中文In this blog we compare the performance of the NGINX Controller API Management Module and Kong. The API Management Module outperforms Kong on every metric: added latency, API calls per second (with and without JWT authentication), and CPU usage.
NGINX 快问快答 | 2019 年 4 月
In this installment of our "Ask NGINX" series, we discuss how NGINX and NGINX Plus work with Diffie-Hellman, support for Datagram Transport Layer Security, how to control the lifetime of content in the cache, and how to add the NGINX WAF to an NGINX Plus subscription.
在西雅图举行的 NGINX Conf 2019 大会中获取提升
Registration is now open for NGINX Conf 2019, taking place on September 9 and 10 in Seattle, WA. Join us for keynotes from industry luminaries and NGINX experts, technical and business breakout sessions, and opportunities to share tips on best practices with fellow NGINX users.
借助 NGINX 基于条件的日志记录对请求进行采样
With NGINX conditional logging, you can log a subset of requests which have defined characteristics. This blog uses it to solve a real-world customer use case: the need to reject obsolete and insecure SSL/TLS ciphers without excluding legitimate users of legacy devices.
您的 API 管理解决方案真的安全吗？
Is your API management solution secure when vulnerabilities are found? The NGINX team builds patches into the NGINX Controller API Management Module as soon as they're available. Third-party solutions built on NGINX can leave you vulnerable while vendors test and port patches.
使用 HashiCorp Vault 保护 NGINX 中的 SSL 私钥
保护 SSL 私钥系列的第二篇介绍了如何设置 HashiCorp Vault 来存储保护 SSL 密钥，以及如何配置 NGINX 来检索密码。我们还讨论了使用硬件安全模块来实现更高的安全性。
测试用于 Kubernetes 的 NGINX Ingress Controller 的性能
这篇文章主要讲了我们为 Kubernetes 打造的 NGINX Ingress Controller 的性能表现，包括三个指标：每秒请求数、每秒 SSL/TLS 事务数和吞吐量。文中包含了我们进行测试时使用的 NGINX 和 Kubernetes 的完整配置。
借助 NGINX 对物联网设备进行隔空更新
One of the biggest challenges in scaling deployments on the Internet of Things is device management, particularly over-the-air updates, commonly called OTA. Guest blogger DeveloperSteve shows how to automate OTA using NGINX as an API gateway, along with the NGINX JavaScript module.
隆重推出 NGINX Plus R18
NGINX Plus R18 introduces dynamic loading of SSL/TLS certificates, enhances our OpenID Connect reference implementation, and supports port ranges for virtual servers. It also includes enhancements to the key-value store, health checks, NGINX Plus clustering, and the NGINX JavaScript module.
如何在 NGINX 中安全地分发 SSL 私钥
针对 NGINX 处理 HTTPS 流量的情景，我们介绍了三种保护 SSL 私钥的方式（这三种方式的保护程度逐步提高）：仅允许 root 用户进行读取访问、配置独立存储的密码加密密钥、创建中央密码分发点。
