This guide explains key Linux kernel and Nginx configuration adjustments—such as backlog queues, file descriptor limits, worker processes, keepalive settings, and logging options—to help administrators maximize web server performance while following safe, incremental tuning practices.
This guide explains how to fine‑tune Linux kernel parameters and NGINX directives—such as backlog queues, file descriptors, worker processes, keep‑alive settings, access‑log buffering, sendfile, and request limits—to achieve optimal web server performance for high‑traffic sites.
After leaving Baidu in 2015, the author recounts nearly two years of evolving a startup’s backend architecture—from a single‑server Tomcat setup to multi‑node clusters with Nginx reverse proxy, database sharding, caching, session sharing, and service‑oriented design—highlighting challenges, optimizations, and lessons learned.
This guide compiles common HTTPS and HTTP/2 deployment problems—such as Let’s Encrypt validation failures, certificate transparency errors, SNI incompatibility, cipher‑suite misconfigurations, and mixed‑content issues—and provides concise, actionable solutions with reference links for each case.
This guide explains why the default Linux kernel settings are unsuitable for high‑concurrency Nginx servers, shows how to edit /etc/sysctl.conf, and provides a curated list of TCP and network parameters with practical comments to improve throughput and latency.
This article compares the three most widely used load‑balancing solutions—Nginx, LVS, and HAProxy—detailing their advantages, disadvantages, suitable deployment scenarios, and how they fit into typical web architecture stages from small‑scale sites to large‑scale services.
This article explains how to create self‑signed SSL certificates using OpenSSL, add them to browser trust stores, and configure local development servers (fekit/ykit) and Nginx for HTTPS debugging, including handling SubjectAltName issues and detailed command examples.
This article describes the background, design concepts, selection rationale, implementation principles, algorithm details, and configuration of a Lua‑based overload protection module for Nginx that monitors system load and dynamically rejects traffic to safeguard backend services.
This article introduces Gixy, a static analysis tool for Nginx configurations, demonstrates how to detect and fix HTTP header splitting and other security issues, explains its handling of included files, lists detectable vulnerabilities, and provides simple installation instructions.
This step‑by‑step guide shows how to set up two Tomcat instances, configure Nginx as a reverse‑proxy load balancer, and use Redis to share session data, solving session‑loss issues in a simple load‑balanced environment.
This guide walks through configuring Zabbix to monitor Nginx and PHP‑FPM status, covering software installation paths, enabling status modules, creating extraction scripts, setting up Zabbix agent userparameters, restarting services, testing data retrieval, and adding server‑side templates for items, triggers, and graphs.
This article explains how to upgrade an existing HTTP backend to HTTPS by using Nginx as a reverse proxy, covering certificate generation with OpenSSL, Nginx configuration, host file adjustments, and testing steps, allowing secure communication without altering the original application code.
This article explains how Nginx can function as a reverse proxy, load balancer, HTTP server with static‑file handling, and forward proxy without relying on third‑party modules, providing configuration examples and discussing built‑in load‑balancing strategies such as round‑robin, weight, ip_hash, fair, and url_hash.
This step‑by‑step guide shows how to prepare two Tomcat servers, create a simple web project, configure Nginx as a reverse‑proxy load balancer with various strategies, start the services on Windows, and verify that requests are distributed across the Tomcat instances.
This article traces the evolution of HTTP-based video streaming—from early full‑file downloads through progressive download, pseudo‑streaming, and finally adaptive bitrate technologies like HLS and MPEG‑DASH—explaining key concepts, server implementations, and optimization techniques.
This article compares three popular open‑source proxy servers—Nginx, HAProxy, and Varnish—detailing their performance, features, and ideal use‑cases, helping ops and network engineers decide which solution best fits high‑availability, high‑concurrency environments while considering maintenance overhead and resource consumption.
This article walks through a real‑world Nginx 400 Bad Request incident, explaining how missing or malformed Host headers and added proxy headers caused the error, and provides step‑by‑step diagnostics, configuration comparisons, and the final fix of using the correct $host variable.
