awesome-nginx-security/README.md

awesome-nginx-security

A curated list of awesome links related to application/API security in NGINX environment.

WAF (Web Application Firewalls) for nginx

• mod_security
• naxsi - NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX.
• wallarm

Talks

• Building a Security Shield for Your Applications with NGINX & Wallarm (nginx.conf 2017). Transcript
• Behavior Based Security with Repsheet: Aaron Bedra @nginxconf 2014 (video)

Articles

• Let's Encrypt & Nginx
• Installing the Nginx Plus with mod_security WAF

Bot mitigation / Anti-scrapping / Account taked-over prevention

• testcookie-nginx-module - Simple robot mitigation module using cookie based challenge/response technique