fds FirewallD Made Easy: Trusted Lists
Managing a Linux firewall shouldn’t require memorizing pages of firewall-cmd syntax. Yet that’s exactly what FirewallD demands for everyday tasks like blocking an abusive…
Security - page 5
Practical Security guides from the GetPageSpeed engineering team: configuration, performance tuning and security for production Linux servers.
94 articles
NGINX Digest Authentication: More Secure Than Basic Auth
Learn how to configure NGINX digest authentication using the ngx_http_auth_digest module. This guide covers installation, htdigest password files, brute-force protection, shared memory tuning, and…
NGINX Sysguard: Automatic Protection Against Server Overload
Learn how to protect your NGINX server from overload using the sysguard module. Configure load-based request rejection, memory protection, and response time monitoring for…
NGINX Cookie Flag Module: Set HttpOnly, Secure, and SameSite
Learn how to enforce HttpOnly, Secure, and SameSite cookie flags in NGINX using the cookie flag module. Step-by-step installation, configuration examples, and security best…
NGINX JavaScript Challenge: Stop Bots Without CAPTCHAs
Learn how to protect your NGINX server from bots and DDoS attacks using the JavaScript challenge module. This lightweight proof-of-work solution filters automated traffic…
NGINX NAXSI WAF: Complete Setup and Configuration Guide
Learn how to set up the NAXSI web application firewall for NGINX on Rocky Linux and RHEL. This guide covers installation, core rules, learning…
NGINX LDAP Authentication: Complete Module Setup Guide
Learn how to set up NGINX LDAP authentication using the nginx-auth-ldap dynamic module. This guide covers installation from pre-built packages, Active Directory integration, LDAPS…
NGINX TOTP Authentication: Add 2FA to Your Server
Learn how to add time-based one-time password (TOTP) two-factor authentication to NGINX protected locations. This guide covers installation, configuration, and security best practices for…
NGINX JWT Authentication Module: Secure Your APIs
Learn how to implement native JWT authentication directly in NGINX using the nginx-module-jwt. This lightweight module validates JSON Web Tokens at the edge, reducing…
NGINX Length Hiding Module: Does It Actually Prevent BREACH Attacks?
The NGINX length hiding module is often recommended for BREACH attack mitigation, but security research shows it only slows down attacks, not prevents them.…