This guide explains how Nginx modules are organized, how to view and select available modules with ./configure --help, add third‑party modules using the --add-module option, and understand Nginx’s single‑process and master‑worker process models.
This guide explains how to conceal Nginx version headers, modify source files to remove software identifiers, change default users, tune worker processes, adjust connection limits, enable efficient file transfer, and set appropriate timeouts for a more secure and performant web server.
This tutorial walks through updating CentOS 7, adding the Docker repository, installing and testing Docker Engine, creating a Dockerfile for a .NET Core and Angular2 project, building and running the container, configuring Nginx as a reverse proxy, and verifying the deployment in a browser.
This article explains how load balancers act as the nervous system of web applications, compares hardware versus open‑source solutions, and details why HAProxy—especially in TCP (layer 4) mode—often outperforms Nginx for high‑performance reverse proxy and load‑balancing tasks.
This tutorial walks through installing .NET Core, disabling the firewall, setting up Nginx on CentOS, generating and building an ASP.NET Core + Angular2 template with npm and webpack, publishing the app, transferring it to the server, running it, and configuring Nginx as a reverse proxy for external access.
The article walks through setting up a low‑cost Tencent Cloud Ubuntu server with Apache or Nginx‑PHP, then demonstrates building four lightweight web utilities—a self‑hosted questionnaire system, a JavaScript QR‑code generator/scanner with short‑URL support, a Baidu‑map search tool, and a PHP script that parses Apple’s CFPropertyList to list Xcode dmg and docset download URLs.
This step‑by‑step guide shows how to provision a Tencent Cloud VM, install Nginx, PHP‑FPM and MySQL client, download and configure WordPress, set up its database, enable horizontal scaling with a load balancer, share the VM image, and finally clean up the database.
This article explains the principles and practical deployment steps for high‑availability web architectures using LVS (NAT and DR modes), Keepalived clustering, and Nginx proxy, covering topology diagrams, IPVS rules, weighted scheduling, kernel tweaks, and testing procedures to ensure reliable load balancing.
This tutorial walks through creating a self‑signed CA, generating keys and CSR, signing certificates, configuring nginx.conf for SSL, using the rewrite module, setting up fastcgi with PHP‑FPM, and testing the entire HTTPS setup on a Linux server.
This guide walks you through obtaining a free SSL certificate, configuring Nginx for HTTPS, and upgrading to TLS 1.2 on a CentOS server, ensuring your WeChat mini‑program can securely communicate with the backend, including detailed command‑line steps and essential software dependencies.
This article examines how JD’s activity system evolved its web architecture—introducing full‑page Redis and disk caching, asynchronous rendering, and OpenResty—resulting in a latency drop from around 1000 ms to under 15 ms and dramatically lower CPU usage.
This article walks through two common pitfalls when connecting a WeChat Mini‑Program to a server—an “invalid url” error caused by using single quotes instead of backticks, and a TLS 1.2 requirement that necessitates upgrading OpenSSL and recompiling Nginx, providing step‑by‑step solutions.
After Apple’s 2017 ATS enforcement requires all iOS apps to use HTTPS, developers must obtain an SSL certificate—such as a free Let’s Encrypt or Tencent Cloud‑issued GeoTrust certificate—install it on their web server (e.g., Nginx), optionally configure CDN encryption, and verify compliance with Apple’s security checks.
This article provides a comprehensive overview of Nginx, covering its core and extended features, architecture, module types, virtual‑host setup, access control, compression, anti‑hotlinking, reverse‑proxy, caching, and load‑balancing techniques for high‑concurrency web environments.
A PHP backend team discovered that enabling OpCache with a symlinked project caused the new version to be ignored, traced the issue to cached file paths, and resolved it by adjusting Nginx fastcgi parameters to use the real path, restoring proper deployment behavior.
