Learn how to set up and configure Nginx and take it from there. If you’re into Nginx, you’re sure to find a lot of essential tutorials below.
HTTP/2 is the second major version HTTP protocol released in 2015. Since launch, around 11% of website support HTTP/2. It got many features like: HTTP Header Compression Push technologies Load page elements in parallel over a single TCP connection Binary protocol Reduce latency Demo by AKAMAI shows HTTP/2 is approximately two times faster than HTTP/1.1 Did…
Most of the CDN like Cloudflare, SUCURI, AKAMAI let you enable IPv6 from their edge network. However, if you are not using CDN that provides IPv6 and needs to enable your website, then here is how you can do it. IPv6 has a performance advantage over IPv4. It can help to decrease the page load…
Setting up a web application in the cloud is always fun and exciting. Recently, I launched Site Toolbox tool which is hosted in AWS behind Cloud Flare. I am using AWS application load balancer and Nginx as a web server. After making live, I went to see the access.log and noticed all requests were marked…
Speed up Node.js, Socket.io web application load time by leveraging Nginx to serve static files Node.js is an excellent JavaScript runtime environment, which you can use to serve entire web assets (static+dynamic) from it. If you are working on small, experimental project then probably it’s ok, however, if response time is concerned then you must…
Monitoring web server is essential to see what’s happening on your website. Lately, I was looking for some sort of solution and came across ngxtop which helps you to monitor various metrics including following. Current active request Total request counts summary Total request by status code (2xx, 3xx, 4xx, 5xx) Average byte sent Top remote…
If you were securing Nginx with Mod Security, then you would like to have OWASP core rule set (CRS) activated to protect from following threats. HTTP protocol violation protection Common web attacks Bots, crawlers, malicious activity protection Trojan protection Information leakage protection Cross Site Scripting attacks SQL injection attacks Do you agree? In my previous…
Nginx web server is used on more than 30% of website worldwide and growing. Considering the increase in online web threats, one the challenge for web engineer is to well aware of hardening and securing Nginx. Nginx is well-known for its performance and lightweight web server/proxy and used on many busiest sites. Pinterest.com Reddit.com WordPress.com Stackoverflow.com…
X-Content-Type-Options Header Implementation in Apache, Nginx, IBM HTTP Server & Shared Hosting Every resource served from a web server is associated with MIME type (also called content-type). There is a possibility to execute style sheet and steal content from another site through content type doesn’t match. You may prevent this vulnerability in Internet Explorer or…
Nginx security best practices. Nginx is the fastest growing web server in the industry, and currently, it holds number three position in market share. It was initially released in 2004, and since then it has earned an excellent reputation and used in top million busiest sites. There is a reason for that – Nginx is…
Having default product error page from Apache HTTP or Nginx doesn’t look good and it reveals version information, which leads to information leakage vulnerability. If you haven’t’ implemented custom error page for your web application then you must consider doing it for many reasons including below. Branding – Show customized message with your brand logo…
