Cheatsheet Nginx
// Structured learning part for Cheatsheet Nginx covering Status Seri.
This overview is designed to help you choose the right entry point quickly. Follow the full track from lesson one, continue from your last checkpoint, or jump straight into a phase that matches what you need right now.
Curriculum Map
Navigate by phase, then choose the lesson that matches your current depth.
NGINX Foundation
19 minMemahami posisi NGINX sebagai reverse proxy, web server, load balancer, TLS termination layer, API edge, dan traffic management component.
NGINX Positioning
21 minMembedakan NGINX dari komponen traffic management lain dan memahami kapan NGINX tepat atau tidak tepat digunakan.
Request Lifecycle and Traffic Flow
19 minMembangun mental model request lifecycle dari client, DNS, TCP, TLS, NGINX, Kubernetes service, pod, hingga JAX-RS endpoint.
NGINX Configuration Model
19 minMemahami struktur nginx.conf, context hierarchy, directive inheritance, precedence, include files, dan safe configuration layout.
Server Block and Virtual Hosting
16 minMemahami server block, server_name, default server, Host header, SNI, port binding, dan routing berbasis hostname.
Location Matching Deep Dive
16 minMemahami exact, prefix, regex, ^~, rewrite, trailing slash, path normalization, dan kesalahan routing umum.
Reverse Proxy for Java/JAX-RS
14 minMendesain NGINX sebagai reverse proxy di depan Java/JAX-RS service dengan header, path, redirect, dan error propagation yang benar.
HTTP Semantics and Proxy Behavior
14 minMemahami bagaimana NGINX memengaruhi method, status code, headers, CORS, content negotiation, conditional request, dan HTTP version.
TLS and HTTPS
16 minMemahami TLS termination, passthrough, re-encryption, SNI, ALPN, certificate chain, rotation, HSTS, dan common TLS failure.
Mutual TLS and Internal Trust
17 minMemahami mTLS, client certificate validation, trusted CA, upstream HTTPS, self-signed internal CA, dan trust boundary.
Load Balancing and Upstream
15 minMemahami upstream block, load balancing algorithm, health behavior, keepalive, failover, DNS upstream, dan Kubernetes Service sebagai upstream.
Timeout, Retry, and Failure
15 minMemahami timeout di client, NGINX, load balancer, Kubernetes, dan Java service serta dampaknya terhadap 408, 499, 502, 503, dan 504.
Buffering and Payload Handling
13 minMemahami request buffering, response buffering, streaming, upload besar, file download, temporary file, dan backpressure.
Real-Time Traffic
11 minMemahami proxy behavior untuk WebSocket, Server-Sent Events, long polling, idle timeout, buffering, dan long-lived connections.
gRPC and HTTP/2
8 minMemahami gRPC over HTTP/2, h2, h2c, grpc_pass, ALPN, streaming gRPC, backend protocol, dan observability.
Compression and Caching
9 minMemahami gzip, brotli jika digunakan, proxy cache, cache key, stale cache, static asset serving, dan risiko cache poisoning.
Security Hardening
9 minMemahami request limits, header limits, method restriction, path protection, Host header risk, SSRF mitigation, security headers, dan secure default server.
Rate Limiting and Traffic Protection
9 minMemahami limit_req, limit_conn, token bucket, burst, nodelay, per-IP/per-user/per-tenant limit, 429, dan Retry-After.
Edge Authentication and Authorization
7 minMemahami basic auth, auth_request, external auth, OIDC proxy pattern, JWT validation, mTLS identity, identity headers, dan trust boundary.