How to Install PHP 8.5 on CentOS 7
by Danila Vershinin, October 25, 2026
Install PHP 8.5 on CentOS 7 using base packages or a parallel collection, with PHP-FPM, built-in OPcache and clear extension compatibility guidance.
Read More...PHP2Shell on Ubuntu and Debian: Patched PHP 7.2-8.4 Without Ubuntu Pro or ELTS
by Danila Vershinin, October 23, 2026
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is a critical unauthenticated PHP RCE. Fixes for Ubuntu 20.04/18.04 and Debian 10 are Ubuntu Pro or ELTS only, and sury dropped these suites. Here is the patched PHP 7.2-8.1, free to install.
Read More...Ask Your AI Agent About Your NGINX Servers: Amplify MCP
by Danila Vershinin, October 22, 2026
GetPageSpeed Amplify now has a hosted MCP server. Connect Claude Code, Cursor, VS Code or Codex and ask about NGINX CVEs, gixy config findings, PHP exposure, metrics and uptime in plain language.
Read More...PHP2Shell on CentOS 7: Patched PHP 5.6 to 8.4
by Danila Vershinin,
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is a critical unauthenticated PHP RCE. Here is the free fix for every PHP from 5.6 to 8.4 on CentOS 7, in both Remi package shapes.
Read More...ngx_pagespeed Won’t Build on Modern NGINX? Install It
by Danila Vershinin, October 15, 2026
The original ngx_pagespeed fails to compile on NGINX 1.23+ and fails to load on modern glibc. Here is why, and how to install a version-matched nginx-module-pagespeed on Rocky Linux 9, AlmaLinux 9 and RHEL 9 with one dnf command, with AVIF and aarch64 support.
Read More...How We Made NGINX Vary Cache Purges 1000× Faster
by Danila Vershinin, October 13, 2026
NGINX cache purge of a Vary’d key used to scan the whole cache zone – minutes on large caches. ngx_cache_purge 2.7.0 adds a variant index that cuts repeat purges to milliseconds without giving up correctness.
Read More...Brotli Compression for Varnish 6.0 LTS: vmod-brotli Now Packaged
by Danila Vershinin, October 12, 2026
Open-source Varnish only speaks gzip. vmod-brotli brings brotli compression to Varnish 6.0 LTS as a fetch processor: objects are cached compressed and delivered as-is. Verified on a clean Rocky Linux 10 install: 17% smaller than gzip on a real asset at the default quality, with a faster quality level that matches gzip speed.
Read More...zlib-ng vs zlib in NGINX: Benchmark and Methodology
by Danila Vershinin, October 3, 2026
How we benchmarked zlib-ng against stock zlib the way NGINX really uses it: chunked streaming harness, ab end-to-end runs, x86_64 and aarch64 numbers, the gzip_http_version trap, and why level 1 users should switch to level 2.
Read More...NGINX Module Version Mismatch: When APT Lets It Through
by Danila Vershinin, October 1, 2026
An NGINX module built for 1.29.8 will not load into 1.31.5, and NGINX says so. The question is whether your package manager knew first. We reproduced a stale nginx-abi label letting APT install a mismatched pair, wedging dpkg and arming the next restart as an outage.
Read More...Trusted IP Lists for FirewallD, NGINX and fail2ban
by Danila Vershinin, September 29, 2026
Official reference for the GetPageSpeed trusted-lists packages: auto-updating IP allowlists for Cloudflare, Stripe, PayPal, Googlebot, OpenAI and 30+ services, consumable by FirewallD, NGINX and fail2ban on RHEL-based systems.
Read More...