NGINX mod_zip: Dynamic ZIP Archives Guide
by Danila Vershinin, February 4, 2026
Learn how to use NGINX mod_zip module to dynamically assemble ZIP archives on-the-fly without loading files into memory. Perfect for download portals, file sharing services, and any application that needs to serve multiple files as a single ZIP archive with minimal server resources.
Read More...NGINX TOTP Authentication: Add 2FA to Your Server
by Danila Vershinin,
Learn how to add time-based one-time password (TOTP) two-factor authentication to NGINX protected locations. This guide covers installation, configuration, and security best practices for the ngx_http_auth_totp module.
Read More...NGINX Upload Module: File Upload Handling Guide
by Danila Vershinin, February 2, 2026
Learn how to configure the NGINX upload module for efficient file upload handling. This comprehensive guide covers installation, configuration directives, resumable uploads, security best practices, and performance optimization for system administrators managing production servers.
Read More...NGINX JWT Authentication Module: Secure Your APIs
by Danila Vershinin,
Learn how to implement native JWT authentication directly in NGINX using the nginx-module-jwt. This lightweight module validates JSON Web Tokens at the edge, reducing backend load and simplifying your API security architecture.
Read More...NGINX Length Hiding Module: Does It Actually Prevent BREACH Attacks?
by Danila Vershinin,
The NGINX length hiding module is often recommended for BREACH attack mitigation, but security research shows it only slows down attacks, not prevents them. Learn what actually protects against BREACH: SameSite cookies, CSRF token rotation, and proper application architecture.
Read More...NGINX Reverse DNS Module: Hostname-Based Access Control
by Danila Vershinin,
Learn how to use the NGINX reverse DNS module (ngx_http_rdns) to verify client hostnames, block malicious traffic, and authenticate legitimate crawlers like Googlebot. This guide covers installation, configuration, and security best practices.
Read More...NGINX DNS over HTTPS: Run Your Own DoH Server
by Danila Vershinin, February 1, 2026
Learn how to deploy a privacy-compliant DNS over HTTPS (DoH) server using NGINX. This guide covers installation, configuration, and security best practices for running your own RFC 8484 compliant DoH endpoint.
Read More...NGINX Bot Verification: Block Fake Crawlers
by Danila Vershinin, January 31, 2026
Learn how to verify and block fake search engine bots in NGINX using the bot-verifier module. This comprehensive guide covers installation, configuration, and testing of reverse DNS verification for Googlebot, Bingbot, and other crawlers.
Read More...NGINX Bot Protection Without CAPTCHA: Testcookie Guide
by Danila Vershinin, January 30, 2026
Learn how to implement NGINX bot protection using the testcookie module. This JavaScript-based challenge blocks automated traffic without frustrating legitimate users with CAPTCHAs.
Read More...NGINX srcache: Transparent Memcached and Redis Caching Layer
by Danila Vershinin,
Learn how to implement transparent caching in NGINX using the srcache module with memcached or Redis backends. This comprehensive guide covers installation, configuration, cache key strategies, and production-ready examples for Rocky Linux, AlmaLinux, and RHEL systems.
Read More...