Blog posts by Owen Garrett
Sr. Director, Product Management
Blog posts written by Owen Garrett(51)
Amazon에서 적합한 로드 밸런서 선택하기: AWS Application Load Balancer와 NGINX Plus 비교
AWS Application Load Balancer(ALB)를 레이어 7 역방향 프록시 및 로드 밸런서로서 NGINX Open Source 및 NGINX Plus와 비교합니다. ALB는 2016년 출시 당시보다 더 많은 기능을 제공하지만, NGINX와 NGINX Plus가 여전히 더 풍부한 기능과 훨씬 더 예측 가능한 요금 체계를 제공한다는 결론을 내렸습...
By Owen GarrettAmazonで最適なロードバランサーを選ぶ：AWS Application Load BalancerとNGINX Plusの比較
レイヤー7のリバースプロキシおよびロードバランサーとして、AWS Application Load Balancer（ALB）とNGINX Open Source、NGINX Plusを比較します。ALBは2016年の登場時よりも機能が増えていますが、NGINXとNGINX Plusは依然としてより多くの機能を提供し、料金もはるかに予測しやすいという結論に至りました。
By Owen Garrett如何在Amazon上选择合适的负载均衡器：AWS Application Load Balancer与NGINX Plus对比
我们将AWS Application Load Balancer（ALB）与作为第7层反向代理和负载均衡器的NGINX Open Source及NGINX Plus进行比较。与2016年首次推出时相比，ALB的功能更加丰富，但我们的结论是，NGINX Open Source和NGINX Plus仍能提供更多功能，定价也更具可预测性。
By Owen GarrettChoosing the Right Load Balancer on Amazon: AWS Application Load Balancer vs. NGINX Plus
We compare AWS Application Load Balancer (ALB) with NGINX Open Source and NGINX Plus as a Layer 7 reverse proxy and load balancer. ALB has more features than at its debut in 2016, but we conclude that...
By Owen GarrettAddressing the PHP-FPM Vulnerability (CVE-2019-11043) with NGINX
We provide guidance on using NGINX to mitigate the recently discovered vulnerability in PHP-FPM (CVE-2019-11043). The vulnerability is triggered when the PATH_INFO variable passed to PHP-FPM with an i...
By Owen Garrett
Sampling Requests with NGINX Conditional Logging
With NGINX conditional logging, you can log a subset of requests which have defined characteristics. This blog uses it to solve a real-world customer use case: the need to reject obsolete and insecure...
By Owen Garrett
Protecting SSL Private Keys in NGINX with HashiCorp Vault
The second post of our series about protecting SSL private keys shows how to set up HashiCorp Vault to store the passwords that protect private keys, and to configure NGINX to retrieve the passwords. ...
By Owen Garrett
NGINX를 활용한 SSL 개인 키의 안전한 배포
NGINX가 HTTPS 트래픽을 처리하도록 구성할 때 SSL 개인 키를 보호하는 세 가지 방법을 보안 수준이 높아지는 순서대로 설명합니다. 즉, 루트 사용자에게만 읽기 권한을 부여하는 방법, 별도로 저장된 비밀번호로 키를 암호화하는 방법, 중앙 저장소에서 비밀번호를 배포하는 방법입니다.
By Owen GarrettSecure Distribution of SSL Private Keys with NGINX
We describe three progressively more secure ways to protect SSL private keys when configuring NGINX to handle HTTPS traffic: allowing read access only to the root user, encrypting keys with separately...
By Owen Garrett
NGINX and the "Power of Two Choices" Load-Balancing Algorithm
The Random with Two Choices load-balancing algorithm is NGINX's implementation of the "power of two choices" method. This biased random algorithm has been shown to be effective at balancing loads when...
By Owen Garrett
Using NGINX and NGINX Plus with SELinux
When Security-Enhanced Linux (SELinux) is enabled for Red Hat Enterprise Linux (RHEL) and related distros, its default settings prevent NGINX and NGINX Plus from performing some operations. This artic...
By Owen Garrett
Introducing HTTP/2 Server Push with NGINX 1.13.9
HTTP/2 Server Push is new in NGINX 1.13.9. Learn how to use it to accelerate your website performance in this blog post.
