Skip to main content

Phantom Token NGINX Module: Secure API Gateway Auth


by Danila Vershinin, February 10, 2026

Learn how to implement the Phantom Token pattern in NGINX to secure your APIs. This module exchanges opaque access tokens for JWTs at the gateway level, protecting sensitive claims from client applications while working with any RFC 7662-compliant OAuth provider.

Read More...

NGINX Echo Module: Shell-Style Scripting in Your Config


by Danila Vershinin,

Learn how to use the NGINX echo module for debugging, testing, and building lightweight endpoints. Complete guide with installation, all 19 directives, 10 variables, practical examples, and security best practices.

Read More...

NGINX Untar Module: Serve Files Directly from Tar Archives


by Danila Vershinin, February 9, 2026

Learn how to use the NGINX untar module to serve static files directly from tar archives without extraction. This zero-copy module indexes archives and streams files efficiently using sendfile.

Read More...

NGINX Link Function Module: Embed C/C++ in NGINX


by Danila Vershinin,

Learn how to use the NGINX link function module to embed custom C/C++ application logic directly into NGINX. Build high-performance APIs, authentication handlers, and dynamic content generators without a separate application server.

Read More...

NGINX Keyval Module: Dynamic Key-Value Store Inside NGINX


by Danila Vershinin,

Learn how to use the NGINX keyval module to create a dynamic key-value store directly inside NGINX. Build feature flags, IP blocklists, maintenance mode toggles, A/B testing, and canary deployments — all without restarting NGINX or adding backend services.

Read More...

NGINX max_headers: Prevent Header-Flooding DoS


by Danila Vershinin, February 8, 2026

Learn how to use the max_headers directive in nginx-mod to limit the number of HTTP request headers and protect your server from header-flooding DoS attacks. Includes installation, configuration, and testing on RHEL-based systems.

Read More...

fds FirewallD Made Easy: Trusted Lists


by Danila Vershinin,

Managing a Linux firewall shouldn’t require memorizing pages of firewall-cmd syntax. Yet that’s exactly what FirewallD demands for everyday tasks like blocking an abusive IP or whitelisting PayPal webhooks. Enter fds and trusted-lists — two tools from the GetPageSpeed repository that transform fds FirewallD management from painful to pleasant. Together, they give you: fds: Block […]

Read More...

NGINX Digest Authentication: More Secure Than Basic Auth


by Danila Vershinin, February 7, 2026

Learn how to configure NGINX digest authentication using the ngx_http_auth_digest module. This guide covers installation, htdigest password files, brute-force protection, shared memory tuning, and when to choose digest auth over basic auth for securing your NGINX locations.

Read More...

NGINX Redis2 Module: Talk to Redis Directly from NGINX


by Danila Vershinin,

Learn how to use the NGINX redis2 module to communicate with Redis directly from NGINX. This module implements the Redis 2.0 protocol with support for pipelining, keepalive connections, and all Redis commands. Install it easily on CentOS, RHEL, Rocky Linux, Debian, and Ubuntu via GetPageSpeed repository.

Read More...

NGINX Sysguard: Automatic Protection Against Server Overload


by Danila Vershinin,

Learn how to protect your NGINX server from overload using the sysguard module. Configure load-based request rejection, memory protection, and response time monitoring for graceful degradation under pressure.

Read More...