The article walks through configuring a low‑cost Huawei Cloud ECS instance and adjusting security‑group rules, then setting up an Nginx stream proxy to expose an internal RDS MySQL instance to the public internet, allowing external connections without purchasing a dedicated public IP.
This guide shows operations engineers how to dramatically improve web application protection by configuring often‑overlooked HTTP security headers—CSP, X‑Frame‑Options, HSTS, Referrer‑Policy, Permissions‑Policy, and more—through practical Nginx/Apache/Node.js examples, verification scripts, and automation tips.
Even with Nginx handling high‑performance load balancing and static content, a dedicated API gateway is essential for flexible routing, dynamic service discovery, fine‑grained traffic governance, and centralized business logic such as authentication and logging in microservice architectures.
This guide walks through the fundamentals and advanced configurations for proxying WebSocket connections with Nginx, covering protocol upgrade handling, timeout tuning, Docker/Kubernetes deployment, security hardening, troubleshooting, and performance optimization for reliable production use.
This article explains how Nginx can separate static assets from dynamic requests using location rules and reverse‑proxying, provides a complete configuration example, and details the performance gains from zero‑copy file serving, gzip compression, caching headers, and CDN integration.
This guide explains how to maximize Nginx's concurrent handling capacity by configuring worker_processes, worker_connections, event settings, system limits, and I/O optimizations, providing concrete code snippets and kernel parameters for achieving tens of thousands of simultaneous connections.
NginxPulse is a lightweight, Docker‑ready Nginx log analysis panel built with Go‑Gin backend and Vue3 frontend, offering real‑time PV/UV, IP geolocation, multi‑site support, custom log formats, remote log fetching, and easy deployment via a single command or Compose file.
This article walks through a systematic, production‑grade approach to diagnosing and mitigating connection‑overload, DoS/DDoS, XSS and cross‑origin attacks, covering log analysis, Linux kernel tuning, Nginx rate‑limiting, CDN/DDoS‑protection layers, WAF rules, safe rendering practices, and a hardened CORS configuration template.
This article walks through the entire process of selecting a low‑cost Raspberry Pi Zero W, flashing Raspbian Stretch Lite, configuring SSH and Wi‑Fi, optimizing the OS, installing Nginx, and exposing the server to the internet with ngrok, complete with concrete commands, configuration files, and screenshots.
This guide explains how to achieve million‑level concurrent request handling by combining Nginx, LVS, and Keepalived, detailing the architecture layers, load‑balancing design, high‑availability configuration, and practical sample configurations for each component in modern large‑scale web services.
This article walks through common CORS errors encountered when a frontend on http://localhost:8080 calls a backend on http://localhost:59200, explains the role of the four CORS response headers, the preflight OPTIONS request, and provides step‑by‑step Nginx configurations to resolve each case.
The article explains how MinIO's community edition removed its web console via a large PR, outlines the official push toward a commercial product, and provides a step‑by‑step guide to deploying the Rust‑based RustFS as an open‑source alternative with Docker Compose and Nginx HTTPS configuration, concluding with a feature comparison.
This article explains the principle of Nginx static‑dynamic separation, shows how to configure location blocks and caching for static assets, and demonstrates how proxying dynamic requests to backend servers can reduce response time from 200 ms to 50 ms, increasing QPS several‑fold.
A seasoned ops engineer recounts a production incident caused by improper Nginx load‑balancing, then compares weighted round‑robin and IP‑hash strategies with detailed configurations, performance test results, common pitfalls, dynamic weight scripts, and practical recommendations for reliable, high‑performance deployments.
This guide walks through diagnosing intermittent 502 Bad Gateway errors in Nginx by analyzing error logs, checking upstream and FastCGI timeout settings, reviewing PHP‑FPM configuration, performing performance tuning, and outlining advanced troubleshooting, monitoring, and capacity‑planning strategies to ensure stable high‑traffic deployments.
This guide walks you through a complete Nginx high‑concurrency tuning process—from basic worker and TCP settings to kernel parameters, caching, SSL, and advanced techniques like DPDK and JIT—showing performance improvements from 80 k to over a million QPS with real‑world examples and scripts.
