SERIES_OVERVIEW // CURRICULUM_MAP

Cheatsheet Nginx V2

// Structured learning part for Cheatsheet Nginx V2 covering Status Seri.

35 Lessons1219 Min Total04 Phases

This overview is designed to help you choose the right entry point quickly. Follow the full track from lesson one, continue from your last checkpoint, or jump straight into a phase that matches what you need right now.

Start From First Lesson Open Curriculum Map

429499502503504+162 more

Phase 01 · Start Here Phase 02 · Build Core Phase 03 · Deepen Practice Phase 04 · Final Stretch

Curriculum Map

Navigate by phase, then choose the lesson that matches your current depth.

NGINX Foundation: Role, Variants, and When to Use It

33 min

Membangun mental model NGINX, varian produknya, posisi arsitekturalnya, dan batas tanggung jawabnya dalam enterprise Java systems.

Request Lifecycle: Client → DNS → Load Balancer → NGINX → Service → Pod → JAX-RS

38 min

Menelusuri request dari client hingga JAX-RS endpoint dan kembali, termasuk latency, connection, proxy, dan failure boundaries.

Configuration Mental Model: Context, Inheritance, Includes, and Reload

25 min

Memahami struktur konfigurasi, scope directive, inheritance, evaluation, validation, dan lifecycle proses NGINX.

Server Blocks, Virtual Hosts, and Location Matching

23 min

Menguasai server selection, host/SNI relationship, location algorithm, path normalization, rewrite, dan routing ambiguity.

Reverse Proxy Contract with Java/JAX-RS Backends

29 min

Menghubungkan proxy behavior dengan base URI, forwarded headers, redirects, real client identity, dan error handling Java/JAX-RS.

HTTP Semantics at the Proxy Layer

33 min

Menilai bagaimana NGINX dapat mempertahankan atau merusak HTTP semantics, compatibility, dan protocol negotiation.

TLS Architecture: Termination, Re-encryption, mTLS, and Certificates

36 min

Memahami TLS termination, passthrough, re-encryption, trust chains, SNI, ALPN, certificate rotation, dan mTLS.

Upstreams, Load Balancing, Health, and Connection Pools

41 min

Mendalami upstream pools, balancing algorithms, health behavior, keepalive, DNS discovery, failover, dan feature gap Open Source/Plus.

Timeout Chains, Retry Semantics, and Gateway Failures

21 min

Membangun timeout budget end-to-end, retry safety, serta mental model 408/499/502/503/504.

Buffers, Streaming, Uploads, and Large Bodies

26 min

Memahami request/response buffering, temp files, backpressure, uploads, downloads, SSE, WebSocket, dan memory/disk impact.

Compression, Proxy Caching, and Static Content

29 min

Menguasai gzip/brotli, proxy cache, validators, static assets, SPA delivery, dan cache-related security failures.

NGINX Security Hardening and Abuse Resistance

33 min

Membangun secure defaults untuk request parsing, paths, headers, methods, IP controls, WAF, dan log privacy.

Rate Limits, Connection Limits, and Traffic Shaping

31 min

Memahami token-bucket behavior, keys, burst, concurrency limits, distributed limitations, dan protection strategy untuk Java services.

Authentication at the Edge and Authorization Boundaries

43 min

Menempatkan basic auth, auth_request, OIDC proxies, JWT, mTLS identity, dan application authorization pada boundary yang benar.

Access Logs, Error Logs, Metrics, and Trace Correlation

45 min

Membangun telemetry yang dapat memisahkan client, NGINX, network, Kubernetes, dan upstream latency/failure.

Performance Engineering: Workers, Connections, Buffers, and Capacity

44 min

Menghubungkan event loop, workers, file descriptors, connections, buffers, TLS, CPU, memory, disk, network, Kubernetes, dan load testing.

