Professional NGINX Modules
10+ exclusive modules developed in-house by GetPageSpeed. Enterprise-grade functionality for security, performance, and operational insight - available only with a Pro subscription or higher.
All Professional Modules
Each module is packaged as a standard RPM/DEB and installs with a single command
IP Blocking with ipsets
nginx-module-ipset-accessHigh-performance IP-based access control using Linux kernel ipsets. Features blacklist/whitelist modes, honeypot auto-add, built-in rate limiting with auto-ban, JavaScript proof-of-work challenges, Prometheus metrics, and LRU caching. Uses libipset directly for kernel-level performance.
IP Blocking with nftables
nginx-module-nftset-accessModern successor to ipset-access using Linux nftables sets. Supports multiple sets per directive, live updates without NGINX reload, CIDR ranges, and a JSON stats API. Same powerful features as ipset-access with the modern nftables backend.
Cache Purge
nginx-module-cache-purgeSelectively purge content from FastCGI, proxy, SCGI and uWSGI caches. A purge operation removes cached content matching the request's cache key. Essential for WordPress and CMS deployments using NGINX proxy caching.
Device Detection
nginx-module-device-typeComprehensive device detection at the NGINX edge. Classifies requests by device type, browser, OS, and bot category using 3,600+ regex patterns. Exposes 22 variables including AI crawler detection for 50+ bots like GPTBot and ClaudeBot.
Tuning Advisor
nginx-module-tuningObserves real traffic patterns and provides data-driven tuning recommendations. Collects upstream header/body sizes, response times, and connection reuse metrics using lock-free atomic counters. Exposes a JSON API with percentile approximations and ready-to-use config snippets.
Auto Image Conversion
nginx-module-immerseTransparent modern image format delivery. Intercepts image responses (JPEG, PNG, GIF) and converts to WebP or AVIF based on client Accept headers. Features file-based caching with automatic mtime invalidation, thread pool integration, and graceful fallback on errors.
PAM Authentication
nginx-module-auth-pamUse PAM (Pluggable Authentication Modules) for HTTP authentication in NGINX. Leverage your system's existing user database and authentication policies for simple, centralized access control without maintaining separate credential stores.
Kerberos/SPNEGO Auth
nginx-module-spnego-http-authAdds SPNEGO support to NGINX for transparent Kerberos authentication via GSSAPI. Enables single sign-on (SSO) for enterprise environments using Active Directory or MIT Kerberos. Users authenticate seamlessly through their domain credentials.
Cookie Flags
nginx-module-cookie-flagSet HttpOnly, Secure, and SameSite flags on cookies from upstream Set-Cookie response headers. Supports wildcard matching to apply flags to all cookies and per-cookie overrides. Hardens your application's cookie security at the NGINX layer.
Immutable Caching
nginx-module-immutableAutomatically sets far-future expiration with the Cache-Control immutable attribute on static assets. Eliminates conditional revalidation requests for fingerprinted resources, reducing round trips and improving page load performance.
Markdown Filter
nginx-module-markdownNGINX filter module that transforms Markdown files to HTML on the fly. Serve documentation, READMEs, and content written in Markdown directly from NGINX without a separate build step or static site generator.
Query Normalization
nginx-module-sorted-argsNormalizes HTTP request querystring parameters by sorting them alphanumerically. Dramatically improves cache hit rates for proxy caches when applications generate URLs with parameters in different orders.
ZeroMQ Logger
nginx-module-log-zmqStream NGINX access logs to ZeroMQ message queues in real time. Decouple log collection from NGINX, enabling high-throughput log pipelines to Elasticsearch, Kafka, or custom consumers without filesystem I/O bottlenecks.
Reverse DNS Lookup
nginx-module-rdnsPerform reverse DNS lookups on incoming connections with allow/deny rules for hostname-based access control. Supports regular expressions for flexible matching. Uses NGINX core resolver with caching for efficient lookups.
Native ESI for Magento
nginx-module-esiAssemble cached pages from independently cached fragments without a separate Varnish tier. Fetches sibling fragments in parallel, accepts Magento's same-authority absolute ESI URLs, safely handles gzip, and pairs with cache-purge for X-Magento-Tags invalidation.
Unlock All Professional Modules
Get access to the full Pro module collection alongside 100+ open-source NGINX modules, NGINX-MOD, and priority updates.
Subscribe to ProStarting at $20/month. Cancel anytime.