NGINX Advanced Security and Performance

О курсе

Take your NGINX skills from foundational setups to high-availability, production-grade enterprise administration. In this advanced course, you will transition from basic file serving and proxy configurations into a specialized engineer capable of turning NGINX into a hardened, lightning-fast edge traffic manager. This course takes your NGINX skills from foundational setups to production-grade, enterprise-level administration. Through practical architectural concepts and intensive, hands-on labs, you will learn how to defend your infrastructure against external attacks, optimize data delivery to achieve minimal latency, and troubleshoot complex production outages under high pressure. You'll begin by hardening the NGINX edge — implementing SSL/TLS termination for HTTPS, injecting security HTTP response headers to defend against XSS, clickjacking, and content sniffing, and configuring CORS and proxy headers for load-balanced environments. You'll then build a multi-layered perimeter defense using HTTP Basic Authentication and IP-based Access Control Lists to restrict access to sensitive endpoints and isolate internal networks. The course then moves into performance engineering: configuring rate-limiting zones using the leaky bucket algorithm to mitigate brute-force and DDoS attacks, and deploying edge-proxy caching with custom cache keys and validation timelines to dramatically reduce backend load. The final module covers production tuning and systematic triage — Gzip compression, connection handling, socket limits, keep-alive thresholds, and a structured approach to debugging live failures using NGINX access and error logs with Datadog monitoring integration. Who this is for: DevOps engineers, cloud architects, Linux systems administrators, and backend developers with working NGINX experience who need to operate and maintain production-grade deployments.

Навыки, которые вы освоите

Учитесь у экспертов

Mumshad Mannambeth

Преподаватель курса