nixCraft Linux Sys Admin Blog

Top 20 Nginx WebServer Best Security Practices

Sat, 03/06/2010 - 22:20

Nginx is a lightweight, high performance web server/reverse proxy and e-mail (IMAP/POP3) proxy. It runs on UNIX, GNU/Linux, BSD variants, Mac OS X, Solaris, and Microsoft Windows. According to Netcraft, 6% of all domains on the Internet use nginx webserver. Nginx is one of a handful of servers written to address the C10K problem. Unlike traditional servers, Nginx doesn't rely on threads to handle requests. Instead it uses a much more scalable event-driven (asynchronous) architecture. Nginx powers several high traffic web sites, such as WordPress, Hulu, Github, and SourceForge. This page collects hints how to improve the security of nginx web servers running on Linux or UNIX like operating systems.

Bash Shell: Convert Tabs To Spaces In a File

Fri, 03/05/2010 - 23:43

How do convert tabs to spaces in a file using a bash shell?

Answer to "Bash Shell: Convert Tabs To Spaces In a File"

Linux RAM Disk: Creating A Filesystem In RAM

Fri, 03/05/2010 - 23:23

Software RAM disks use the normal RAM in main memory as if it were a partition on a hard drive rather than actually accessing the data bus normally used for secondary storage such as hard disk. How do I create and store a web cache on a RAM disk to improve the speed of loading pages under Linux operating systems?

Answer to "Linux RAM Disk: Creating A Filesystem In RAM"

Handling nginx Failover With KeepAlived

Thu, 02/25/2010 - 20:34

How do configure to release and obtain VIP (virtual IP) when nginx is dead, down or system is rebooted for the kernel upgrades?

Answer to "Handling nginx Failover With KeepAlived"

UNIX Command Line Tools For MS-Windows XP / Vista / 7 Operating Systems

Thu, 02/25/2010 - 18:13

I wish I had access to one of those nifty UNIX command-line tools under MS-Windows Vista or XP operating systems. How do I access UNIX command line utilities under Windows with out using virtualization?

Answer to "UNIX Command Line Tools For MS-Windows XP / Vista / 7 Operating Systems"

Arrrggg: Open Source Users Are Pirates

Thu, 02/25/2010 - 09:36

US lobby group is trying to get the US government to consider open source as the equivalent to piracy i.e. if you use open source software you are a pirate and that makes you an enemy of the state.

CentOS / Redhat: Install nginx As Reverse Proxy Load Balancer

Thu, 02/25/2010 - 08:40

How do I configure nginx as failover reverse proxy load balancer in front of two Apache web servers under CentOS / RHEL 5.x?

Answer to "CentOS / Redhat: Install nginx As Reverse Proxy Load Balancer"

UNIX / Linux: Explains setuid File Permission

Thu, 02/25/2010 - 07:51

What does it mean for a file to be "setuid?" How do keep track of all setuid enabled file?

Answer to "UNIX / Linux: Explains setuid File Permission"

CentOS / Redhat Linux: Install Keepalived To Provide IP Failover For Web Cluster

Sun, 02/21/2010 - 22:18

Keepalived provides a strong and robust health checking for LVS clusters. It implements a framework of health checking on multiple layers for server failover, and VRRPv2 stack to handle director failover. How do I install and configure Keepalived for reverse proxy server such as nginx or lighttpd?

Answer to "CentOS / Redhat Linux: Install Keepalived To Provide IP Failover For Web Cluster"

Linux/UNIX: Move File Starting With A Dash

Sun, 02/21/2010 - 00:14

In Unix or Linux operating systems, how do I move file(s) starting with a dash (e.g., /home/you/--filename.txt or /home/you/-filename.txt)?

Answer to "Linux/UNIX: Move File Starting With A Dash"

Truncate Large Text File in UNIX / Linux

Sun, 02/21/2010 - 00:14

How do I truncate or shrink large text file under UNIX / Linux operating systems?

Answer to "Truncate Large Text File in UNIX / Linux"

Regular Expressions In grep

Tue, 02/16/2010 - 01:37

How do I use the Grep command with regular expressions under Linux operating systems?

Answer to "Regular Expressions In grep"

Linux/UNIX: Configure OpenSSH To Listen On an IPv6 Address

Tue, 02/16/2010 - 00:04

How do I enable OpenSSH SSH server to listen on an IPv6 address under Linux or UNIX operating systems?

Answer to "Linux/UNIX: Configure OpenSSH To Listen On an IPv6 Address"

Transfer Files From One UNIX Server To Another Server Using Windows / Linux Desktop

Tue, 02/16/2010 - 00:00

How do I securely transfer files from one UNIX / Linux server to another UNIX server using Windows or Linux desktop clients without using ftp client?

Answer to "Transfer Files From One UNIX Server To Another Server Using Windows / Linux Desktop"

Turn on SELinux in Redhat or CentOS Linux Over Remote SSH Session

Mon, 02/15/2010 - 23:59

My hosting company disabled SELinux protection. How do I turn on SELinux over remote ssh session without distributing existing networking services?

Answer to "Turn on SELinux in Redhat or CentOS Linux Over Remote SSH Session"

Iptables Limits Connections Per IP

Mon, 02/08/2010 - 06:31

How do I restrict the number of connections used by a single IP address to my server for port 80 and 25 using iptables?

Answer to "Iptables Limits Connections Per IP"

PHP Security: Limit Resources Used By Script

Mon, 02/08/2010 - 06:01

How do I control and put limits on php scripts such as maximum execution time of each script and upload file size?

Answer to "PHP Security: Limit Resources Used By Script"

Linux fdupes: Get Rid (Delete) Of Double Duplicate Files In Directory

Wed, 02/03/2010 - 22:27

How do I find duplicate files in a given set of directories and delete them using a shell script or a command line options? How do I get rid of double duplicates files stored in ~/foo and /u2/foo directory?

Answer to "Linux fdupes: Get Rid (Delete) Of Double Duplicate Files In Directory"

Debian / Ubuntu Record Boot Messages

Wed, 02/03/2010 - 22:08

Once the userspace boot messages are gone from the console in Debian, they're gone forever. How do I log all messages sent to the /dev/console device to a logfile under Debian Linux sever?

Answer to "Debian / Ubuntu Record Boot Messages"

Download of the day: GNU/Linux Advanced Administration PDF Book

Wed, 02/03/2010 - 02:30

The Free Technology Academy (FTA) has released excellent book called "The GNU/Linux operating system", the main contents are related with system administration. You will learn how to install and configure several computer services, and how to optimise and synchronise the resources using GNU/Linux.

ITupstart.com