not download the archive files generated by GitHub. They do not work. Please download the signed and versioned tar balls, such as nghttp2-1.66.0.tar.gz.

lib

nghttp2_submit_rst_stream now does not add RST_STREAM frame more than once.

src

The support for the draft HTTP/2 ALPNs (e.g., h2-14, h2-16) have been removed.

doc

This release fixes build failure with rubydomain namespace.

h2load

QUIC is now enabled with OpenSSL >= 3.5.0.

nghttpx

QUIC is now enabled with OpenSSL >= 3.5.0.

The bug in Forwarded By parameter value that exhibits when a frontend socket listens on wildcard address has been fixed.

The rate limiting for incoming QUIC traffic has been implemented. --read-rate and --read-burst options are now applied to QUIC connection as well.

Each worker thread has its listening TCP sockets.

The usage counts of a weight group are preserved after replacing backends with backendconfig API if the name and weight of the groups under the pattern have not changed.

OCSP stapling feature has been removed.

TLS session cache via memcached has been removed.

nghttpd

Support for SSLKEYLOGFILE has been added.