No Image

Easy and Robust Single Sign-On with OpenID Connect and NGINX Ingress Controller

2021-02-02 KENNETH 0

Easy and Robust Single Sign-On with OpenID Connect and NGINX Ingress Controller With the release of NGINX Ingress Controller 1.10.0, we are happy to announce a major enhancement: a technology preview of OpenID Connect (OIDC) authentication. OIDC is the identity layer built on top of the OAuth 2.0 framework which provides an authentication and single sign‑on (SSO) solution for modern apps. Our OIDC policy is a full‑fledged SSO solution enabling users to securely authenticate with multiple applications and Kubernetes services. Significantly, it enables apps to use an external identity provider (IdP) to authenticate users and frees the apps from having to handle usernames or passwords. This new capability complements other NGINX Ingress Controller authorization and authentication features, such as JSON Web Token (JWT) authentication, to provide a robust SSO option that is easy to configure with NGINX Ingress resources. This means you [ more… ]

No Image

Managing Your Greatest Asset – People

2021-01-23 KENNETH 0

Managing Your Greatest Asset – People One of the best managers I ever worked under as a network engineer had a knack for helping me understand which projects and tasks were important to the business, and which were not. I was working for a medical manufacturing company, and during team meetings, we would hear, “Upper management is putting a focus on this project. Let’s talk about the rumors … now let’s talk about what’s real.” Following those discussions, Richard would start divvying out project assignments to meet the business goals. This management method has some fantastic benefits for individual contributors: It points the team towards a common goal. Most network engineers want to be proud of the work they do and have it contribute to the business. When direct‑line managers can help separate the wheat from the chaff, work requirements [ more… ]

No Image

Self-Service Application Delivery Bridges the Divide Between Developer Productivity and Infrastructure Reliability

2021-01-22 KENNETH 0

Self-Service Application Delivery Bridges the Divide Between Developer Productivity and Infrastructure Reliability The modern market demands agility, flexibility, and above all, speed. The faster you crank out new applications and features, the better – and companies are taking note. As of 2018, 72% of enterprises planned to implement DevOps methodologies within the next year, and the DevOps market will reach $9.4 billion by 2023. But as organizations put their DevOps visions into action, infrastructure teams are facing a new development‑centric reality, one in which they must work at the same pace as development teams to deliver the services and policies required across a complex web of data centers, cloud, and virtualized environments – all without getting in the way. The Infrastructure Bottlenecks that Developers Dread Many organizations feel the pain of balancing faster development with operational requirements like reliability, scalability, stability, and security. The rise of [ more… ]

No Image

Accelerate Cloud-Native Apps with Automation

2021-01-14 KENNETH 0

Accelerate Cloud-Native Apps with Automation Since you’re reading this blog, no doubt you’re aware that automation is essential to delivering modern digital experiences. It enables agility at a pace that isn’t possible with human hands, reduces downtime and errors, and lets developers focus on the things that give them joy. 73% of organizations are automating network operations to boost efficiency, and perhaps nowhere is automation more prevalent than in public clouds. At NGINX, not only do we love automation, but we also know that it’s considered a must‑have by our customers and community. Our solutions can be incorporated seamlessly into DevOps workflows using APIs and we’ve made extensive development investments in official Ansible roles and collections. In this blog we explore four ways you can automate NGINX technologies in the public cloud. We use AWS as the sample cloud, but [ more… ]

nginx 에서 이미지 직접 접근 차단 + IP허용

2021-01-13 KENNETH 0

관련URL : https://jirak.net/wp/?p=32536 해당 포스트를 통해 nginx상에서 이미지 직접 접근 차단 (일명 : block hotlink) 에 대해 설명한 바 있다. 이 설정에 조건을 추가로 붙여야 하는 상황   1. 추가 조건 특정 아이피 주소에서는 block 되지 않고 이미지 출력 nginx는 다중 if 문을 지원하지 않기 때문에, 기존의 방식을 변경해야 했다 다중 if문만 지원했다면 훨씬 간단하게 처리가 가능했을 듯     2. 기존 해결 방법 valid_referers 를 통해 $invalid_referer 해당시 모두 403     3. 변경된 방식 2.1 white_client 이름의 추가 변수 선언 white_client = 0 : block 대상 => 403 응답 white_client = 1 : permit 대상 => 정상 응답 기본값 : 0   2.2 white_client 값 생성 조건 허용된 아이피 ($remote_addr)에서 접근시 : 1 valied_referes 에서 허용된 경우 : 1 그 외 : 0   2.3 설정