Containerized NGINX: Image, Config, Signals, and Hardening

44 min

Mengoperasikan NGINX secara aman sebagai container, termasuk config injection, signals, health, non-root, storage, dan sidecar.

Kubernetes Ingress and NGINX Controller Fundamentals

48 min

Membangun model control plane/data plane Ingress, controller resources, Services, TLS Secrets, classes, scaling, dan availability.

Ingress Routing: Hosts, Paths, Protocols, Conflicts, and Canary

40 min

Mendalami host/path rules, pathType, regex/rewrite, backend protocols, affinity, canary, conflicts, namespace, dan troubleshooting.

Annotations, Global Config, Precedence, and Governance

41 min

Mengelola configuration surface antara global defaults, per-Ingress overrides, snippets, admission policy, dan platform standards.

Choosing Ingress, Gateway API, API Gateway, or Service Mesh

38 min

Membandingkan Ingress, Gateway API, cloud/API management, and service mesh berdasarkan traffic direction, policy, ownership, and complexity.

AWS/EKS Traffic Flow: Route 53 → ALB/NLB → NGINX → Service → Pod

45 min

Menelusuri Route 53, ACM, ALB/NLB, target groups, VPC controls, Services, source IP, and ingress-nginx in EKS.

Azure/AKS Traffic Flow: DNS and Edge to NGINX and Pods

40 min

Menelusuri Azure DNS, Front Door, Application Gateway, Load Balancer, APIM, VNet controls, Services, and ingress in AKS.

On-Prem and Hybrid Traffic: DNS, DMZ, Firewalls, Proxies, and Private Kubernetes

41 min

Memodelkan enterprise DNS, DMZ, firewalls, L4/L7 chains, private clusters, internal PKI, proxy chaining, and cloud connectivity.

DNS Resolution, NGINX Resolver Behavior, and Service Discovery

27 min

Memahami DNS caching and re-resolution in NGINX, Kubernetes DNS, endpoint changes, split horizon, and stale-address failures.

Real-Time Traffic: WebSocket, SSE, and Long Polling

25 min

Mengoperasikan upgrade and streaming protocols dengan timeout, buffering, affinity, connection pressure, and graceful shutdown awareness.

gRPC and HTTP/2 Through NGINX

22 min

Memahami gRPC over h2/h2c, grpc_pass, status/trailers, deadlines, streaming, Kubernetes annotations, and observability.

Outbound Traffic: Corporate Proxies, Egress Controls, and NGINX Limits

24 min

Membedakan reverse and forward proxy, corporate egress, Java proxy settings, private endpoints, TLS inspection, and network policy.

NGINX Configuration as Code: Helm, Kustomize, CI, and GitOps

34 min

Membuat NGINX/Ingress changes reproducible, validated, promoted, drift-free, reviewable, and rollback-ready.

Safe NGINX Deployment, Canary Routing, and Zero-Downtime Change

38 min

Mengelola reload, rolling updates, canary, blue-green, mirroring, draining, compatibility, and blast radius.

Debugging NGINX and Ingress Failures Systematically

38 min

Menyediakan differential diagnosis untuk status, TLS, DNS, routing, headers, bodies, protocols, and Kubernetes evidence.

NGINX/Ingress Runbooks, Incident Command, and Recovery

36 min

Mengoperasionalkan alert triage, SLO impact, traffic spikes, outages, certificate/DNS/LB incidents, rollback, RCA, and prevention.

Security and Compliance Review Checklist for NGINX

37 min

Mengubah TLS, routing, auth, logs, secrets, images, and config controls menjadi reviewable compliance evidence.

Senior Engineer Review Framework for NGINX and Traffic Changes

33 min

Menyediakan review framework untuk routing, TLS, headers, timeouts, payloads, streaming, security, observability, performance, and rollback.

Final Part: NGINX Mastery Map and Production Readiness

38 min

Mengonsolidasikan mental model, production checklists, internal discovery map, and progression path untuk traffic-flow leadership.