Nginx resolver security advisories

I have no idea if it's substantiated but I've read accusations that it's so you'll pay for the commercial version. Apparently the open source version ignores the TTL and just caches it until you restart the process.

I think it's because the system DNS can block under some conditions. That's death for nginx, which can't afford to spin up a thread per request.

Related to this?

*) Bugfix: the "try_files" directive inside a nested location given by a regular expression worked incorrectly if the "alias" directive was used in the outer location. from: http://nginx.org/en/CHANGES-1.8