Using the OWASP Core Rule Set with the NGINX Security Module
by Danila Vershinin, January 18, 2026
Learn how to install and configure the OWASP Core Rule Set (CRS) with NGINX ModSecurity on Rocky Linux, AlmaLinux, and RHEL 9. Protect your web applications from SQL injection, XSS, remote code execution, and other OWASP Top 10 attacks with this comprehensive WAF configuration guide.
Read More...Tuning worker_rlimit_nofile in NGINX: The Complete Guide
by Danila Vershinin, January 17, 2026
Learn how to properly tune worker_rlimit_nofile in NGINX for optimal performance. Understand the relationship between file descriptors, worker_connections, and system limits with practical examples and source code analysis.
Read More...How to enable Varnish Cache on Magento 2 without downtime
by Danila Vershinin, January 16, 2026
Learn how to enable Varnish Cache on Magento 2 without downtime. Step-by-step guide with NGINX sandwich setup, VCL configuration, and zero-downtime traffic switch.
Read More...Tuning NGINX worker_processes: A Deep Dive
by Danila Vershinin, January 15, 2026
Learn how NGINX worker_processes works internally. Understand when to use auto and when manual tuning is better for VPS, containers, and high-memory setups.
Read More...NGINX Honeypot 2.0: Zero-Latency Bot Blocking Without External Scripts
by Danila Vershinin, December 6, 2025
The enterprise approach to IP blacklisting that eliminates shell scripts, sudo, and fcgiwrap. IPSet access module for NGINX is our exclusive closed-source premium package in NGINX Extras modules collection.
Read More...Installing the latest curl with HTTP/3 on CentOS, RHEL, and Fedora
by Danila Vershinin, November 30, 2025
How to install the latest curl on RPM-based systems like CentOS, RHEL, AlmaLinux, RockyLinux, Amazon Linux and Fedora.
Read More...Practical guide: tuning http2_chunk_size in NGINX
by Danila Vershinin, October 5, 2025
Pick the right http2_chunk_size in NGINX without guesswork. This practical guide shows when to use 4k, 8k, or 16k, how frame-size limits affect real clients, and how to apply per-location overrides (including Varnish frontends). Includes rule-of-thumb sizing, config snippets, and tips to balance TTFB, fairness, and bulk throughput.
Read More...VPS Is Still Shared Hosting: Diagnose Noisy Neighbors the Right Way
by Danila Vershinin, September 16, 2025
A VPS is still shared hosting. If you see high load with low CPU, you’re likely hitting noisy-neighbor contention: CPU steal or storage iowait. This guide shows how to prove it with iostat/mpstat, what to ask your provider, and when to migrate or switch to Dedicated CPU.
Read More...How to install the ModSecurity NGINX module in Rocky Linux/AlmaLinux/RHEL 9
by Danila Vershinin, January 25, 2025
Here’s how to easily install ModSecurity for NGINX in Rocky Linux/AlmaLinux/RHEL 9
Read More...