tippexs

Cookie Security with NGINX and NGINX Plus

This is a complete demo of 2 different cookie security techniques:

1. Cookie jar - NGINX Plus stores new cookies in the key-value store and issues the client an opaque reference to access them
2. Signed cookies - NGINX creates signatures for all new cookies and validates that presented cookies match the signature

Requires NGINX Plus with JavaScript module (njs 0.5.1+)

tippexs

Overview

Requirement is for NGINX Plus to back off and stop sending new connections to an upstream node if the network utilization for that node exceeds a given threshhold.

Strategy

Create a simple HTTP-accessible script that runs on each upstream node. Script returns 200 OK (HTTP status code) if node is not overloaded, and 503 Too Busy if node is overloaded.