Lessons from the 2021 NGINX Survey: Your Kubernetes Adoption Journey

2022-02-25 KENNETH 0

Lessons from the 2021 NGINX Survey: Your Kubernetes Adoption Journey As Kubernetes adoption has continued to increase, at NGINX we are closely tracking the Kubernetes and cloud‑native journeys of our community. In the 2021 NGINX Community Survey, we asked you a number of questions about where you are in that journey, what you are seeing and learning along the way, and what concerns you the most about this nascent technology. Kubernetes Adoption by The Numbers Let’s start with some adoption numbers. Of our respondents: 35% are using Kubernetes in production, including hybrid environments. 35% are actively exploring Kubernetes. 30% haven’t adopted nor are they actively exploring Kubernetes. If you’re like me, those numbers might make you think, “Wow, that’s a big difference from the 2020 Cloud Native Computing Foundation (CNCF) survey that had 83% of respondents using Kubernetes”. Yes, it’s a big delta. [ more… ]

No Image

Avoiding the Top 10 NGINX Configuration Mistakes

2022-02-23 KENNETH 0

Avoiding the Top 10 NGINX Configuration Mistakes When we help NGINX users who are having problems, we often see the same configuration mistakes we’ve seen over and over in other users’ configurations – sometimes even in configurations written by fellow NGINX engineers! In this blog we look at 10 of the most common errors, explaining what’s wrong and how to fix it. Not enough file descriptors per worker The error_log off directive Not enabling keepalive connections to upstream servers Forgetting how directive inheritance works The proxy_buffering off directive Improper use of the if directive Excessive health checks Unsecured access to metrics Using ip_hash when all traffic comes from the same /24 CIDR block Not taking advantage of upstream groups Mistake 1: Not Enough File Descriptors per Worker The worker_connections directive sets the maximum number of simultaneous connections that a NGINX worker process [ more… ]

Announcing NGINX Plus R26

2022-02-16 KENNETH 0

Announcing NGINX Plus R26 p.indent { margin-left: 20px; } We’re happy to announce the availability of NGINX Plus Release 26 (R26). Based on NGINX Open Source, NGINX Plus is the only all-in-one software web server, load balancer, reverse proxy, content cache, and API gateway. New and enhanced features in NGINX Plus R26 include: Faster JWT validation with JSON Web Key Set caching – Continuing the series of enhancements to JSON Web Tokens (JWT) support added over the last few releases, we introduce in‑memory caching of JSON Web Key Sets (JWKS), which substantially reduces overhead for JWT validation. Hardened TLS handshakes – NGINX Plus rejects the TLS handshake if the client proposes a communication protocol via ALPN that doesn’t match the NGINX configuration context for the session being established (for example proposes IMAP to a virtual server in the http{} context). Enhancements to the NGINX [ more… ]

Secure Your gRPC Apps Against Crippling DoS Attacks with NGINX App Protect DoS

2022-02-11 KENNETH 0

Secure Your gRPC Apps Against Crippling DoS Attacks with NGINX App Protect DoS Customer demand for goods and services over the past two years has underlined how crucial it is for organizations to scale easily and innovate faster, leading many of them to accelerate the move from a monolithic to a cloud‑native architecture. According to the recent F5 report, The State of Application Strategy 2021, the number of organizations modernizing applications increased 133% in the last year alone. Cloud‑enabled applications are designed to be modular, distributed, deployed, and managed in an automated way. While it’s possible simply to lift-and-shift an existing monolithic application, doing so provides no advantage in terms of costs or flexibility. The best way to benefit from the distributed model that cloud computing services afford is to think modular – enter microservices. Microservices is an architectural approach that enables developers [ more… ]

Secure Your gRPC Apps Against Severe DoS Attacks with NGINX App Protect DoS

2022-02-11 KENNETH 0

Secure Your gRPC Apps Against Severe DoS Attacks with NGINX App Protect DoS Customer demand for goods and services over the past two years has underlined how crucial it is for organizations to scale easily and innovate faster, leading many of them to accelerate the move from a monolithic to a cloud‑native architecture. According to the recent F5 report, The State of Application Strategy 2021, the number of organizations modernizing applications increased 133% in the last year alone. Cloud‑enabled applications are designed to be modular, distributed, deployed, and managed in an automated way. While it’s possible simply to lift-and-shift an existing monolithic application, doing so provides no advantage in terms of costs or flexibility. The best way to benefit from the distributed model that cloud computing services afford is to think modular – enter microservices. Microservices is an architectural approach that enables developers [ more… ]