NGINX Maps Hash Tuning: Complete Configuration Guide
by Danila Vershinin, September 1, 2022
Settings NGINX maps correctly for large datasets, tuning based on CPU cache line size and understanding NGINX error messages.
Read More...Performance-friendly way of blocking Referrer spam
by Danila Vershinin, August 27, 2022
Protecting your NGINX website from Referrer spam SPAM using efficient performance-friendly maps
Read More...WP Super Cache NGINX Configuration
by Danila Vershinin, August 17, 2022
Correctly configuring NGINX for WP Super Cache plugin is not a trivial task. But we make it easy for you with this NGINX snippet.
Read More...NGINX Kernel TLS (kTLS): Setup, Verification and the tcp_notsent_lowat Trap
by Danila Vershinin, July 22, 2022
Enable kernel TLS (kTLS) and SSL_sendfile in NGINX on RHEL, Rocky, AlmaLinux, Amazon Linux and CentOS 7, verify it, and avoid the tcp_notsent_lowat sysctl that throttles HTTP/1.1 downloads to 100 kB/s.
Read More...Monitoring PHP-FPM in Bitnami stacks using NGINX Amplify
by Danila Vershinin, April 29, 2022
Update (2026): F5 Networks discontinued NGINX Amplify on January 31, 2026. The instructions below reference the deprecated nginx-amplify-agent and the F5 cloud endpoint. For a drop-in replacement that keeps your existing agent working with a single config-line change, see GetPageSpeed Amplify: the drop-in NGINX Amplify replacement. If you are a user of Bitnami stack for […]
Read More...How to install NGINX WAF module in Fedora Linux
by Danila Vershinin, February 19, 2022
How to easily set up WAF module protecting your NGINX powered websites in Fedora Linux. Install prebuilt NGINX WAF module.
Read More...How to install and configure CAPTCHA NGINX module in CentOS/RHEL
by Danila Vershinin, October 8, 2021
Implementing CAPTCHA image generation and validation using NGINX module
Read More...Laravel NGINX configuration
by Danila Vershinin, September 28, 2021
Modern NGINX configuration for Laravel PHP framework will allow you to have a secure and performant website
Read More...NGINX: putting multiple services on the same port
by Danila Vershinin, June 21, 2021
Recent versions of NGINX introduce the TLS pre-read capabilities, which allow it to see which TLS protocols are supported by the client, the requested SNI server name, and the ALPN protocol of request. All this information, known before the request is routed by NGINX to the upstream servers, makes it possible to conditionally route requests […]
Read More...Whitelist IP addresses for Magento 2 admin protection
by Danila Vershinin, May 8, 2021
Protect Magento 2 admin area using NGINX IP address whitelisting approach. Secure your Magento 2 administration
Read More...