By Owen GarrettAnnouncing NGINX Plus R12
NGINX Plus Release 12 includes configuration sharing, production-ready nginScript, and enhancements to statistics reporting, caching, and health checks.
By Owen GarrettShared Caches with NGINX Plus Cache Clusters, Part 2
Make your cache highly available and minimize the load on origin servers with primary and secondary NGINX or NGINX Plus web cache servers.
By Owen GarrettShared Caches with NGINX Plus Cache Clusters, Part 1
Maximize the capacity of your web cache by sharding the cache across multiple NGINX or NGINX Plus web cache servers. Learn how in this post.
By Owen GarrettAnnouncing NGINX Plus R11
NGINX Plus Release 11 includes binary compatibility for dynamic modules, enhancements to TCP/UDP load balancing and the NGINX JavaScript module, the new GeoIP2 module, and more.
By Owen Garrett
Compiling Third-Party Dynamic Modules for NGINX and NGINX Plus
Compile dynamic modules in NGINX Plus R11 and later to take advantage of the broad range of additional functionality contributed by NGINX community members.
By Owen Garrett
IP Transparency and Direct Server Return with NGINX and NGINX Plus as Transparent Proxy
Improve TCP and UDP performance by configuring NGINX and NGINX Plus as a transparent proxy for IP Transparency and Direct Server Return.
By Owen Garrett将NGINX和NGINX Plus用作透明代理，实现IP透明传递和直接服务器返回
将NGINX和NGINX Plus配置为透明代理，以实现IP透明传输和直接服务器返回，从而提升TCP和UDP性能。
By Owen Garrett
NGINX 및 NGINX Plus를 활용한 고성능 캐싱
NGINX가 콘텐츠 캐싱 및 성능 측면에서 어떻게 작동하는지 설명하고, NGINX의 콘텐츠 캐싱 방식을 제어하는 데 유용한 몇 가지 팁을 알려드리겠습니다.
By Owen GarrettNGINXとNGINX Plusによる高性能キャッシュ
コンテンツキャッシュとパフォーマンスに関するNGINXの仕組みを解説し、NGINXによるコンテンツのキャッシュ方法を制御するためのヒントをご紹介します。
By Owen Garrett使用NGINX和NGINX Plus实现高性能缓存
我将介绍NGINX在内容缓存和性能方面的工作原理，并分享一些控制NGINX内容缓存方式的技巧。
By Owen GarrettHigh‑Performance Caching with NGINX and NGINX Plus
I'll talk about how NGINX functions with respect to content caching and performance, and I'll give you some tips for control over how NGINX caches content.
By Owen GarrettAnnouncing NGINX Plus R10
NGINX Plus Release 10 includes NGINX ModSecurity WAF and support for JSON Web Token, dual-stack RSA-ECC certificates, transparent proxy, nginScript, and more.
By Owen GarrettNGINX를 사용한 HTTPoxy 취약점 완화
NGINX/NGINX Plus를 사용하여 CGI 및 FastCGI와 유사한 애플리케이션 인터페이스를 공격하는 HTTPoxy 취약점이 서버에서 악용되지 않도록 방지하세요.
By Owen GarrettNGINXによるHTTPoxy脆弱性の緩和
CGIやFastCGIに類似したアプリケーションインターフェースを攻撃するHTTPoxy脆弱性がサーバーで悪用されるのを防ぐために、NGINX/NGINX Plusを使用します。
By Owen Garrett使用NGINX缓解HTTPoxy漏洞
使用NGINX/NGINX Plus防止攻击CGI和类FastCGI应用接口的HTTPoxy漏洞在服务器上遭到利用。
By Owen GarrettMitigating the HTTPoxy Vulnerability with NGINX
Use NGINX/NGINX Plus to prevent the HTTPoxy vulnerability, which attacks CGI and FastCGI-like application interfaces, from being exploited on your servers.
By Owen GarrettAnnouncing NGINX Plus R9
NGINX Plus Release 9 includes dynamic modules, UDP load balancing, support for service discovery with DNS SRV records, & new "all you can eat" App Pricing
By Owen GarrettNGINX Plus R8 正式发布
NGINX Plus Release 8新增OAuth 2.0处理支持、可用于生产环境的HTTP/2、上游服务器动态重新配置的持久化功能等。
By Owen Garrett