Derek DeJonghe / Дерек де Йонге - NGINX Cookbook: Advanced Recipes for High-performance Load Balancing, 3rd Edition / NGINX. Книга рецептов: расширенные рецепты для высокопроизводительной балансировки нагрузки, 3-е издание [2024, PDF, EPUB, MOBI, ENG

Примеры страниц (скриншоты)

Оглавление

Preface vii
1. Basics 1
1.0 Introduction 1
1.1 Installing NGINX on Debian/Ubuntu 1
1.2 Installing NGINX Through the YUM Package Manager 2
1.3 Installing NGINX Plus 3
1.4 Verifying Your Installation 3
1.5 Key Files, Directories, and Commands 4
1.6 Using Includes for Clean Configs 6
1.7 Serving Static Content 7
2. High-Performance Load Balancing 9
2.0 Introduction 9
2.1 HTTP Load Balancing 10
2.2 TCP Load Balancing 11
2.3 UDP Load Balancing 13
2.4 Load-Balancing Methods 14
2.5 Sticky Cookie with NGINX Plus 17
2.6 Sticky Learn with NGINX Plus 18
2.7 Sticky Routing with NGINX Plus 19
2.8 Connection Draining with NGINX Plus 20
2.9 Passive Health Checks 21
2.10 Active Health Checks with NGINX Plus 22
2.11 Slow Start with NGINX Plus 24
3. Traffic Management 25
3.0 Introduction 25
3.1 A/B Testing 25
3.2 Using the GeoIP Module and Database 27
3.3 Restricting Access Based on Country 30
3.4 Finding the Original Client 31
3.5 Limiting Connections 32
3.6 Limiting Rate 34
3.7 Limiting Bandwidth 35
4. Massively Scalable Content Caching 37
4.0 Introduction 37
4.1 Caching Zones 37
4.2 Caching Hash Keys 39
4.3 Cache Locking 40
4.4 Use Stale Cache 40
4.5 Cache Bypass 41
4.6 Cache Purging with NGINX Plus 42
4.7 Cache Slicing 43
5. Programmability and Automation 45
5.0 Introduction 45
5.1 NGINX Plus API 45
5.2 Using the Key-Value Store with NGINX Plus 49
5.3 Using the njs Module to Expose JavaScript Functionality Within NGINX 51
5.4 Extending NGINX with a Common Programming Language 54
5.5 Installing with Ansible 56
5.6 Installing with Chef 58
5.7 Automating Configurations with Consul Templating 59
6. Authentication 63
6.0 Introduction 63
6.1 HTTP Basic Authentication 63
6.2 Authentication Subrequests 65
6.3 Validating JWTs with NGINX Plus 66
6.4 Creating JSON Web Keys 68
6.5 Authenticate Users via Existing OpenID Connect SSO with NGINX Plus 69
6.6 Validate JSON Web Tokens (JWT) with NGINX Plus 70
6.7 Automatically Obtaining and Caching JSON Web Key Sets with NGINX Plus 71
6.8 Configuring NGINX Plus as a Service Provider for SAML Authentication 72
7. Security Controls 77
7.0 Introduction 77
7.1 Access Based on IP Address 77
7.2 Allowing Cross-Origin Resource Sharing 78
7.3 Client-Side Encryption 79
7.4 Advanced Client-Side Encryption 81
7.5 Upstream Encryption 83
7.6 Securing a Location 84
7.7 Generating a Secure Link with a Secret 84
7.8 Securing a Location with an Expire Date 85
7.9 Generating an Expiring Link 86
7.10 HTTPS Redirects 88
7.11 Redirecting to HTTPS Where SSL/TLS Is Terminated Before NGINX 89
7.12 HTTP Strict Transport Security 89
7.13 Restricting Access Based on Country 90
7.14 Satisfying Any Number of Security Methods 92
7.15 NGINX Plus Dynamic Application Layer DDoS Mitigation 92
7.16 Installing and Configuring NGINX Plus with the NGINX App Protect WAF Module 94
8. HTTP/2 and HTTP/3 (QUIC) 99
8.0 Introduction 99
8.1 Enabling HTTP/2 99
8.2 Enabling HTTP/3 100
8.3 gRPC 102
9. Sophisticated Media Streaming 105
9.0 Introduction 105
9.1 Serving MP4 and FLV 105
9.2 Streaming with HLS with NGINX Plus 106
9.3 Streaming with HDS with NGINX Plus 107
9.4 Bandwidth Limits with NGINX Plus 108
10. Cloud Deployments 109
10.0 Introduction 109
10.1 Auto-Provisioning 109
10.2 Deploying an NGINX VM in the Cloud 111
10.3 Creating an NGINX Machine Image 112
10.4 Routing to NGINX Nodes Without a Cloud Native Load Balancer 113
10.5 The Load Balancer Sandwich 115
10.6 Load Balancing over Dynamically Scaling NGINX Servers 117
10.7 Creating a Google App Engine Proxy 118
11. Containers/Microservices 121
11.0 Introduction 121
11.1 Using NGINX as an API Gateway 122
11.2 Using DNS SRV Records with NGINX Plus 126
11.3 Using the Official NGINX Container Image 127
11.4 Creating an NGINX Dockerfile 128
11.5 Building an NGINX Plus Container Image 132
11.6 Using Environment Variables in NGINX 133
11.7 NGINX Ingress Controller from NGINX 134
12. High-Availability Deployment Modes 137
12.0 Introduction 137
12.1 NGINX Plus HA Mode 137
12.2 Load Balancing Load Balancers with DNS 140
12.3 Load Balancing on EC2 141
12.4 NGINX Plus Configuration Synchronization 142
12.5 State Sharing with NGINX Plus and Zone Sync 144
13. Advanced Activity Monitoring 147
13.0 Introduction 147
13.1 Enable NGINX Stub Status 147
13.2 Enabling the NGINX Plus Monitoring Dashboard 148
13.3 Collecting Metrics Using the NGINX Plus API 150
13.4 OpenTelemetry for NGINX 153
13.5 Prometheus Exporter Module 157
14. Debugging and Troubleshooting with Access Logs, Error Logs, and Request Tracing 159
14.0 Introduction 159
14.1 Configuring Access Logs 159
14.2 Configuring Error Logs 161
14.3 Forwarding to Syslog 162
14.4 Debugging Configs 163
14.5 Request Tracing 164
15. Performance Tuning 167
15.0 Introduction 167
15.1 Automating Tests with Load Drivers 167
15.2 Controlling Cache at the Browser 168
15.3 Keeping Connections Open to Clients 169
15.4 Keeping Connections Open Upstream 169
15.5 Buffering Responses 170
15.6 Buffering Access Logs 171
15.7 OS Tuning 172
Index 175