In Previous Guide We Have Talked How To Add IPv6 to IPv4 Server With Nginx Reverse Proxy To Have IPv6 on IPv4 Only Hosts. In this Guide We Will Show the Nginx IPv6 Reverse Proxy Configuration For HSTS Website. Which is Slightly Different than Normal HTTPS Website. Improperly Configured Proxy Will Break HSTS Header By Repeating the Sequence. It is not only HSTS, but also HPKP and Alternate Protocol … [Read more...]
Limit SSH Access By Country To Save From SSH Brute Force
SSH Brute Force is one of the old way which nicely works, proof is latest attacks on Dyn DNS. The target is to bring DDoS. Frankly, the solutions like anti-DDoS for IaaS, anti-DDoS for PaaS are very costly and without hardware it is difficult to terminate attack. Many a times, the new sysadmin can not understand the odd errors on SSH like pam_unix(sushi:auth): authentication failure, which are … [Read more...]
How To Generate Let’s Encrypt ECC SSL (ECDSA) Certificate
It is funny - at this moment we are using DV GeoTrust SSL Cert but has no support for ECC. We talked about ECC SSL (ECDSA) Certificate in previously published article around whether to upgrade or not. You can read that if you missed it. Few Costly Paid SSL Have Support For ECC. Let's Encrypt Supports For Free. Here is How To Generate Let's Encrypt ECC SSL (ECDSA) Certificate. Let's Encrypt … [Read more...]
Commands to Detect Type of Virtualization
Previously, we talked about how to detect how to detect whether an instance is running within a Virtualized OS instance or not. Sometime We Need to Know Type of Virtualization Cloud Server or VPS is Using. Here Are Some Commands to Detect Type of Virtualization. Need is sometimes to detect OpenVZ like container based virtualization, which essentially should cost lesser than KVM, Xen … [Read more...]
Install GoAccess Nginx Access Log Analyzer on Ubuntu 16.04 PHP 7
Previously we talked about configuring GeoIP module for Nginx Access log. This guide can be used on live production server. GoAccess is Easy to Install, Output Available on CLI or As HTML Here is How to Install GoAccess Nginx Access Log Analyzer on Ubuntu 16.04. There are two ways to install GoAccess -- we can install from their repository with aptitude package manager or can build from source … [Read more...]
How To Configure Nginx Access Log With GeoIP (Ubuntu 16.04)
We can virtually use Nginx access log like analytics software. Here is How To Configure Nginx Access Log With GeoIP on Ubuntu 16.04. Usage Commands Also Shown. Access Log is Powerful & Configurable Tool. Many new users sub-utilise this powerful tool of Nginx. Requirements To Proceed To Read This How To Configure Nginx Access Log With GeoIP Guide This guide is written and … [Read more...]
Optimize Nginx TLS Record Size For HTTP/2 TLS (Ubuntu, CentOS)
Previously we published some guides on optimising HTTP/2. Here is How to Optimize Nginx TLS Record Size For HTTP/2 TLS in Ubuntu & CentOS For Better PageLoading Speed. Easy to Follow Guide By Anyone. We are taking it granted that the user who is reading is using Nginx either on CentOS from CentminMod build or using Ubuntu's nginx-extras. What You Exactly Say While Talking … [Read more...]
How to Upgrade Kernel of Ubuntu Server 16.04 (Cloud Server)
The latest kernel version any user is supposed to use in Ubuntu is updated automatically via the Update Manager, so no action is normally required by user regarding kernel upgrades. Server installations will default to the GA kernel and provide the enablement kernel as optional. We are referring to mainline kernel. Previously, we talked about how to upgrade live Ubuntu 14.04 to 16.04. Here is How … [Read more...]
Upgrade Ubuntu Server 14.04 to 16.04 With Live WordPress
As we wrote in previous articles, it is no more practical to keep Ubuntu 14.04 LTS running and trying to upgrade installed softwares somehow. We know that many webmaster are hesitant to upgrade for the fear of breaking website. Here Are the Detailed Steps on How To Upgrade Ubuntu Server 14.04 to 16.04 With Live WordPress With Kernel Upgrade, Debug & Fixes For Nginx. Indeed on Ubuntu 14.04 LTS, … [Read more...]
TLS False Start : Exactly How to Get With Nginx
Through the previous articles we discussed about some basic topics related to optimizing HTTP/2. TLS False Start on Nginx Appears Black Magic to Many New Server Admins. Here is How to Exactly How to Get it With Nginx in Easy Language. TLS False Start is possibly one of the worstly described phrase around optimizations. What This TLS False Start is? TLS False Start is nothing … [Read more...]
Optimizing Nginx HTTP/2 TLS : Basic Principles
We hope that most of the readers are using latest version of deb GNU/Linux (like Ubuntu 16.04 LTS) or latest CentOS which fully supports HTTP/2. In case you are using Ubuntu 14.04 or older Ubuntu, please read our old guide to upgrade your server to make compatible with HTTP/2. This Article on Optimizing Nginx HTTP/2 TLS is Basic Principles Will Also Help the Relatively New Users Who May Not … [Read more...]