Chapter 6. Security

NGINX Management with NGINX Controller

NGINX Controller is a separate and optional product from NGINX, Inc. that manages the NGINX data plane and the entire life cycle of NGINX Plus under these configurations:

  • Load balancer

  • API gateway

  • Proxy in a service mesh environment

This optional and separate NGINX product is fully functional within Azure and provides an additional or exclusive way to manage NGINX without the use of Azure Security Center, Azure Monitor, or Azure Portal or PowerShell.

NGINX Web Application Firewall with ModSecurity 3.0

NGINX Web Application Firewall (WAF) is a separate and optional product from NGINX, Inc. that protects applications against sophisticated Layer 7 (L7) attacks that might otherwise lead to systems being taken over by attackers, loss of sensitive data, and downtime. NGINX WAF is based on the widely used ModSecurity open source software.

ModSecurity is an open source, cross-platform WAF module. Known as the “Swiss Army Knife” of WAFs, it enables web application defenders to gain visibility into HTTP(S) traffic and provides a power rules language and API to implement advanced protections.

Microsoft Azure Firewall Integration into a Load-Balancing Solution

Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It is a fully stateful Firewall-as-a-Service with built-in high availability and unrestricted cloud scalability. You can centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks.

You can integrate Azure Firewall in an end-to-end solution for a business application along with NGINX with the resulting data fed into Azure Monitor.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.17.23.130