How to tune Nginx to survive a DDoS
summary
Practical guidance on configuring Nginx to detect and survive DDoS attacks, covering systemd/systemctl tweaks, monitoring options, and module choices. It explains why VTS metrics are useful but slow, when to use the angie module, and other monitoring modules and configuration changes to improve resilience under attack.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:54What is DDoS and attack vectors
- 4:45TCP-level protection
- 10:46TLS and compression tuning
- 18:54HTTP flood and rate limits
- 24:29JA4 fingerprinting and caching
- 31:40Metrics and logs for defense
- 42:43Q&A 1
- 51:03Q&A 2
related talks
54mFighting for Survivability Under DDoS
45mHow to Prepare for a Gigabit DDoS Attack
44mAfter enabling DDoS protection: how your resources get 'taken down'
45mAnatomy of a DDoS
52mNot all attacks are malicious: DDoS from outside and within
44mScalable nginx Configuration
28mMy Favourite Errors
27m15 NGINX Metrics to Monitor