Through the previous articles we discussed about some basic topics related to optimizing HTTP/2. TLS False Start on Nginx Appears Black Magic to Many New Server Admins. Here is How to Exactly How to Get it With Nginx in Easy Language. TLS False Start is possibly one of the worstly described phrase around optimizations. What This TLS False Start is? TLS False Start is nothing … [Read more...]
Archives for August 2016
Optimizing Nginx HTTP/2 TLS : Basic Principles
We hope that most of the readers are using latest version of deb GNU/Linux (like Ubuntu 16.04 LTS) or latest CentOS which fully supports HTTP/2. In case you are using Ubuntu 14.04 or older Ubuntu, please read our old guide to upgrade your server to make compatible with HTTP/2. This Article on Optimizing Nginx HTTP/2 TLS is Basic Principles Will Also Help the Relatively New Users Who May Not … [Read more...]
Install Nginx HTTP/2 With ALPN on Ubuntu 14.04 From ondrej/nginx PPA
In our previous guide, we have shown how to easily upgrade Nginx on Ubuntu 14.04 for HTTP/2 support. The required changes in the /etc/nginx/sites-enabled/default file, /etc/nginx/nginx.conf file and limitations of that way of installation has been discussed on this article. In this guide, we will show how to install Nginx HTTP/2 with ALPN on Ubuntu 14.04 from ondrej/nginx PPA. It simply means, we … [Read more...]
Ubuntu 14.04 Nginx HTTP/2 Directive, NPN & ALPN
Previously, we wrote how to upgrade Ubuntu 14.04 LTS running Nginx to support HTTP/2 avoiding recompilation or actual stopping the server. Here is a Handy Guide For the New Users Around Ubuntu 14.04 Nginx HTTP/2 Directive, NPN & ALPN. Sadly, HTTP/2 is Not Exactly Easy Like SPDY. The reasons are obvious - SPDY, as well QUIC, HTTP/1.1 is within HTTP/2. Sadly, what we have not said in that easy … [Read more...]
Upgrading Ubuntu 14.04 to Latest Nginx to Support HTTP2
Most webmaster and sysadmins has upgraded their setup to Ubuntu 16.04 LTS now. But Not all has upgraded, some of them wants HTTP/2 on Ubuntu 14.04 LTS. Here Are Steps For Upgrading Ubuntu 14.04 to Latest Nginx to Support HTTP2 With Troubleshooting Error. Removal of current Nginx not needed.. Nginx Has No Support For this Upgrade. This is not recommended, we can not give whether HTTP/2 will work or … [Read more...]
Nginx Brotli : Compression for HTTPS
Previously, we talked about various new methods for speed-up Nginx. Nginx Brotli Compression is a Modern Loseless Compression Algorithm Like gzip. ngx_brotli is a Set of 2 Nginx Modules. Nginx Brotli was not discussed so far as it was not exactly stable. Replacing gzip deflate with Nginx Brotli Compression typically gives an increase of 20% in compression density for text files, while compression … [Read more...]
Fix Nginx OCSP ERROR : OCSP Response Expired
Previously we written in details on How to Enable OCSP Stapling Nginx. Here is How to Fix Nginx OCSP ERROR - OCSP Response Expired After Enabling OCSP Stapling on Nginx. Error is Due to Certain Criterion of RFC. This is not quite uncommon error. Why OCSP ERROR : OCSP Response Expired Appears? It is common to get this error in Opera Browser, where the error code is Error 1066. … [Read more...]
Warning : TCP Stack Vulnerability in the Linux Kernel (CVE-2016-5696)
Researchers at the University of California have identified a dangerous vulnerability in the TCP (Transmission Control Protocol) used by Linux. The finding of flaw dates back to the end of 2012 but was discovered only recently. They are working with the community for some preventive measures (like an update for clients and hosts) as a pending official patch. The TCP protocol adopted by Linux is … [Read more...]
Add Content Security Policy (CSP) Header in Nginx With report-uri
In the previous guide, we talked about how to around HTTP Public Key Pinning (HPKP) Nginx With report-uri. Content Security Policy (CSP) header adds control over the resources to be loaded on modern browsers to increase security. Here is How to Add Content Security Policy Header in Nginx. Table of Contents 1 Introduction 2 What is Content Security Policy (CSP) Header? 3 How To Add … [Read more...]