NGINX Reverse DNS Module: Hostname-Based Access Control
Learn how to use the NGINX reverse DNS module (ngx_http_rdns) to verify client hostnames, block malicious traffic, and authenticate legitimate crawlers like Googlebot. This…
Security - page 6
Practical Security guides from the GetPageSpeed engineering team: configuration, performance tuning and security for production Linux servers.
94 articles
NGINX Bot Verification: Block Fake Crawlers
Learn how to verify and block fake search engine bots in NGINX using the bot-verifier module. This comprehensive guide covers installation, configuration, and testing…
NGINX Bot Protection Without CAPTCHA: Testcookie Guide
Learn how to implement NGINX bot protection using the testcookie module. This JavaScript-based challenge blocks automated traffic without frustrating legitimate users with CAPTCHAs.
NGINX Secure Link: Signed URLs and Hotlink Protection
Learn how to implement NGINX secure link functionality for signed URLs and hotlink protection. This comprehensive guide covers the HMAC Secure Link module installation,…
NGINX Allow Deny: Complete IP Whitelist & Blacklist Guide
Master NGINX allow and deny directives to control access by IP address. This complete guide covers IP whitelisting, blacklisting, CIDR notation, the geo module…
NGINX Basic Auth with htpasswd: Complete Configuration Guide
Learn how to configure NGINX basic authentication using htpasswd. This complete guide covers password file creation, hash algorithms, WordPress protection, staging site security, SSL…
NGINX Rate Limiting: The Complete Guide
Learn how to configure NGINX rate limiting using the leaky bucket algorithm. This comprehensive guide covers limit_req_zone, burst, nodelay, delay parameters, whitelisting IPs, and…
NGINX TLS 1.3 Hardening: A+ SSL Configuration Guide
Learn how to configure NGINX for maximum TLS security with TLS 1.3, achieve an A+ SSL Labs rating, and use tools like Gixy for…
Using the OWASP Core Rule Set with the NGINX Security Module
Learn how to install and configure the OWASP Core Rule Set (CRS) with NGINX ModSecurity on Rocky Linux, AlmaLinux, and RHEL 9. Protect your…
Linux setfacl Command: Complete Guide to ACL Permissions for Read-Only Users and Beyond
Learn how to use the Linux setfacl command to add read-only users to directories, configure recursive ACL permissions, and set default ACLs for new…