Addressing Security Weaknesses in the NGINX LDAP Reference Implementation

This post shows you how to get NGINX and NGINX Plus running on Ubuntu in Amazon Web Services without affecting the settings on your personal computer.

NGINX Open Source 1.21.4 introduces support for kernel TLS (kTLS), which boosts performance by significantly reducing the need to copy data between user space and the kernel. We provide complete instructions for enabling kTLS in NGINX and share results of our performance testing.

Use the NGINX image from the Docker Hub repository or create your own NGINX Plus image to easily deploy NGINX in Docker containers.

We compare NGINX performance in bare-metal and virtualized (hypervisor) environments, finding a small but measurable performance cost for hypervisors. We also find that performance in Kubernetes environments is worse for network-bound but not CPU-bound operations.

Delivering an excellent experience every time a customer accesses an app is a key part of success in modernization. We offer advice on different paths to modernization, and formulate four principles for developing and managing APIs to provide optimum user experiences.

What exactly do we mean when we talk about "modern apps"? We describe four key features that we believe an app must have to be modern -- scalability, portability, resiliency, and agility -- and six principles to guide development of your own modern apps.

NGINX Plus R25 introduces more sophisticated authentication use cases with JWT, JWS, and JWE; counts of individual HTTP status codes; dynamic certificate loading for mTLS with upstream servers; hardened security for HTTP request processing; and NGINX JavaScript enhancements.

Learn which NGINX Ingress controller is best for you, based on authorship, development philosophy, production readiness, security, and support.

The built-in live activity monitoring dashboard tracks NGINX Plus metrics in real time, and can get additional insight from visualizations of performance over time. In this demo and blog we show how to generate time-series graphs of NGINX Plus metrics using Prometheus and Grafana.

The Ingress controller is an ideal location for centralized authentication and authorization in Kubernetes. We show how to implement single sign-on with NGINX Ingress Controller as the relaying party and Okta as the identity provider in the OIDC Authorization Code Flow.