This article explains how browsers cache resources, the role of HTTP response headers such as Last-Modified, Expires, Cache-Control, ETag, and Age, and provides practical examples of controlling cache behavior with Spring MVC code and detailed Nginx configuration for both static and proxy caching.
This article explores multi‑level caching architectures, detailing how Nginx, local and distributed caches, and Tomcat interact, and offers practical solutions for expiration strategies, dimensional caching, load‑balancing algorithms, hot‑data handling, atomic updates, and rapid recovery from cache failures.
The article introduces JEN, JD's extended Nginx platform that centralizes configuration, monitoring, traffic splitting, rate limiting and automated operations through a web console and Ansible integration, addressing the complexity, restart requirements, and scaling challenges of large‑scale Nginx deployments.
This article explains how Nginx and PHP‑FPM work together, details their configuration directives, describes common 502/504 errors, and provides practical tuning tips to improve performance and reliability of PHP‑based web services.
This guide walks through the fundamentals of HLS and RTMP protocols, compares their trade‑offs, and provides step‑by‑step instructions for setting up an Nginx‑RTMP server, configuring HLS, recording with WebRTC, and playing live streams in HTML5 video tags.
This guide walks you through purchasing a Tencent Cloud instance, installing and configuring Nginx, Node.js, MongoDB, and setting up deployment scripts, covering SSH access, compiling the latest Nginx with HTTP/2 support, and automating service startup for a robust community website.
This article explains how to use Nginx's various load‑balancing strategies together with Tomcat clustering and session‑sharing techniques to build a resilient, high‑availability web service, covering both simple static‑page scenarios and session‑dependent applications.
This article explains how to design a robust, zero‑intrusion data fallback component for high‑traffic web services using Nginx, Lua, and AOP principles, covering problem definition, architectural options, detailed execution steps, configuration snippets, storage choices, and performance monitoring.
This guide introduces nginScript, Nginx's JavaScript execution environment, showing how to declare variables, run scripts, access request data, and install the module, enabling powerful server‑side extensions without writing C modules.
This guide walks through installing and configuring Keepalived on two CentOS servers to provide automatic Nginx health checking, virtual IP failover, and high‑availability load balancing, including scripts, service commands, and advanced iptables techniques to avoid packet loss during maintenance.
This guide walks through securing an Nginx web server by configuring buffer size limits, timeouts, concurrent connection controls, host and method restrictions, user‑agent blocking, hot‑link protection, directory access rules, SSL setup, PHP hardening, chroot isolation, and firewall‑level IP connection limits.
This guide walks you through obtaining a trusted SSL certificate, generating keys and CSR with OpenSSL, configuring HTTPS in Nginx, and applying performance and security enhancements such as keep‑alive, session caching, HSTS, strong cipher suites, and name‑based virtual host solutions.
This article details a real‑world investigation of extremely low‑probability core dumps and memory leaks in a heavily modified Nginx/OpenSSL stack, covering debugging strategies, custom traffic‑control testing, distributed load generation, use of valgrind and AddressSanitizer, performance profiling with perf, and the mindset needed to solve such high‑concurrency bugs.
This step‑by‑step guide shows how to install and heavily tune Nginx on Linux, apply kernel TCP stack optimizations, and use Tsung for load testing, enabling a single server to sustain around 904,000 HTTP requests per second.
This article compares Nginx and Apache from an operations learner’s perspective, examining their operating system support, regional market share, scalability, PHP integration, configuration ease, and source code characteristics, concluding with guidance on when each server is appropriate.
This article walks through a real‑world investigation of intermittent core dumps and memory leaks in a heavily modified Nginx + OpenSSL stack under extreme QPS, detailing debugging strategies, custom load‑testing tools, and performance‑profiling techniques that helped pinpoint and fix the root causes.
The article describes a real‑world investigation of extremely low‑probability core dumps and memory leaks in a heavily modified Nginx + OpenSSL stack, detailing the debugging workflow, custom high‑concurrency test harness, use of tools such as GDB, perf, Valgrind, AddressSanitizer, and the performance‑hotspot analysis that ultimately resolved the issues.
