Professional NGINX Modules
10+ exclusive modules developed in-house by GetPageSpeed. Enterprise-grade functionality for security, performance, and operational insight - available only with a Pro subscription or higher.
All Professional Modules
Each module is packaged as a standard RPM/DEB and installs with a single command
IP Blocking with ipsets
nginx-module-ipset-accessHigh-performance IP-based access control using Linux kernel ipsets. Features blacklist/whitelist modes, honeypot auto-add, built-in rate limiting with auto-ban, JavaScript proof-of-work challenges, Prometheus metrics, and LRU caching. Uses libipset directly for kernel-level performance.
IP Blocking with nftables
nginx-module-nftset-accessModern successor to ipset-access using Linux nftables sets. Supports multiple sets per directive, live updates without NGINX reload, CIDR ranges, and a JSON stats API. Same powerful features as ipset-access with the modern nftables backend.
Cache Purge
nginx-module-cache-purgeSelectively purge content from FastCGI, proxy, SCGI and uWSGI caches. A purge operation removes cached content matching the request's cache key. Essential for WordPress and CMS deployments using NGINX proxy caching.
Device Detection
nginx-module-device-typeComprehensive device detection at the NGINX edge. Classifies requests by device type, browser, OS, and bot category using 3,600+ regex patterns. Exposes 22 variables including AI crawler detection for 50+ bots like GPTBot and ClaudeBot.
Tuning Advisor
nginx-module-tuningObserves real traffic patterns and provides data-driven tuning recommendations. Collects upstream header/body sizes, response times, and connection reuse metrics using lock-free atomic counters. Exposes a JSON API with percentile approximations and ready-to-use config snippets.
Auto Image Conversion
nginx-module-immerseTransparent modern image format delivery. Intercepts image responses (JPEG, PNG, GIF) and converts to WebP or AVIF based on client Accept headers. Features file-based caching with automatic mtime invalidation, thread pool integration, and graceful fallback on errors.
PAM Authentication
nginx-module-auth-pamUse PAM (Pluggable Authentication Modules) for HTTP authentication in NGINX. Leverage your system's existing user database and authentication policies for simple, centralized access control without maintaining separate credential stores.
Kerberos/SPNEGO Auth
nginx-module-spnego-http-authAdds SPNEGO support to NGINX for transparent Kerberos authentication via GSSAPI. Enables single sign-on (SSO) for enterprise environments using Active Directory or MIT Kerberos. Users authenticate seamlessly through their domain credentials.
Cookie Flags
nginx-module-cookie-flagSet HttpOnly, Secure, and SameSite flags on cookies from upstream Set-Cookie response headers. Supports wildcard matching to apply flags to all cookies and per-cookie overrides. Hardens your application's cookie security at the NGINX layer.
Immutable Caching
nginx-module-immutableAutomatically sets far-future expiration with the Cache-Control immutable attribute on static assets. Eliminates conditional revalidation requests for fingerprinted resources, reducing round trips and improving page load performance.
Markdown Filter
nginx-module-markdownNGINX filter module that transforms Markdown files to HTML on the fly. Serve documentation, READMEs, and content written in Markdown directly from NGINX without a separate build step or static site generator.
Query Normalization
nginx-module-sorted-argsNormalizes HTTP request querystring parameters by sorting them alphanumerically. Dramatically improves cache hit rates for proxy caches when applications generate URLs with parameters in different orders.
ZeroMQ Logger
nginx-module-log-zmqStream NGINX access logs to ZeroMQ message queues in real time. Decouple log collection from NGINX, enabling high-throughput log pipelines to Elasticsearch, Kafka, or custom consumers without filesystem I/O bottlenecks.
Reverse DNS Lookup
nginx-module-rdnsPerform reverse DNS lookups on incoming connections with allow/deny rules for hostname-based access control. Supports regular expressions for flexible matching. Uses NGINX core resolver with caching for efficient lookups.
Unlock All Professional Modules
Get access to the full Pro module collection alongside 100+ open-source NGINX modules, NGINX-MOD, and priority updates.
Subscribe to ProStarting at $20/month. Cancel anytime.