NGINX Request Cookies Filter Module
Learn how to filter, strip, rewrite, and add cookies in NGINX request headers before they reach your upstream servers. The request cookies filter module…
Security - page 3
Practical Security guides from the GetPageSpeed engineering team: configuration, performance tuning and security for production Linux servers.
94 articles
NGINX Redis Rate Limit Module: Distributed Throttling
Learn how to implement distributed rate limiting in NGINX using the Redis Rate Limit module. This module uses the Generic Cell Rate Algorithm (GCRA)…
Gixy IDE Plugins: NGINX Security in VS Code and JetBrains
HTTP response splitting, path traversal via alias, and header injection — these issues often slip through code review and only surface in production, sometimes…
NGINX CDN Loop Detection: Prevent Request Loops
Learn how to prevent infinite request loops in NGINX CDN and reverse proxy configurations using the loop detect module. This module implements RFC 8586's…
NGINX ipscrub Module: Anonymize IP Addresses in Logs
Learn how to anonymize IP addresses in NGINX access logs using the ipscrub module. This privacy-focused module replaces real IPs with cryptographic hashes, helping…
NGINX HTML Sanitize Module: Strip Dangerous HTML at the Edge
Learn how to sanitize HTML content at the NGINX level using the ngx_http_html_sanitize_module. This module uses Google's gumbo-parser for HTML5 parsing and katana-parser for…
NGINX Execute Module: Run Shell Commands via HTTP
Learn how to safely install and configure the NGINX execute module for running shell commands via HTTP requests. This guide covers security hardening with…
NGINX Encrypted Session Module: AES-256 Variable Encryption
Learn how to encrypt and decrypt NGINX variable values using the encrypted session module. This guide covers AES-256-CBC encryption for secure cookies, time-limited tokens,…
NGINX Dynamic Limit Req Module: Redis-Backed Rate Limiting
Learn how to protect your NGINX server from DDoS attacks and brute force abuse using the dynamic limit req module. This Redis-backed rate limiter…
NGINX Delay Module: Slow Down Attackers Easily
The NGINX delay module adds artificial request delays to slow down brute force attacks, scanner bots, and other malicious traffic — without blocking worker…