分类: 专业技术

NGINX Plus R23 introduces new features including health checks for backend gRPC servers, unprivileged installation, support for the OpenID Connect PKCE extension, finer-grained control over TLS connections, a new method of setting cookie flags, and NGINX JavaScript enhancements.

Announcing the NGINX Core collection on Ansible, with three roles to help you automate installation and configuration of NGINX Open Source, NGINX Plus, and NGINX App Protect. The collection is available in both community and supported versions.

我们展示了如何使用 NGINX JavaScript 模块捕获有关导致错误的请求的数据，并提供了足够的详细信息用于调试和故障排除，同时不让日志中充斥着有关未发生错误的请求信息。

我们比较了社区版 Ingresser Controller、NGINX 开源版 Ingress Controller 和 NGINX Plus Ingress Controller 在动态 Kubernetes 云环境中的性能。经过测试，我们得出：只有 NGINX Plus Ingress Controller 不会随着 Pod 副本数量的增加和减少而产生高延迟。

On 14 September 2020 we released an update to the NGINX Plus ModSecurity module (for NGINX Plus R20, R21, and R22) in response to CVE-2020-15598. We encourage NGINX Plus subscribers to upgrade to the patched module.

本文将讨论了如何使用像 F5 DNS 负载均衡器云服务这样的 DNS 服务来实施三种方法（蓝绿部署、滚动部署、灰度部署），从而无缝且安全地将应用更新部署到生产环境中。

F5 Essential App Protect is a simple, pay-as-you-go, SaaS-based security service for securing apps proxied by NGINX and NGINX Plus. Based on F5’s 20+ years of app security expertise, it's a DevOps-ready service that protects against the security threats faced by modern apps.

We explain how to run NGINX Plus in compliance with the FIPS 140-2 Security Requirements for Cryptographic Modules standard, which specifies the cryptographic protocols that are accepted by the U.S. Federal government and many other organizations.

With the Fortanix Self-Defending Key Management Service, you can offload TLS crytographic processing from your NGINX and NGINX Plus servers, and safely store your TLS keys for on-demand uploading into the NGINX Plus key-value store. We provide complete instructions for both use cases.

本文将讨论 API 网关架构的主要特征、如何部署 API 网关以及我们从合作经验中提炼出来的实时 API 参考架构。我们将对 API 管理解决方案进行全面描述，并深入介绍负责确保满足实时性能阈值的 API 网关。