NGINX WAF Module: Lightweight Web Application Firewall
by Danila Vershinin, April 3, 2026
Install and configure the ngx_waf module to protect NGINX against SQL injection, XSS, malicious bots, and CC attacks. Includes IP blacklists, regex rules, rate limiting, an advanced rule DSL, and an Under Attack challenge mode.
Read More...NGINX Var Module: Dynamic Variable Functions for Config
by Danila Vershinin, April 2, 2026
The NGINX var module adds 70+ built-in functions for dynamic variable assignment — string manipulation, math, cryptographic hashing, regex, encoding, time operations, and IP matching — all without Lua or njs.
Read More...NGINX Dynamic Upstream: Consul & etcd Upsync Guide
by Danila Vershinin,
Learn how to dynamically manage NGINX upstream servers using Consul and etcd with the upsync module. Add, remove, and reconfigure backend servers without reloading NGINX. Includes comparison with native NGINX resolve, NGINX Plus API, and Angie alternatives.
Read More...NGINX Upstream Jdomain: Dynamic DNS for Any NGINX Version
by Danila Vershinin, April 1, 2026
Learn how to use NGINX upstream jdomain for dynamic DNS resolution in upstream blocks. The jdomain module re-resolves domain names on the fly without reloads — essential for cloud and container deployments on older NGINX versions before the native resolve parameter.
Read More...NGINX Fair Load Balancing Without NGINX Plus
by Danila Vershinin,
Learn how to configure NGINX fair load balancing to route traffic to the least busy backend server. An open-source alternative to the NGINX Plus least_time directive, the fair module tracks active requests across all worker processes for intelligent traffic distribution.
Read More...NGINX Upstream Resolve: Dynamic DNS for Load Balancing
by Danila Vershinin, March 31, 2026
Learn how to use the NGINX upstream resolve parameter for dynamic DNS resolution. Keep upstream server IPs current without restarts, handle DNS failover gracefully, and compare native NGINX 1.28+ support with the upstream-dynamic module, Angie, and NGINX Plus.
Read More...NGINX Zstd Decompression with the unzstd Module
by Danila Vershinin, March 29, 2026
Learn how to use the NGINX unzstd module for transparent Zstandard decompression. Adopt Zstd compression server-side while maintaining compatibility with clients that do not yet support it — the same pattern as the built-in gunzip module, but for Zstd.
Read More...NGINX Traffic Accounting Module: Real-Time Metrics
by Danila Vershinin, March 28, 2026
Learn how to monitor NGINX traffic metrics in real time with the traffic accounting module. Get per-location request counts, bandwidth usage, latency, and HTTP status breakdowns — all aggregated in memory with minimal CPU and memory overhead, no log parsing required.
Read More...NGINX TeslaGov JWT Module: Claim Forwarding
by Danila Vershinin,
Learn how to authenticate API requests and forward JWT claims to backend services using the NGINX TeslaGov JWT module. Covers installation, HMAC and RSA key configuration, cookie-based auth for SPAs, login redirects, and claim extraction to request, response, and NGINX variables.
Read More...NGINX Stream Upsync: Dynamic TCP/UDP via Consul
by Danila Vershinin, March 27, 2026
Learn how to dynamically manage NGINX stream (TCP/UDP) backends using the stream-upsync module with Consul or etcd service discovery. Add, remove, and update backend servers without reloading NGINX.
Read More...