A sudden 50% server load increase was traced to a malicious PHP file uploaded via an Nginx %00 null‑byte vulnerability, revealing how the exploit works, how it was detected, and steps to prevent future attacks.
This article explains how to implement access‑layer rate limiting in Nginx using built‑in modules, OpenResty Lua extensions, and token‑bucket or leaky‑bucket algorithms, with detailed configuration snippets, execution flow, testing procedures, and log analysis for robust traffic control.
This guide explains why Nginx returns 502 Bad Gateway, outlines common trigger conditions, and provides step‑by‑step commands and configuration tweaks—such as adjusting FastCGI process limits, timeout values, buffer sizes, and php‑fpm settings—to reliably resolve the issue.
This article explains why caching, degradation, and rate limiting are essential for high‑concurrency systems, details token‑bucket and leaky‑bucket algorithms, shows application‑level, distributed, and edge‑level throttling techniques, and provides practical Java, Guava, Redis‑Lua, and Nginx‑Lua code examples.
This article provides a comprehensive overview of software load balancing, detailing the architecture, features, performance, and deployment strategies of Nginx, LVS, and HAProxy, and includes practical scenarios for front‑end, internal, and high‑availability setups.
This guide explains how to compile Nginx with the GeoIP module, install MaxMind's GeoIP library and database, configure the system linker, and set up Nginx directives to redirect traffic from selected countries to custom pages on a single VPS.
This guide explains how to use simple Nginx configurations, enhanced cookie checks, and Lua scripts to create unforgeable tokens, limit request rates, and protect web services from CC attacks, scanning tools, and other malicious traffic while maintaining normal user access.
This article examines typical mistakes in Nginx‑PHP setups—such as misplaced index directives, misuse of the if statement, and fastcgi configuration quirks—and provides a streamlined, secure configuration example with explanations.
This guide explains how to use Keepalived and the VRRP protocol to build a two‑node high‑availability setup for Nginx, covering installation, health‑check scripts, configuration options, testing procedures, and troubleshooting tips for seamless failover.
This article examines nginx’s built‑in and extended load‑balancing algorithms—including weighted round‑robin, IP hash, fair, generic hash and consistent hash—by dissecting source code, describing implementation details, and presenting comparative performance tests that evaluate balance, consistency and fault‑tolerance across various scenarios.
This guide walks through setting up a highly available two‑node Nginx service on CentOS 7 using Corosync and Pacemaker, covering topology, environment preparation, host synchronization, HA component installation, NFS sharing, resource configuration with crmsh, and testing the failover behavior.
This tutorial walks through configuring Nginx upstream for load balancing and enabling proxy caching of static resources, covering experiment topology, environment setup, key upstream parameters, example configurations, cache directives, and performance observations.
This guide walks through setting up a virtual machine, installing and compiling Nginx, configuring its main, event, and http blocks, creating SSL certificates, and applying URL rewrite rules to serve different pages based on the client’s browser or device.
The article walks through a real‑world investigation of an Nginx HTTP forward proxy on an Alibaba Cloud server that stops accepting new connections after a while, detailing hypothesis testing, strace analysis, fastsocket feature toggles, accept_mutex behavior, and the final fix by adjusting the NIC's RPS settings.
This guide explains how to use the lightweight ngxtop tool to monitor Nginx in real time, showing frequent requests, high‑traffic IPs, and providing useful command examples for filtering logs, ordering results, and installing the utility via pip.
This article details Dangdang Marketplace's comprehensive performance optimization—including component-based design, proactive data generation, asynchronous loading, lazy rendering, multi‑domain and CDN strategies, GZIP compression, and Nginx fastcgi/proxy caching—showing how these measures reduced first‑screen time to under three seconds and dramatically lowered CPU and load during high‑traffic events.
