nginx – 페이지 17 – 지락문화예술공작단

F5 NGINX ModSecurity WAF Is Transitioning to End-of-Life

2022-05-11 KENNETH 0

F5 NGINX ModSecurity WAF Is Transitioning to End-of-Life For the past five years, F5 NGINX has been pleased to provide our customers with the NGINX ModSecurity WAF module for NGINX Plus with support against standard classes of vulnerabilities using the OWASP ModSecurity Core Rule Set (CRS). However, due to recent changes to third‑party support for ModSecurity WAF, we regret that we are transitioning NGINX ModSecurity WAF to End-of-Life (EoL) effective March 31, 2024. Our decision is due in part to the recent announcement from Trustwave, the organization that has been maintaining ModSecurity, that as of July 1, 2024, it will: Stop supporting the ModSecurity open source code and WAF Return responsibility for maintaining the ModSecurity code to the open source community No longer provide Commercial Rules Additionally, the OWASP ModSecurity Core Rule Set (CRS) project has announced that it is switching its focus [ more… ]

Announcing Version 1.0.0 of the NGINX Modern Apps Reference Architecture

2022-04-29 KENNETH 0

Announcing Version 1.0.0 of the NGINX Modern Apps Reference Architecture We were upfront with our design goals when we unveiled the NGINX Modern Applications Reference Architecture (MARA) at Sprint 2.0 in August of 2021. We wanted to create an example of a modern application architecture running in Kubernetes and designed to support security, scalability, reliability, monitoring, and introspection. This project needed to be deployable across different infrastructures with a “plug and play” approach to combining functional components without time‑consuming integration efforts. In the months since Sprint, we have been moving forward with our roadmap. Like any project, we have had our share of success and failure and have worked our successes into MARA while keeping a growing list of lessons learned. We hope that we may keep others from hitting the same problems by documenting these issues and designing with these lessons in [ more… ]

MARA: Now Running on a Workstation Near You

2022-04-23 KENNETH 0

MARA: Now Running on a Workstation Near You When we began working on the NGINX Modern Apps Reference Architecture (MARA) project, we chose AWS as our IaaS provider because we were already familiar with the platform and we could use our departmental budget to pay for it. Not everyone has the same the same experience or budget, of course, and many of you have asked us to provide options for running MARA locally – in a lab‑based environment or even on a workstation – with Kubernetes distributions such as K3s, Canonical MicroK8s, and minikube. We heard you and today we’re pleased to announce that we have tested MARA on MicroK8s and are providing instructions so you can deploy it yourself! Why did we choose MicroK8s for our testing? Because it provides the DNS, storage, and egress capabilities that MARA needs, in an easy-to-deploy [ more… ]

5 Things to Know About NGINX Kubernetes Gateway

2022-04-13 KENNETH 0

5 Things to Know About NGINX Kubernetes Gateway table.nginx-blog, table.nginx-blog th, table.nginx-blog td { border: 2px solid black; border-collapse: collapse; } table.nginx-blog { width: 100%; } table.nginx-blog th { background-color: #d3d3d3; align: left; padding-left: 5px; padding-right: 5px; padding-bottom: 2px; padding-top: 2px; line-height: 120%; } table.nginx-blog td { padding-left: 5px; padding-right: 5px; padding-bottom: 2px; padding-top: 5px; line-height: 120%; } table.nginx-blog td.center { text-align: center; padding-bottom: 2px; padding-top: 5px; line-height: 120%; } Having worked the past several years to help you succeed on your Kubernetes journey, F5 NGINX has reached another milestone – we’ve released the alpha version of the newest addition to the NGINX family: F5 NGINX Kubernetes Gateway! NGINX Kubernetes Gateway is a controller that implements the Kubernetes Gateway API specification, which evolved from the Kubernetes Ingress API specification. Gateway API is an open source project managed by the Kubernetes Network Special Interest [ more… ]

Addressing Security Weaknesses in the NGINX LDAP Reference Implementation

2022-04-12 KENNETH 0

Addressing Security Weaknesses in the NGINX LDAP Reference Implementation On 9 April 2022, security vulnerabilities in the NGINX LDAP reference implementation were publicly shared. We have determined that only the reference implementation is affected. NGINX Open Source and NGINX Plus are not themselves affected, and no corrective action is necessary if you do not use the reference implementation. The NGINX LDAP reference implementation uses LDAP to authenticate users of applications being proxied by NGINX. It is published as a Python daemon and related NGINX configuration at https://github.com/nginxinc/nginx-ldap-auth, and its purpose and configuration are described in detail on our blog. Deployments of the LDAP reference implementation are affected by the vulnerabilities if any of the following conditions apply. Below we further discuss the conditions and how to mitigate them: Command-line parameters are used to configure the Python daemon There are unused, optional [ more… ]