This guide provides a comprehensive cheat‑sheet of Nginx command‑line operations—including how to start, stop, reload, check configuration, view logs, inspect processes, query version information and perform common debugging tasks—helping administrators manage Nginx efficiently in production and development environments.
This article explains every Nginx timeout directive, shows how to configure client, proxy, FastCGI and miscellaneous timeouts with concrete code snippets, offers best‑practice recommendations for different workloads, and provides a full configuration example to improve server stability and performance.
This guide explains why static‑dynamic separation is essential for high‑traffic sites, describes the typical Nginx architecture, and provides a complete configuration example that routes static assets directly while proxying dynamic requests to backend servers with load‑balancing and caching.
This article reveals three hidden traps in Nginx‑Keepalived high‑availability setups—network‑partition split‑brain, inadequate health‑check scripts, and unsafe configuration‑sync timing—explains real incidents caused by each, and provides concrete configuration changes, Bash scripts, and automation tips to prevent service outages.
This guide explains how to use Nginx and OpenResty Lua scripts to implement rate limiting and circuit‑breaking for high‑concurrency services, detecting error rates and response latency, automatically opening and closing a 30‑second break window, and returning custom JSON responses when downstream services fail.
Learn how to maximize Nginx throughput by correctly configuring worker_processes, worker_connections, enabling epoll, and using accept_mutex, with practical examples, formulae, and system‑level tweaks to avoid common pitfalls like CPU oversubscription and 'too many open files' errors.
An in‑depth comparison of anti‑hotlinking techniques shows how Nginx can enforce protection with a single directive in milliseconds, while SpringBoot offers five approaches—Filter, Interceptor, Nginx config, signed URL, and hybrid strategy—each with different performance, security, and maintenance trade‑offs.
This guide explains how to achieve up to ten‑fold performance gains in Nginx by aligning worker processes with CPU cores, raising file‑descriptor limits, extending keep‑alive settings, and enabling zero‑copy transmission features such as sendfile, tcp_nopush, and tcp_nodelay.
This article examines practical ways to bypass NAT restrictions for UDP communication, covering direct P2P for friendly NATs, UDP hole punching for symmetric NATs, reliable VPS relays for any NAT, and Nginx’s UDP proxy, complete with configuration examples, workflow diagrams, and a comparison to traditional NAT behavior.
After adding an HTTPS certificate the site worked in browsers but curl requests were reset; through step‑by‑step network captures, buffer tweaks, cipher experiments and finally adding the missing ssl_session_cache directive, the author discovered the true cause and documented common Nginx error messages.
This tutorial walks through registering a Google AdSense account, passing site approval, and three practical integration methods—including inserting the AdSense script, using a meta tag, and configuring an ads.txt file with Nginx—followed by tips for ad placement on a personal blog.
This comprehensive guide explains the fundamentals of load balancing, compares L4 and L7 approaches, presents practical configuration examples for LVS, Nginx, and HAProxy, covers algorithms, health checks, session persistence, performance tuning, high‑availability designs, monitoring, and cloud‑native deployment in Kubernetes.
This guide shows how to containerize Java SpringBoot JAR or traditional WAR projects with Docker and Nginx, providing a unified, reproducible deployment pipeline that eliminates environment conflicts, simplifies port management, and enables seamless development‑to‑production transitions.
This guide explains how to set up a Raspberry Pi Zero W as a miniature Linux server, flash Raspbian Stretch Lite onto an SD card, enable headless SSH access, configure Wi‑Fi, install and run Nginx, and expose the service to the public internet using Ngrok, while also covering useful system optimizations.
This article explains the fundamental differences between Nginx and OpenResty, compares their features, performance, and programming models, and provides practical guidance on selecting the right tool for static serving, reverse‑proxying, or complex business‑logic workloads.
This guide explains how to unleash Nginx’s full concurrency potential by configuring worker_processes, worker_connections, system limits (ulimit and sysctl), and multi_accept, providing practical code snippets, verification commands, and a ready‑to‑use high‑traffic configuration example.
This article translates and expands Anton Putra's benchmark, detailing how to deploy Nginx and Envoy on AWS with Terraform and Ansible, run HTTP, HTTPS, and gRPC load tests using K6, measure CPU and latency with Prometheus, and compare the resulting throughput and stability of both proxies.