This article details the comprehensive performance optimization strategies applied to Dangdang's marketplace, covering componentization, data generation and loading improvements, front‑end techniques such as lazy loading and script placement, network enhancements like DNS prefetch and CDN, and server‑side caching with Nginx and PHP asynchronous requests, along with measured CPU and load reductions.
This article explains nginx’s high‑performance architecture, detailing its daemon mode with a master process and multiple worker processes, the multi‑process model advantages, signal‑based control, the asynchronous non‑blocking event handling using epoll, and includes a representative pseudo‑code of its event loop.
This article explains how Nginx achieves high concurrency and performance through its master‑worker process model, event‑driven state machine, non‑blocking I/O, and graceful configuration reloads, contrasting it with traditional blocking multi‑process web servers.
This article introduces the advantages of Nginx and Lua, explains the ngx_lua module and OpenResty ecosystem, describes common architectural patterns such as load balancing and caching, and provides a step‑by‑step guide to building, configuring, and deploying a Lua‑based web application on Nginx.
This article explains how to design a gray‑release solution for HTTP read interfaces by using either Nginx with embedded Lua scripts or a version‑aware gateway layer, detailing rule design, configuration handling, and the trade‑offs of each approach.
After experimenting with Docker to isolate PHP‑FPM and Nginx services, a small startup shares the challenges they faced—from link networking quirks and service discovery with Consul, to CI image builds, log handling, monitoring, and the hidden costs of container restarts—offering practical insights for anyone adopting containerization.
This guide walks through why Nginx is preferred over Apache for high‑traffic sites, provides step‑by‑step instructions for compiling and installing Nginx on CentOS, and details extensive performance tuning and security hardening techniques to support tens of thousands of concurrent connections.
The article details JD.com's technical strategies for scaling product detail pages under massive traffic, covering service decomposition, KV‑based dynamic rendering with Nginx+Lua, unified service gateways, isolation, caching, monitoring, degradation, and performance testing to achieve sub‑50 ms response times.
This guide walks through why Nginx is preferred over Apache, detailed steps to compile and install it on CentOS, and extensive configuration tweaks—including worker processes, kernel parameters, SELinux policies, and request‑filtering rules—to achieve high concurrency and robust security for production web services.
This guide walks you through creating a lightweight CDN using Nginx on Ubuntu, covering installation, virtual host configuration, cache settings, and testing, while explaining core concepts like origin pull, proxy caching, and header management for educational purposes.
This article provides a comprehensive overview of software load balancing, detailing the architecture, features, performance characteristics, and various load‑balancing strategies of Nginx, LVS, and HAProxy, and explains how to choose and deploy them in different scenarios.
This article compares Nginx and ZooKeeper as load‑balancing solutions, explains their configurations, highlights scalability challenges with many services, and shows how ZooKeeper can serve as a service registry and notification center to complement or replace Nginx in complex environments.
This article explains how JD.com derives the displayed "JD price" from base prices and promotion rules using a real‑time pricing system built on Nginx, Redis clusters, and Tomcat, detailing the data flow, caching strategy, and disaster‑recovery mechanisms.
When a website suffers from saturated outbound bandwidth due to large image requests, you can quickly mitigate the issue by configuring Nginx to limit the transfer rate of images exceeding 100 KB, ensuring normal traffic remains responsive.
This guide shows how to configure Nginx's limit_conn directives to restrict the number of simultaneous requests from a single IP, test the settings with ApacheBench, and verify that the limits effectively block excess traffic, helping mitigate CC attacks.
This article walks you through designing, installing, and configuring a custom WAF using Nginx and Lua (OpenResty), covering core modules, pain points of native Nginx security, code examples, deployment tips, and future enhancements for robust web protection.
This guide explains how to use GitHub Webhooks together with a shell deployment script, a Node.js listener, and Nginx reverse proxy to achieve fully automated website deployment, covering setup, code examples, and practical considerations.
This guide explains how to automatically rotate Nginx logs each day by renaming the current log file at midnight, creating dated backup directories, and signaling the Nginx master process with USR1 using a simple Bash script scheduled via a cron job.
