book

NGINX Cookbook

by Derek DeJonghe

January 2019

Beginner

173 pages

2h 59m

English

O'Reilly Media, Inc.

Start your free trial

Related skills

NGINX

IntroductionInstalling on Debian/UbuntuInstalling on RedHat/CentOSInstalling NGINX PlusVerifying Your InstallationKey Files, Commands, and DirectoriesServing Static ContentGraceful Reload
IntroductionHTTP Load BalancingTCP Load BalancingUDP Load BalancingLoad-Balancing MethodsSticky CookieSticky LearnSticky RoutingConnection DrainingPassive Health ChecksActive Health ChecksSlow StartTCP Health Checks
IntroductionA/B TestingProblemSolutionDiscussionAlso SeeUsing the GeoIP Module and DatabaseProblemSolutionDiscussionAlso SeeRestricting Access Based on CountryProblemSolutionDiscussionFinding the Original ClientProblemSolutionDiscussionLimiting ConnectionsProblemSolutionDiscussionLimiting RateProblemSolutionDiscussionLimiting BandwidthProblemSolutionDiscussion
IntroductionCaching ZonesCaching Hash KeysCache BypassCache PerformancePurgingCache Slicing
IntroductionNGINX Plus APIKey-Value StoreProblemSolutionDiscussionAlso SeeInstalling with PuppetProblemSolutionDiscussionAlso SeeInstalling with ChefProblemSolutionDiscussionAlso SeeInstalling with AnsibleProblemSolutionDiscussionAlso SeeInstalling with SaltStackProblemSolutionDiscussionAlso SeeAutomating Configurations with Consul TemplatingProblemSolutionDiscussionAlso See
IntroductionHTTP Basic AuthenticationProblemSolutionDiscussionAuthentication SubrequestsProblemSolutionDiscussionValidating JWTsProblemSolutionDiscussionAlso SeeCreating JSON Web KeysProblemSolutionDiscussionAlso SeeAuthenticate Users via Existing OpenID Connect SSOProblemSolutionDiscussionAlso SeeObtaining the JSON Web Key from GoogleProblemSolutionDiscussionAlso See
IntroductionAccess Based on IP AddressProblemSolutionDiscussionAllowing Cross-Origin Resource SharingProblemSolutionDiscussionClient-Side EncryptionProblemSolutionDiscussionAlso SeeUpstream EncryptionProblemSolutionDiscussionSecuring a LocationProblemSolutionDiscussionGenerating a Secure Link with a SecretProblemSolutionDiscussionSecuring a Location with an Expire DateProblemSolutionDiscussionGenerating an Expiring LinkProblemSolutionDiscussionHTTPS RedirectsProblemSolutionDiscussionRedirecting to HTTPS where SSL/TLS Is Terminated Before NGINXProblemSolutionDiscussionHTTP Strict Transport SecurityProblemSolutionDiscussionAlso SeeSatisfying Any Number of Security MethodsProblemSolutionDiscussionDynamic DDoS MitigationProblemSolutionDiscussion
IntroductionBasic ConfigurationProblemSolutionDiscussionAlso SeegRPCProblemSolutionDiscussionHTTP/2 Server PushProblemSolutionDiscussion

IntroductionServing MP4 and FLVStreaming with HLSStreaming with HDSBandwidth Limits
IntroductionAuto-Provisioning on AWSProblemSolutionDiscussionRouting to NGINX Nodes Without an AWS ELBProblemSolutionDiscussionAlso SeeThe NLB SandwichProblemSolutionDiscussionDeploying from the AWS MarketplaceProblemSolutionDiscussionCreating an NGINX Virtual Machine Image on AzureProblemSolutionDiscussionAlso SeeLoad Balancing Over NGINX Scale Sets on AzureProblemSolutionDiscussionDeploying Through the Azure MarketplaceProblemSolutionDiscussionDeploying to Google Compute EngineProblemSolutionDiscussionCreating a Google Compute ImageProblemSolutionDiscussionAlso SeeCreating a Google App Engine ProxyProblemSolutionDiscussion
IntroductionDNS SRV RecordsUsing the Official NGINX ImageProblemSolutionDiscussionAlso SeeCreating an NGINX DockerfileProblemSolutionDiscussionBuilding an NGINX Plus ImageProblemSolutionDiscussionAlso SeeUsing Environment Variables in NGINXProblemSolutionDiscussionKubernetes Ingress ControllerProblemSolutionDiscussionOpenShift RouterProblemSolutionDiscussion
IntroductionNGINX HA ModeLoad-Balancing Load Balancers with DNSLoad Balancing on EC2Configuration SynchronizationProblemSolutionDiscussionState Sharing with Zone SyncProblemSolutionDiscussion
IntroductionEnable NGINX Open Source Stub StatusProblemSolutionDiscussionEnabling the NGINX Plus Monitoring Dashboard Provided by NGINX PlusCollecting Metrics Using the NGINX Plus API
IntroductionConfiguring Access LogsProblemSolutionDiscussionConfiguring Error LogsProblemSolutionDiscussionForwarding to SyslogProblemSolutionDiscussionRequest TracingProblemSolutionDiscussion
IntroductionAutomating Tests with Load DriversProblemSolutionDiscussionKeeping Connections Open to ClientsProblemSolutionDiscussionKeeping Connections Open UpstreamProblemSolutionDiscussionBuffering ResponsesProblemSolutionDiscussionBuffering Access LogsProblemSolutionDiscussionOS TuningProblemSolutionDiscussion
IntroductionUsing Includes for Clean ConfigsProblemSolutionDiscussionDebugging ConfigsProblemSolutionDiscussionAlso SeeConclusion

Overview

NGINX is one of the most widely used web servers available today, in part because of its capabilities as a load balancer and reverse proxy server for HTTP and other network protocols. The 2019 edition of this popular cookbook provides more than 80 practical recipes to help you set up and use this open source server to solve problems in various use cases.

For professionals who understand modern web architectures, such as n-tier or microservice designs, and common web protocols, including TCP and HTTP, these recipes provide proven solutions for security, software load balancing, and monitoring and maintaining NGINX’s application delivery platform. You’ll also explore advanced features of both NGINX and NGINX Plus, the free and licensed versions of this server.

You’ll find recipes for:

High-performance load balancing with HTTP, TCP, and UDP
Traffic management and A/B testing
Managing programmability and automation with dynamic templating and the NGINX Plus API
Securing access through encrypted traffic, secure links, HTTP authentication subrequests, and more
Deploying NGINX to AWS, Azure, and Google cloud-computing services
Using Docker to deploy containers and microservices
Debugging and troubleshooting, performance tuning, and practical ops tips