This article explains the thundering herd problem in Nginx when many workers compete for new connections and provides four practical solutions—accept_mutex, reuseport, multi_accept, and keepalive_timeout—along with configuration examples to improve high‑concurrency performance.
This guide explains how to dramatically increase Nginx's concurrent handling capacity by tuning worker processes, connections, keep‑alive settings, and high‑performance I/O options, providing concrete configuration examples and practical advice for high‑traffic deployments.
The WNMP one‑click package installs Nginx, PHP, and MariaDB with built‑in Mroonga, automatically optimizes kernel and network settings, configures WebDAV and SSL certificates, and provides a lightweight, reproducible web environment for small‑to‑medium sites on Debian‑based Linux or Windows 11 WSL.
Learn how to quickly set up a high‑performance, easy‑to‑deploy object storage solution by combining RustFS with Docker, covering prerequisites, Docker commands, optional Docker‑Compose configuration, Nginx reverse‑proxy setup, security hardening, testing, and production‑grade recommendations for backend developers and ops teams.
Learn how to configure Nginx for reliable server‑sent events and WebSocket traffic in production, covering protocol basics, full‑stack Nginx templates, HTTPS/WSS support, Kubernetes Ingress settings, troubleshooting tips, and ready‑to‑use Node.js examples for both SSE and WebSocket.
This guide explains how to maximize Nginx concurrency by configuring four key parameters—worker_processes, worker_connections, keepalive_timeout, and keepalive_requests—plus three I/O optimizations (sendfile, tcp_nopush, tcp_nodelay), and discusses related OS tuning for real‑world performance in production.
This article walks through a real‑world 502 outage, explains why the error is rarely a simple gateway failure, shows how to use enhanced Nginx upstream logs and automated scripts to pinpoint timeouts, misconfigurations, and database bottlenecks, and provides concrete tuning, monitoring, and self‑healing measures to stop the problem from recurring.
This article details a zero‑intrusion solution for synchronizing version numbers across multiple micro‑frontend environments using a lightweight frontend poller, static version files, Nginx cache control, and Ant Design Vue modals, enabling testers to see updates within 30 seconds without backend changes.
This article explains a flash‑sale system architecture from seven dimensions—including Nginx + CDN, routing with Redis, MQ clustering, business logic, read‑write‑separated databases, security controls, and page‑level optimizations—while providing concrete Nginx configs, Redis lock strategies, and database transaction tips to handle massive concurrent requests.
This article explains how to design a high‑concurrency ticket‑spike service that can handle millions of requests by using multi‑layer load balancing, Nginx weighted round‑robin, local stock caching, and atomic Redis operations, complete with Go code examples and performance testing.
This guide walks backend engineers through configuring Nginx for reverse proxy, load balancing, static‑resource handling, rate limiting with IP blacklists, and HTTPS encryption, providing ready‑to‑use code snippets and practical deployment steps to keep services stable and secure.
This guide shows how to automatically download the latest APNIC IP allocation list, generate Nginx allow rules for Chinese IP ranges, configure the server to permit only those addresses, and set up daily updates, providing a free, low‑overhead way to block foreign traffic.
This guide explains the exact prerequisites, anti‑patterns, system‑level tuning, Nginx configuration template, performance testing, monitoring, and rollback procedures required to reliably handle over one million concurrent connections on modern Linux servers.
Learn how to protect your web application from brute‑force login attacks by configuring Nginx rate limiting, with step‑by‑step instructions, example configurations, testing methods, custom error pages, and best‑practice tips such as IP whitelisting, HTTPS enforcement, and complementary security measures.
This article provides interview‑ready, step‑by‑step explanations of how Nginx works with Tomcat, the benefits of static‑dynamic separation, essential Nginx modules and load‑balancing algorithms, plus detailed MySQL master‑slave replication, failover, backup strategies, and related database concepts.
This guide explains how to tune Nginx for maximum performance by leveraging multi‑core CPUs, increasing concurrent connections, enabling zero‑copy file transfer, and optimizing keep‑alive settings, with concrete configuration examples and practical recommendations.
Learn how Nginx’s powerful caching mechanism can slash response times by up to tenfold, reduce backend load, and increase throughput, with detailed explanations of the caching workflow, essential configuration directives, micro‑cache tricks, and FastCGI caching examples for high‑traffic services.
