We explore two use cases for filesystem isolation in NGINX Unit. First, we stop attackers from accessing sensitive information, by restricting a compromised app to its sandbox directory. Second, we toggle between sets of global dependencies by defining them in separate filesystems.
Tag: NGINX Unit
Tag: NGINX Unit
NGINX Unit 1.18.0 introduces filesystem isolation, the 'target' option to reduce redundancy in PHP app configuration, and URL encoding. It also includes features introduced in NGINX Unit 1.17.0: redirects, and fractional server weights for traffic distribution in upstream groups.
We show how to build an application stack with NGINX Unit, enabling automated deployment of production environments with custom‑built language runtime versions, libraries, modules, and extensions. The sample app is WordPress deployed in a Docker container.
NGINX Unit 1.16.0 introduces two new features that are already familiar to NGINX users. First, it can load balance across a group of upstream servers using the round-robin method. Second, you can define what happens when a requested file can't be served, similar to the NGINX 'try_files' directive.
Assembly language is popular in all kinds of system software and we believe that web development can also benefit from the advantages it provides. Today we're pleased to add support for assembly language to NGINX Unit. Web development in assembly has never been so easy.
NGINX Unit 1.13.0 introduces reverse proxying, and version 1.14.0 adds address-based routing to the internal routing and file-serving functionality from previous releases. We combine the new features in a complete configuration example for IP address filtering and access management.
Application isolation in NGINX Unit enables you to control which types of system resources your apps share with NGINX Unit and each other. Running apps in isolated environments improves security. Get all the details on how it works, and what it means for the future of NGINX Unit.
NGINX Unit 1.11.0 introduces support for static file serving, a much requested feature ever since NGINX Unit debuted. It also includes application (process) isolation using Linux namespaces and a WebSocket server implementation for Java Servlet Containers. NGINX Unit 1.12.0 adds support for PHP 7.4.
NGINX Unit 1.9.0 and 1.10.0 introduce request routing based on matching arguments, headers, cookies, and scheme; appending elements to arrays; a built‑in WebSocket server for Node.js; and new guides for Catalyst, NextCloud, Redmine, Docker, and language modules.
NGINX Unit is a key component in our modern platform spans from code to customer: it's configured dynamically via API for no app downtime; it can run apps written in multiple languages and versions at the same time; its small footprint makes it ideal for microservices and deployable on any infrastructure.