NGINX Cookbook, 3rd Edition | PDF下载|ePub下载

Preface
Conventions Used in This Book
O’Reilly Online Learning
How to Contact Us
1. Basics
1.0. Introduction
1.1. Installing NGINX on Debian/Ubuntu
1.2. Installing NGINX Through the YUM Package Manager
1.3. Installing NGINX Plus
1.4. Verifying Your Installation
1.5. Key Files, Directories, and Commands
1.6. Using Includes for Clean Configs
1.7. Serving Static Content
2. High-Performance Load Balancing
2.0. Introduction
2.1. HTTP Load Balancing
2.2. TCP Load Balancing
2.3. UDP Load Balancing
2.4. Load-Balancing Methods
2.5. Sticky Cookie with NGINX Plus
2.6. Sticky Learn with NGINX Plus
2.7. Sticky Routing with NGINX Plus
2.8. Connection Draining with NGINX Plus
2.9. Passive Health Checks
2.10. Active Health Checks with NGINX Plus
2.11. Slow Start with NGINX Plus
3. Traffic Management
3.0. Introduction
3.1. A/B Testing
3.2. Using the GeoIP Module and Database
3.3. Restricting Access Based on Country
3.4. Finding the Original Client
3.5. Limiting Connections
3.6. Limiting Rate
3.7. Limiting Bandwidth
4. Massively Scalable Content Caching
4.0. Introduction
4.1. Caching Zones
4.2. Caching Hash Keys
4.3. Cache Locking
4.4. Use Stale Cache
4.5. Cache Bypass
4.6. Cache Purging with NGINX Plus
4.7. Cache Slicing
5. Programmability and Automation
5.0. Introduction
5.1. NGINX Plus API
5.2. Using the Key-Value Store with NGINX Plus
5.3. Using the njs Module to Expose JavaScript Functionality Within NGINX
5.4. Extending NGINX with a Common Programming Language
5.5. Installing with Ansible
5.6. Installing with Chef
5.7. Automating Configurations with Consul Templating
6. Authentication
6.0. Introduction
6.1. HTTP Basic Authentication
6.2. Authentication Subrequests
6.3. Validating JWTs with NGINX Plus
6.4. Creating JSON Web Keys
6.5. Authenticate Users via Existing OpenID Connect SSO with NGINX Plus
6.6. Validate JSON Web Tokens (JWT) with NGINX Plus
6.7. Automatically Obtaining and Caching JSON Web Key Sets with NGINX Plus
6.8. Configuring NGINX Plus as a Service Provider for SAML Authentication
7. Security Controls
7.0. Introduction
7.1. Access Based on IP Address
7.2. Allowing Cross-Origin Resource Sharing
7.3. Client-Side Encryption
7.4. Advanced Client-Side Encryption
7.5. Upstream Encryption
7.6. Securing a Location
7.7. Generating a Secure Link with a Secret
7.8. Securing a Location with an Expire Date
7.9. Generating an Expiring Link
7.10. HTTPS Redirects
7.11. Redirecting to HTTPS Where SSL/TLS Is Terminated Before NGINX
7.12. HTTP Strict Transport Security
7.13. Restricting Access Based on Country
7.14. Satisfying Any Number of Security Methods
7.15. NGINX Plus Dynamic Application Layer DDoS Mitigation
7.16. Installing and Configuring NGINX Plus with the NGINX App Protect WAF Module
8. HTTP/2 and HTTP/3 (QUIC)
8.0. Introduction
8.1. Enabling HTTP/2
8.2. Enabling HTTP/3
8.3. gRPC
9. Sophisticated Media Streaming
9.0. Introduction
9.1. Serving MP4 and FLV
9.2. Streaming with HLS with NGINX Plus
9.3. Streaming with HDS with NGINX Plus
9.4. Bandwidth Limits with NGINX Plus
10. Cloud Deployments
10.0. Introduction
10.1. Auto-Provisioning
10.2. Deploying an NGINX VM in the Cloud
10.3. Creating an NGINX Machine Image
10.4. Routing to NGINX Nodes Without a Cloud Native Load Balancer
10.5. The Load Balancer Sandwich
10.6. Load Balancing over Dynamically Scaling NGINX Servers
10.7. Creating a Google App Engine Proxy
11. Containers/Microservices
11.0. Introduction
11.1. Using NGINX as an API Gateway
11.2. Using DNS SRV Records with NGINX Plus
11.3. Using the Official NGINX Container Image
11.4. Creating an NGINX Dockerfile
11.5. Building an NGINX Plus Container Image
11.6. Using Environment Variables in NGINX
11.7. NGINX Ingress Controller from NGINX
12. High-Availability Deployment Modes
12.0. Introduction
12.1. NGINX Plus HA Mode
12.2. Load Balancing Load Balancers with DNS
12.3. Load Balancing on EC2
12.4. NGINX Plus Configuration Synchronization
12.5. State Sharing with NGINX Plus and Zone Sync
13. Advanced Activity Monitoring
13.0. Introduction
13.1. Enable NGINX Stub Status
13.2. Enabling the NGINX Plus Monitoring Dashboard
13.3. Collecting Metrics Using the NGINX Plus API
13.4. OpenTelemetry for NGINX
13.5. Prometheus Exporter Module
14. Debugging and Troubleshooting with Access Logs, Error Logs, and Request Tracing
14.0. Introduction
14.1. Configuring Access Logs
14.2. Configuring Error Logs
14.3. Forwarding to Syslog
14.4. Debugging Configs
14.5. Request Tracing
15. Performance Tuning
15.0. Introduction
15.1. Automating Tests with Load Drivers
15.2. Controlling Cache at the Browser
15.3. Keeping Connections Open to Clients
15.4. Keeping Connections Open Upstream
15.5. Buffering Responses
15.6. Buffering Access Logs
15.7. OS Tuning
Index
About the Author
· · · · · ·