Using the OWASP Core Rule Set with the NGINX Security Module


by Danila Vershinin, January 18, 2026

Learn how to install and configure the OWASP Core Rule Set (CRS) with NGINX ModSecurity on Rocky Linux, AlmaLinux, and RHEL 9. Protect your web applications from SQL injection, XSS, remote code execution, and other OWASP Top 10 attacks with this comprehensive WAF configuration guide.

Read More...

Linux setfacl Command: Complete Guide to ACL Permissions for Read-Only Users and Beyond


by Danila Vershinin,

Learn how to use the Linux setfacl command to add read-only users to directories, configure recursive ACL permissions, and set default ACLs for new files. This comprehensive guide covers everything from basic syntax to advanced use cases for enterprise-grade access control.

Read More...

Tuning worker_rlimit_nofile in NGINX: The Complete Guide


by Danila Vershinin, January 17, 2026

Learn how to properly tune worker_rlimit_nofile in NGINX for optimal performance. Understand the relationship between file descriptors, worker_connections, and system limits with practical examples and source code analysis.

Read More...

How to enable Varnish Cache on Magento 2 without downtime


by Danila Vershinin, January 16, 2026

Learn how to enable Varnish Cache on Magento 2 without downtime. Step-by-step guide with NGINX sandwich setup, VCL configuration, and zero-downtime traffic switch.

Read More...

Tuning NGINX worker_processes: A Deep Dive


by Danila Vershinin, January 15, 2026

Learn how NGINX worker_processes works internally. Understand when to use auto and when manual tuning is better for VPS, containers, and high-memory setups.

Read More...

NGINX Honeypot 2.0: Zero-Latency Bot Blocking Without External Scripts


by Danila Vershinin, December 6, 2025

The enterprise approach to IP blacklisting that eliminates shell scripts, sudo, and fcgiwrap. IPSet access module for NGINX is our exclusive closed-source premium package in NGINX Extras modules collection.

Read More...

Installing the latest curl with HTTP/3 on CentOS, RHEL, and Fedora


by Danila Vershinin, November 30, 2025

How to install the latest curl on RPM-based systems like CentOS, RHEL, AlmaLinux, RockyLinux, Amazon Linux and Fedora.

Read More...

Practical guide: tuning http2_chunk_size in NGINX


by Danila Vershinin, October 5, 2025

Pick the right http2_chunk_size in NGINX without guesswork. This practical guide shows when to use 4k, 8k, or 16k, how frame-size limits affect real clients, and how to apply per-location overrides (including Varnish frontends). Includes rule-of-thumb sizing, config snippets, and tips to balance TTFB, fairness, and bulk throughput.

Read More...

VPS Is Still Shared Hosting: Diagnose Noisy Neighbors the Right Way


by Danila Vershinin, September 16, 2025

A VPS is still shared hosting. If you see high load with low CPU, you’re likely hitting noisy-neighbor contention: CPU steal or storage iowait. This guide shows how to prove it with iostat/mpstat, what to ask your provider, and when to migrate or switch to Dedicated CPU.

Read More...

How to install the ModSecurity NGINX module in Rocky Linux/AlmaLinux/RHEL 9


by Danila Vershinin, January 25, 2025

Here’s how to easily install ModSecurity for NGINX in Rocky Linux/AlmaLinux/RHEL 9

Read More...