When Security-Enhanced Linux (SELinux) is enabled for Red Hat Enterprise Linux (RHEL) and related distros, its default settings prevent NGINX and NGINX Plus from performing some operations. This article explains how to modify SELinux settings to permit full functionality.
In this blog, we compare three simple, unambiguous performance metrics: HTTP requests per second (RPS), SSL/TLS transactions per second (TPS), and HTTP throughput (Gbps). The bottom line: the NGINX Plus price-performance advantage continues, with cost savings for NGINX over F5 ranging from 78% to 84%.
Application development & delivery are continuing to change rapidly as agile principles are applied more thoroughly and to all parts of the overall process. Chris Stetson identifies three principles that guide modern application development: keep it small; design for the developer; and make it networked.
NGINX has released version 1.3.0 of the NGINX Ingress Controller for Kubernetes. This release features Prometheus support, better Helm charts, mergeable Ingress resources, easier custom template management, health checks, and status reporting. Come to Github and get it.
The $ssl_preread_protocol variable introduced in NGINX 1.15.2 allows you to distinguish between SSL/TLS and other protocols when forwarding traffic using a TCP proxy. This is useful if you want to avoid firewall restrictions by running (for example) SSL/TLS and SSH services on the same port.
The NGINX Web Application Firewall (WAF) is now certified in the Google Cloud Security Partner Ecosystem, protecting applications hosted on the Google Cloud Platform from Layer 7 attacks like SQLi and RCE.
Agile development has become crucial to development and delivery of new software and new features. But hardware load balancers, with their complex configurations, block progress. A software load balancer - used with, or in place of, hardware - makes the whole delivery chain agile.
Red Hat OpenShift is a container platform built on top of Kubernetes. It's available as an open source project, OpenShift Origin, and a commercially supported product, OpenShift Container Platform. You can now use NGINX and NGINX Plus as a Router within OpenShift.
NGINX Unit 1.3, available now, adds configuration parameters for various timeouts, configurable request body size, Ansible integration, and more. As in previous releases, all parameters can be defined dynamically, with no disruption to running services or loss of connectivity.
NGINX Controller R1, a new management tool for NGINX Plus instances, was released June 26th, 2018. It offers simplified configuration management; monitoring, alerting and troubleshooting; tagging; a configuration analyzer; instance inventory; and multi-cloud support.