High Availability for NGINX Plus on AWS with keepalived and Elastic IP Address

2017-06-03 KENNETH 0

High Availability for NGINX Plus on AWS with keepalived and Elastic IP Address Part of the appeal of cloud computing is the promise of greater uptime. To achieve that, all parts of your architecture must be highly available, including the load balancer. Now you can achieve high availability (HA) for NGINX Plus on AWS with a new solution that combines keepalived and the AWS Elastic IP address feature. One widely used approach for HA on AWS is to put Elastic Load Balancer (ELB) in front of NGINX Plus instances. While this approach can be a good starting point, using ELB not only increases complexity and cost, but also imposes the following limitations: ELB does not expose a static IP address, which is critical requirement for some applications. ELB IP addresses are published using a DNS CNAME record; you cannot map a root [ more… ]

Introducing CI/CD with NGINX and NGINX Plus

2017-06-01 KENNETH 0

Introducing CI/CD with NGINX and NGINX Plus Continuous integration/continuous delivery (CI/CD) is a modern approach to managing the entire life cycle of writing, updating, and delivering applications. The agile and lightweight design of NGINX and NGINX Plus makes them extremely useful tools in support of many parts of a CI/CD platform. With CI/CD, everything from bug fixes to major feature changes are delivered to users on an ongoing basis. Different parts of an app can use different programming languages, different database schemas, and different development and release schedules. CI/CD is part of a group of related practices, each of which supports the others: The use of tools such as Bamboo and Jenkins for continuous integration The use of Git or similar tools for flexible source code control The use of containers for development, test, and production The use of container management [ more… ]

No Image

Creating Installable Packages for Dynamic Modules

2017-05-26 KENNETH 0

Creating Installable Packages for Dynamic Modules NGINX 1.11.5 and NGINX Plus R11 introduced support for compiling dynamic modules independently of NGINX itself. This allows users of NGINX and NGINX Plus to use the official builds from the NGINX, Inc. repositories and load in the dynamic modules they need. There are several sources of dynamic modules: Official repository of prebuilt open source NGINX packages and modules Official repository of NGINX Plus packages and modules NGINX Plus Certified Modules Third‑party (community) modules This blog focuses on the use of third‑party dynamic modules with NGINX and NGINX Plus. We discuss best practices for building, deploying, and upgrading dynamic modules in a production environment. The Problem with .so Files When you compile a dynamic module, the raw output is a shared object (.so file). At startup and reload, NGINX and NGINX Plus load each of the shared objects specified by a load_module directive. [ more… ]

Load Balancing a Dynamic Infrastructure with NGINX, Chef, and Consul

2017-05-23 KENNETH 0

Load Balancing a Dynamic Infrastructure with NGINX, Chef, and Consul td { padding-right: 10px; } This post is adapted from a presentation by Kevin Reedy of Belly Card at nginx.conf in October 2014. While that was a couple years ago, the content is still highly relevant today. You can view a recording of the presentation on YouTube. Table of Contents 0:00 Introduction   Overview   Disclaimer 1:16 What is Belly?   Belly’s Stack 1:44 Version 0: The Dark Age 2:04 Version 1: A New Hope 2:35 Version 2: Separate Home Page and API   Buzzword of the Day: Service-Oriented Architecture!   Enable SOA   NGINX Replaces ELB   Upstream and Virtual Server Configuration   Results 4:43 Configuration With Chef   Recipes   Files   Templates   Cookbooks 6:49 Example: Chef for NGINX   Installation, Configuration, and Tuning   Routing API Traffic 9:46 Real-World [ more… ]

Announcing General Availability of the NGINX Plus with ModSecurity WAF

2017-05-04 KENNETH 0

Announcing General Availability of the NGINX Plus with ModSecurity WAF quote-para { color: #009639; font-size: 25px; line-height: 35px; font-family: Aktiv Grotesk W01; font-style: italic; margin:0; padding-top:50px; } “…even when you understand web security, it is difficult to produce secure code, especially when working under the pressure so common in today’s software development projects.” — Ivan Ristić, creator of ModSecurity More than ever before, organizations need all the help they can get with web application security. According to the Q4 2016 State of the Internet / Security Report from Akamai, there were 350 million attacks against web application attacks in that quarter alone. Successful attacks are disruptive to business, causing outages, loss of sensitive data, and system takeover by attackers. Successful attacks can also cascade, causing outages and disruptions to customers who depend on applications that have been attacked. NGINX Plus with ModSecurity [ more… ]