This guide walks backend engineers through six real‑world Nginx configurations—reverse proxy and load balancing, static asset handling, rate limiting with IP black/white lists, HTTPS encryption, and step‑by‑step deployment—showing how to secure, accelerate, and stabilize services.
This guide provides a comprehensive collection of over twenty Nginx performance tuning methods, covering worker processes, CPU affinity, file descriptor limits, event models, gzip compression, caching, security, and system kernel tweaks to maximize web server efficiency.
After adding an HTTPS certificate to an Nginx site, browsers load the page fine but curl requests are reset; this article walks through network tests, configuration tweaks, packet captures, and the eventual discovery that enabling ssl_session_cache resolves the issue.
This comprehensive Nginx course covers everything from introductory concepts, installation, and configuration syntax to advanced topics like load balancing, security, performance tuning, Lua scripting, gRPC integration, and smooth upgrade strategies, providing practical scenario demos throughout.
This guide explains how to design a high‑availability architecture using Keepalived's VRRP‑based active‑passive failover, covering technical features, applicable scenarios, environment requirements, step‑by‑step installation and configuration for services like Nginx, MySQL and Redis, plus best practices, troubleshooting, monitoring and backup strategies.
This article explains the roles of PHP-FPM and Nginx, illustrates forward and reverse proxy concepts, details the FastCGI communication workflow, and provides step‑by‑step configuration examples for TCP and Unix sockets, including fastcgi_pass and fastcgi_params settings.
This guide walks backend engineers through Nginx fundamentals, showing how to configure reverse proxy, load balancing, static file handling, rate limiting, IP black‑/whitelisting, and HTTPS encryption, plus step‑by‑step deployment commands to keep services stable and secure.
After adding an HTTPS certificate to an Nginx server, browsers load the site fine but curl requests are reset; the article walks through network checks, cipher and buffer tweaks, a certificate swap, and ultimately shows that configuring the ssl_session_cache directive resolves the reset issue.
This guide walks through installing Nginx on two CentOS 7 virtual machines, configuring keepalived for VRRP‑based high availability, creating a virtual IP, and demonstrating failover scenarios to ensure continuous web service availability in production environments.
This article consolidates practical solutions for configuring Nginx to serve high‑performance static websites, covering cache control, gzip compression, cross‑origin resource sharing, and anti‑hotlinking techniques, complete with code examples and detailed explanations of underlying principles.
Learn how to achieve zero‑downtime Nginx log rotation using Logrotate, covering prerequisites, environment matrix, step‑by‑step configuration, compression strategies, advanced slicing, automated cleanup, monitoring, performance tuning, remote archiving, security hardening, and troubleshooting to ensure continuous logging without service interruption.
This guide explains the concept of Nginx static‑dynamic separation, shows how to configure static resource caching and dynamic request routing with upstream groups, and outlines a phased migration plan to improve performance and scalability of web services.
This guide explains how Nginx implements both client‑side (browser) and server‑side (proxy) caching, details strong and conditional caching mechanisms, and provides practical configuration examples and code snippets to optimize cache behavior and improve web performance.
This article explains the concept of Nginx static‑dynamic separation, describes three deployment patterns—mixed, fully separated, and CDN‑backed architectures—illustrates how static assets are served directly by Nginx to reduce backend load, and highlights performance benefits such as lower latency, higher throughput, and easier scaling.
This guide walks you through a practical 10‑minute workflow to optimize Nginx reverse‑proxy timeouts, configure upstream connection pools, tune Linux kernel parameters, verify improvements with load testing, set up monitoring and alerts, and ensure secure, reliable roll‑back procedures.
This article explains how to configure Nginx for high‑performance static sites by setting up effective browser caching, enabling gzip compression, handling CORS headers, and preventing hotlinking, complete with code examples, header details, and step‑by‑step principles.
This guide walks you through securing an Nginx gateway by hiding its version, blocking access to sensitive files and directories, preventing Host header attacks, adding essential security response headers, and providing a complete configuration template with verification steps for enterprise‑grade protection.
