Common Nginx misconfigurations - Blog Detectify
Common Nginx misconfigurations that leave your web server open to attack Nginx is the web server powering one-third of all websites in the world. Detectify Crowdsource has detected some common Nginx misconfigurations that, if left unchecked, leave your web site vulnerable to attack. Here’s how to find some of the most common misconfigurations before an attacker exploits them. UPDATE: Detectify Sec
Add io_uring support to nginx (Fixes #21) by CarterLi · Pull Request #22 · hakasenyang/openssl-patch
GitHub - SpiderLabs/ModSecurity: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides pro
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
Dynamic certificate internals with ngx_mruby #nagoyark03
Talk for Nagoya Ruby Kaigi 03 (http://regional.rubykaigi.org/nagoya03/) by OKUMURA Takahiro. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - [Links in the slides] mruby: https://github.com/mruby/mruby 200万 Webサイトを支える ロリポップ！と mruby: https://speakerdeck.com/harasou/200mo-websaitowozhi-eru-roripotupu-to-mruby haconiwa: https://gi
nginx separate regex for git-upload-pack and git-receive-pack
I have this location ~ ^.*user/repo\.git\/(HEAD|info/refs|objects/info/.*|git-upload-pack)${ //send to fastcgi_param SCRIPT_FILENAME /usr/bin/gitolite-shell; } This is working for clone. I have modified Gitolite so I can make public repos without key or http user/password. Now when I want to push info/refs get matched against this route and I can not move on to the next location that is responsibl
Nginxのリバースプロキシでバックエンドとhttp2通信する - ASnoKaze blog
以前書いたとおり、ApacheではリバースプロキシでバックエンドとHTTP2通信することができます。 asnokaze.hatenablog.com Nginxの場合は、開発者のメーリングリストでGoogleの人が書いてる「ngx_http_v2_upstream」パッチを利用することでバックエンド(upstream)とHTTP2通信することが出来るようになります。 パッチ [PATCH 01 of 14] Output chain: propagate last_buf flag to c->send_chain() [PATCH 02 of 14] Upstream keepalive: preserve c->data [PATCH 03 of 14] HTTP/2: add debug logging of control frames [PATCH 04 of 14] HTTP/
Development guide | nginx documentation
For general purposes, nginx code uses two integer types, ngx_int_t and ngx_uint_t, which are typedefs for intptr_t and uintptr_t respectively. Most functions in nginx return the following codes: NGX_OK — Operation succeeded. NGX_ERROR — Operation failed. NGX_AGAIN — Operation incomplete; call the function again. NGX_DECLINED — Operation rejected, for example, because it is disabled in the configur
IP Transparency and Direct Server Return with NGINX Plus
Analytics cookies are off for visitors from the UK or EEA unless they click Accept or submit a form on nginx.com. They’re on by default for everybody else. Follow the instructions here to deactivate analytics cookies. This deactivation will work even if you later click Accept or submit a form. Check this box so we and our advertising and social media partners can use cookies on nginx.com to better
Module ngx_http_upstream_module
Defines a group of servers. Servers can listen on different ports. In addition, servers listening on TCP and UNIX-domain sockets can be mixed. Example: upstream backend { server backend1.example.com weight=5; server 127.0.0.1:8080 max_fails=3 fail_timeout=30s; server unix:/tmp/backend3; server backup1.example.com backup; } By default, requests are distributed between the servers using a weighted r
Module ngx_stream_ssl_preread_module
The ngx_stream_ssl_preread_module module (1.11.5) allows extracting information from the ClientHello message without terminating SSL/TLS, for example, the server name requested through SNI or protocols advertised in ALPN. This module is not built by default, it should be enabled with the --with-stream_ssl_preread_module configuration parameter. Selecting an upstream based on server name: map $ssl_
OPM - OpenResty Package Manager
opm is the official OpenResty package manager, similar to Perl's CPAN and NodeJS's npm in rationale. We provide both the opm client-side command-line utility and the server-side application for the central package repository. Please read the opm documentation for more details. We already have 1193 successful uploads across 290 distinct package names from 146 contributors. Come on, OPM authors!
Protecting Netflix Viewing Privacy at Scale
On the Open Connect team at Netflix, we are always working to enhance the hardware and software in the purpose-built Open Connect Appliances (OCAs) that store and serve Netflix video content. As we mentioned in a recent company blog post, since the beginning of the Open Connect program we have significantly increased the efficiency of our OCAs — from delivering 8 Gbps of throughput from a single s
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
GitHub - chobits/ngx_http_proxy_connect_module: A forward proxy module for CONNECT request handling
GitHub - SimulatedGREG/nginx-cheatsheet: A quick reference to common server configurations from serving static files to using in congruency with Node.js applications.
GitHub - cloudflare/sslconfig: Cloudflare's Internet facing SSL configuration
GitHub - openresty/openresty-devel-utils: Utilities for nginx module development
GitHub - vozlt/nginx-module-vts: Nginx virtual host traffic status module
GitHub - nginx/unit: NGINX Unit - universal web app server - a lightweight and versatile open source server that simplifies the application stack by natively executing application code across eight different programming language runtimes.
GitHub - yandex/gixy: Nginx configuration static analyzer
GitHub - youzan/ngx_http_html_sanitize_module: It's a nginx http module to sanitize HTML5 with whitelisted elements, whitelisted attributes and whitelisted CSS property