What are namespaces and cgroups, and how do they work?
Posted on May 16, 2022, Level intermediate Resource Length medium
Recently, I have been investigating NGINX Unit, our open source multi-language application server. As part of my investigation, I noticed that Unit supports both namespaces and cgroups, which enables process isolation. In this blog, we'll look at these two major Linux technologies, which also underlie containers. By Scott van Kalken of F5.
Increasing the security bar in Ingress-NGINX v1.2.0
Posted on May 2, 2022, Level intermediate Resource Length medium
The Ingress may be one of the most targeted components of Kubernetes. An Ingress typically defines an HTTP reverse proxy, exposed to the Internet, containing multiple websites, and with some privileged access to Kubernetes API (such as to read Secrets relating to TLS certificates and their private keys). By Ricardo Katz (VMware), James Strong (Chainguard).
NGINX tutorial: Reduce Kubernetes latency with autoscaling
Posted on March 20, 2022, Level beginner Resource Length medium
Your organization built an app in Kubernetes and now it's getting popular! You went from just a few visitors to hundreds (and sometimes thousands) per day. But there's a problem... he increased traffic is hitting a bottleneck, causing latency and timeouts for your customers. If you can't improve the experience, people will stop using the app. By Daniele Polencic of learnk8s.
Comparing the best web servers: Caddy, Apache, and Nginx
Posted on October 23, 2021, Level intermediate Resource Length medium
A web server is a piece of software that accepts a network request from a user agent, typically a web browser, and returns either the appropriate response for the request or an error message. Two dominant solutions for HTTP servers today are Apache and Nginx. However, a new player in the space, Caddy Web Server, is gaining traction for its ease of use. By Ayooluwa Isaiah.
How to create a self-signed SSL certificate for Nginx in Ubuntu 20.04
Posted on September 24, 2021, Level intermediate Resource Length long
TLS, or transport layer security, and its predecessor SSL, which stands for secure sockets layer, are web protocols used to protect and encrypt traffic over a computer network. By Brian Boucheron and Jeanelle Horcasitas.
Fortifying APIs with advanced security
Posted on August 25, 2021, Level intermediate Resource Length long
In F5's The State of Application Strategy in 2021 report, 58% of respondents said they are building a layer of APIs to modernize applications. Increasingly, though, breaches are taking the form of attacks on APIs. By Karthik Krishnaswamy.
Deploy Fedora CoreOS servers with Terraform
Posted on December 29, 2020, Level beginner Resource Length medium
Fedora CoreOS is a lightweight, secure operating system optimized for running containerized workloads. A YAML document is all you need to describe the workload you'd like to run on a Fedora CoreOS server. By Nathan Smith @fedoramagazine.
Here's how to use Istio with other Nginx ingress proxies
Posted on August 12, 2020, Level intermediate Resource Length medium
It's been a common problem that we've been asked to address, and something that pops up frequently. Can I use Istio with other ingress proxies? In a word? Yes. Written by Tetrate.
How to scale and secure Django application with Docker, Nginx, and Let's Encrypt
Posted on August 7, 2020, Level intermediate Resource Length short
In cloud-based environments, there are multiple ways to scale and secure a Django application. By scaling horizontally, and running several copies of your app, you can build a more fault-tolerant and highly-available system, while also increasing its throughput so that requests can be processed simultaneously. By Hanif Jetha.
Getting started with the Ansible collection for NGINX controller
Posted on May 28, 2020, Level intermediate Resource Length long
Recently, NGINX announced the release of the Ansible collection for NGINX Controller. The collection contains a set of Ansible Roles that make it easy to incorporate NGINX Controller into your workflows. You can automate routine tasks such as generating ephemeral API tokens, managing certificate lifecycles, and configuring Controller objects (Gateways, Applications, and Components). By Brian Ehlert.
Tags nginx ansible programming devops
NGINX structural enhancements for HTTP/2 performance
Posted on May 27, 2019, Level advanced Resource Length medium
The blog post from pen of Nick Jones published on cloudflare.com. It is about experience of his team which deals with features related to: TCP, QUIC, TLS and Secure Certificate management, HTTP/1 and HTTP/2. They were responsible for implementing the Enhanced HTTP/2 Prioritization product.
Kubernetes ingress controller setup using KOP and Nginx-Ingress
Posted on January 26, 2019, Level beginner Resource Length short
A tutorial by Lokesh Jawane explaining how to set up Kubernetes ingress controller using kops (Kubernetes Operations) & Nginx-Ingress. Kops automates the provisioning of Kubernetes clusters in AWS and GCE. Authors like to think of kops as kubectl for clusters.