This guide systematically outlines the typical Nginx error codes, missing client IP, WebSocket proxy failures, load‑balancing issues, static file problems, large upload limits, SSL/TLS errors, cache misses, and rate‑limiting, providing root‑cause analysis, step‑by‑step checks, configuration fixes and useful command‑line tools.
This guide explains how to use the Acme-Companion container alongside nginx‑proxy to automatically obtain, renew, and apply free Let’s Encrypt certificates for Dockerized web services, covering core concepts, benefits, feature highlights, and a detailed installation workflow.
This article explains why the HTTP Host header is unsafe, demonstrates how attackers can hijack password‑reset links or launch SSRF by forging it, and provides three practical Nginx configuration methods to strictly validate Host values and block malicious requests.
This guide explains how to configure Nginx access and error logs, customize log formats with log_format, and improve performance using open_log_file_cache, covering syntax, scope, and practical examples for effective server logging.
This guide shows how to use Nginx configuration to serve WeChat verification files directly, eliminating the need for manual file uploads and enabling a more secure, automated deployment for business, server, or JS security domains.
This guide walks through step‑by‑step Nginx high‑concurrency tuning—covering Linux kernel network parameters, system limits, worker process settings, connection reuse, HTTP/2, gzip compression, benchmarking, and monitoring—enabling single‑node throughput of over one million packets per second with sub‑50 ms P99 latency.
This step‑by‑step guide shows how to set up a three‑node Nginx reverse‑proxy cluster with Keepalived for VIP failover, covering prerequisites, installation, configuration, health‑check scripts, monitoring, performance tuning, security hardening, troubleshooting, and rollback procedures.
This comprehensive guide explains why modern web services need rate limiting and anti‑crawler protection, compares token‑bucket and leaky‑bucket algorithms, and provides step‑by‑step Nginx configurations for IP, URI, and geographic throttling, advanced user‑agent filtering, JavaScript challenges, real‑time monitoring, performance tuning, and troubleshooting.
This article explains why Nginx caching is essential for high‑traffic sites, describes the caching mechanism, and provides a step‑by‑step configuration—including key directives and performance‑boosting tips—to dramatically reduce backend load and latency.
This guide details enterprise‑grade Nginx optimization techniques, covering worker process tuning, event model settings, network and buffer adjustments, compression, SSL/TLS hardening, load balancing, caching strategies, monitoring, system‑level tweaks, and troubleshooting steps to dramatically increase request throughput and stability.
This comprehensive guide walks you through enterprise‑grade Nginx tuning, covering worker process settings, event model tweaks, memory and buffer adjustments, compression, SSL/TLS hardening, load‑balancing, caching strategies, monitoring, system‑level kernel tweaks, and practical troubleshooting steps to dramatically increase request throughput.
This guide explains three practical ways to achieve dynamic IP blocking in Nginx—using Fail2ban, Lua with Redis, and Nginx's built‑in limit modules—detailing configuration steps, code examples, advantages, drawbacks, and best‑practice recommendations for various deployment scenarios.
This article outlines the key building blocks of a microservice architecture—including Nginx as the traffic entry, Spring Cloud Gateway, service registration, Redis caching, MySQL persistence, Elasticsearch, message queues, ELK logging, distributed scheduling, and object storage—providing practical guidance on design choices and high‑availability setups.
This article examines seven hidden risks when implementing gray releases with Nginx and Lua—memory leaks, blocking operations, uneven hash distribution, hot‑update atomicity, cross‑data‑center latency, session‑stickiness conflicts, and monitoring blind spots—and provides concrete Lua code fixes, Nginx configurations, monitoring scripts, and best‑practice recommendations to ensure reliable, performant deployments.
This comprehensive guide walks you through Nginx fundamentals, installation on CentOS, core configuration directives, reverse proxy and load‑balancing setups, caching, HTTPS, CORS, gzip compression, and the internal architecture, empowering front‑end developers to become true programmers.
This article explains the Nginx master‑slave architecture, how a virtual IP is shared between a primary and backup server using Keepalived and VRRP, and why this simple failover design provides high availability for web services with minimal resources.
This article explains how Nginx’s caching features can dramatically accelerate web services, detailing the cache workflow, control headers, and four practical configuration patterns—including static asset caching, reverse-proxy caching, sub-second caching, and FastCGI caching—complete with code examples and diagrams.