This article details JD.com's evolution of product detail page architecture—from early IIS/C# monoliths to a distributed, cache‑heavy, Nginx+Lua system—covering front‑end dimensions, performance metrics, design principles, scaling challenges, storage engine choices, multi‑datacenter deployment, and the lessons learned from numerous production pitfalls.
This article explains reverse proxy concepts, introduces Nginx’s core features and architecture, and provides a step‑by‑step guide to set up Nginx on Windows as a reverse‑proxy and load‑balancer for IIS‑hosted ASP.NET sites, including service registration, configuration tuning, static‑file caching, and testing.
This guide explains how HTTP/2 changes traditional front‑end performance tricks, covers browser support, TLS requirements, Server Push benefits, and provides a concise Nginx configuration example to enable HTTP/2 on your site.
The article presents a comprehensive overview of OpenResty, describing its architecture, suitable scenarios, selection criteria, real‑world adoption at Qihoo 360 and Sina Mobile, onboarding challenges, future roadmap, and community efforts, illustrating why it is a powerful backend solution for high‑throughput services.
This guide explains key metrics, influencing factors, and practical tuning steps—including bandwidth, hardware, OS limits, TCP parameters, and server configurations—to assess and improve a backend system's maximum request handling capacity under high concurrency.
This article describes JD’s unified service architecture for the product detail page that handled tens of billions of requests during Double Eleven, detailing the multi‑level caching strategy, Nginx+Lua access layer, service isolation, degradation mechanisms, and front‑end logic offloading.
A sudden high‑load alert on a web server was traced to Nginx’s massive write operations on fastcgi_temp files, revealed through top, iotop, lsof, strace and iostat, and temporarily resolved by redirecting fastcgi_temp to memory.
This article explains how aspect‑oriented programming can be applied to a backend system by separating cross‑cutting concerns such as request encryption, authentication, and permission handling using Sinatra extensions and Nginx Lua scripts, resulting in a modular, low‑coupling architecture.
This article explains how to apply aspect‑oriented programming principles to a Ruby‑based API service by extracting cross‑cutting concerns such as request encryption, authentication, and permission checks into Nginx Lua middleware, enabling low‑coupling, scalable backend modules.
The article explains why modern web systems face ever‑increasing concurrent connections, analyzes how front‑end techniques and server‑side configurations such as Apache MPM modes, Nginx, sendfile, and epoll can reduce memory and CPU consumption, and offers practical recommendations for efficient backend architecture.
This article examines Node.js’s early criticisms about reliability and single‑threaded limits, then explains how the built‑in cluster module and fork() enable multi‑process deployment, load balancing, and communication, illustrated with code demos, performance insights, and a look at nginx proxy integration.
This article explains how stateless application servers combined with load balancers form scalable clusters, detailing request routing, scaling strategies, and common implementations such as Nginx for HTTP forwarding and LVS for IP‑level balancing.
This article explains how Nginx Plus’s commercial stream module enables TCP load balancing, detailing configuration steps, underlying routing algorithms, health monitoring, connection handling, and performance considerations, while comparing it to HTTP load balancing and other layer‑4 solutions.
This article explains the three types of Nginx processes—master, worker, and cache—detailing each one's responsibilities, from configuration loading and socket management to request handling, cache indexing, and inter‑process communication, while also covering smooth reloads, upgrades, and cache index management.
This article explains how Nginx Plus adds TCP load‑balancing via the stream module, compares it with HTTP load‑balancing, provides configuration examples, describes the routing algorithm, health‑check mechanisms, and performance considerations for high‑concurrency environments.
This guide explains how to bypass cross‑origin restrictions by configuring an Nginx reverse proxy, offering a simpler alternative to JSONP that avoids server‑side code changes while enabling seamless API calls from a different domain.
This guide walks through testing Nginx configuration, starting the server, understanding its load‑balancing architecture, installing from source with required dependencies, handling common build errors, reviewing the final configuration summary, and creating a Linux init script for reliable service management.
