Skip to main content

NGINX PAM Authentication: System Users and LDAP Integration


by Danila Vershinin, February 20, 2026

Configure NGINX PAM authentication to authenticate users against Linux system accounts, LDAP directories, and Active Directory. Includes installation, configuration examples, caching for performance, and security best practices.

Read More...

How to Block AI Crawlers with NGINX: Complete Guide


by Danila Vershinin,

Learn how to block AI crawlers like GPTBot, ClaudeBot, and PerplexityBot at the NGINX level using the device detection module. Includes configuration examples for blocking, rate limiting, and logging AI bot traffic.

Read More...

Install ModSecurity NGINX: Complete WAF Guide


by Danila Vershinin, February 19, 2026

Complete guide to installing ModSecurity WAF with NGINX. Learn how to protect your web applications from SQL injection, XSS, and OWASP Top 10 vulnerabilities using pre-configured packages with OWASP Core Rule Set.

Read More...

NGINX SXG Module: Signed HTTP Exchanges Guide


by Danila Vershinin, February 18, 2026

Enable Google Search prefetching with the NGINX SXG module. This guide covers installation, configuration, and testing of Signed HTTP Exchanges for instant page loads and improved Core Web Vitals.

Read More...

NGINX Query String Normalization with sorted-args Module


by Danila Vershinin, February 17, 2026

Improve NGINX cache hit rates by normalizing query string parameter order. The sorted-args module eliminates cache fragmentation caused by tracking codes, parameter reordering, and cache-busting parameters.

Read More...

NGINX Tuning Module: Data-Driven Buffer Optimization


by Danila Vershinin, February 16, 2026

Stop guessing your NGINX buffer sizes and timeouts. The Tuning Advisor module collects real-time metrics from your production traffic and provides actionable configuration recommendations based on actual data—not assumptions.

Read More...

NGINX PTA Module: Time-Limited Token Authentication


by Danila Vershinin,

Learn how to protect NGINX content with time-limited encrypted tokens using the PTA (Period of Time Authentication) module. Prevent hotlinking and enable secure, expiring download links with AES-128 encryption.

Read More...

NGINX Device Detection Module: Block AI Crawlers


by Danila Vershinin, February 15, 2026

The NGINX Device Detection Module (ngx_http_device_type_module) performs high-performance device classification directly at the edge. It identifies mobile phones, tablets, desktops, gaming consoles, smart TVs, wearables, and bots—including AI crawlers like GPTBot and ClaudeBot. Traditional device detection solutions rely on external API calls. This adds latency and per-request costs. The NGINX device detection module performs detection […]

Read More...

NGINX Markdown Module: Serve Docs from .md Files


by Danila Vershinin,

Transform Markdown files into HTML pages on-the-fly with the NGINX Markdown module. Eliminate build steps, enable YAML front matter for SEO, and serve documentation sites directly from .md files with GitHub Flavored Markdown support.

Read More...

NGINX Honeypot 3.0: Advanced IP Blocking with nftables


by Danila Vershinin,

NGINX Honeypot 3.0 introduces the ngx_nftset_access module – a complete rewrite using modern nftables instead of legacy ipset. Auto-ban attackers, rate-limit abusers, and challenge bots with proof-of-work puzzles, all from within NGINX.

Read More...