This article provides a comprehensive, step‑by‑step checklist for diagnosing and resolving Nginx 502 Bad Gateway errors, covering backend service verification, configuration checks, log analysis, resource monitoring, network troubleshooting, special scenarios, and long‑term preventive measures.
Learn how to transform Nginx into a high‑concurrency powerhouse by addressing common 502/504 errors, optimizing worker processes, event and HTTP settings, fine‑tuning OS kernel parameters, implementing caching, rate‑limiting, load‑balancing, and monitoring scripts, with practical code examples and checklists.
This comprehensive guide walks operations engineers through advanced Nginx configuration and performance‑tuning techniques—including worker process settings, event model tweaks, HTTP module optimizations, caching strategies, load‑balancing, security hardening, monitoring, and testing—to dramatically improve web service throughput and stability.
This guide explains the concepts, response headers, Nginx configuration examples, behaviors, and best‑practice strategies for both strong (max‑age) and negotiated (ETag/Last‑Modified) caching, helping you improve web performance and significantly reduce server load.
This article explains forward and reverse proxy fundamentals, illustrates how Nginx reverse proxy works for large websites, and provides a practical configuration example that shows request routing and load‑balancing to backend servers.
This article presents a step‑by‑step, production‑tested guide for tuning Nginx from 100 k QPS to over a million requests per second, covering worker process settings, TCP tweaks, kernel parameters, caching, compression, SSL optimization, monitoring, and extreme‑case techniques such as DPDK and LuaJIT.
This guide walks through ten practical Nginx optimization techniques—from worker process tuning and connection handling to gzip compression, static file caching, load‑balancing, security hardening, logging, memory tuning, HTTP/2/SSL tweaks, monitoring scripts, and common pitfalls—helping you dramatically boost throughput, reduce latency, and improve stability in high‑traffic environments.
This article explains why Nginx has become the most popular web server, outlines its high‑performance architecture, details master and worker process responsibilities, and provides practical guidance on core and advanced configuration, load balancing, access control, and reverse‑proxy deployment.
An urgent 3 AM outage on an e‑commerce site triggered a CPU spike and massive latency, but by separating static and dynamic traffic with Nginx, adding smart caching and load‑balancing, the author restored stability, cut page load time by 75 % and dramatically reduced server load.
This guide walks through essential Nginx optimizations—including hiding the version number, changing the run‑user and group, configuring cache expiry, setting up log rotation, adjusting connection timeouts, scaling worker processes, enabling gzip compression, applying image filtering, preventing hotlinking, and an overview of common modules—providing code snippets and configuration examples for each step.
This article explains the characteristics of flash‑sale traffic and presents a comprehensive backend architecture—including Nginx static separation, Redis caching and locking, MQ buffering, rate‑limiting, async order processing, database sharding, captcha protection, and page optimization—to handle massive concurrent requests while ensuring security and reliability.
This guide explains how Nginx can separate static resources from dynamic content, outlines the underlying principle, and provides a complete configuration example that improves response time and concurrency by serving files directly and proxying application requests to backend servers.
This article explains the fundamentals of concurrency, distinguishes connections from requests, shows how to calculate and tune maximum concurrent connections for Nginx and HAProxy, covers system resource limits, demonstrates real‑time monitoring with stub_status, and provides practical load‑testing and Prometheus monitoring guidance.
This guide walks through constructing a high‑performance, cost‑effective enterprise‑level Web Application Firewall using OpenResty, covering why OpenResty is ideal, core architecture, modules for request lifecycle management, IP control, rate limiting, SQL injection and XSS detection, intelligent CC protection, monitoring, performance tuning, deployment tips, real‑world case study, and future enhancements.
This article walks through the step‑by‑step process of diagnosing common CORS errors when a front‑end on localhost:8080 accesses a back‑end on localhost:59200, and shows how to resolve them by adding the correct Nginx response headers and handling preflight OPTIONS requests.
Learn how to control access in Nginx by configuring IP-based allow/deny rules, using external whitelist files, leveraging the ngx_http_geo_module for IP and country restrictions, and setting up GeoIP modules with sample configurations and commands for both Linux distributions.
