DevOps AcademyLearn the delivery system
Course structure available

Stage 08 · Web Delivery & Networking

NGINX Complete Course

Master NGINX from HTTP serving and configuration through reverse proxying, TLS, caching, load balancing, HTTP/2, HTTP/3, TCP/UDP proxying, security, observability, Kubernetes integration, and production performance.

Browse curriculum View all chapters
NGX
44chapters
220lessons
Intermediatestarting level
Hands-onlearning mode
Course stateCurriculum ready

Course brief

A complete NGINX curriculum for high-performance web serving, reverse proxying, traffic management, TLS termination, caching, security, and resilient production delivery.

This course is organized as a progressive operational curriculum. Lesson files are reserved in the repository structure so future content can be added without changing URLs or navigation.

By the end

You will be able to

  • Configure NGINX safely and understand its event-driven worker architecture
  • Serve static content and proxy HTTP, WebSocket, gRPC, FastCGI, and application traffic
  • Design TLS, HTTP/2, HTTP/3, caching, rate limiting, and load-balancing policies
  • Operate NGINX for TCP/UDP services, Kubernetes, observability, and zero-downtime changes
  • Harden, tune, troubleshoot, and scale NGINX in production

Complete syllabus

44 chapters in prerequisite order.

The structure goes beyond a command reference and includes architecture, security, reliability, troubleshooting, automation, governance, and production operations.

01

Chapter 1

NGINX Foundations, Web Delivery Roles, Editions, and Ecosystem

5 lessons
01
NGINX Foundations, Web Delivery Roles, Editions, and Ecosystem: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
NGINX Foundations, Web Delivery Roles, Editions, and Ecosystem: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
NGINX Foundations, Web Delivery Roles, Editions, and Ecosystem: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
NGINX Foundations, Web Delivery Roles, Editions, and Ecosystem: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — NGINX Foundations, Web Delivery Roles, Editions, and EcosystemReserved in course structure
Planned
02

Chapter 2

NGINX 1.30 Stable vs 1.31 Mainline, Release Strategy, and Upgrade Planning

5 lessons
01
NGINX 1.30 Stable vs 1.31 Mainline, Release Strategy, and Upgrade Planning: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
NGINX 1.30 Stable vs 1.31 Mainline, Release Strategy, and Upgrade Planning: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
NGINX 1.30 Stable vs 1.31 Mainline, Release Strategy, and Upgrade Planning: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
NGINX 1.30 Stable vs 1.31 Mainline, Release Strategy, and Upgrade Planning: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — NGINX 1.30 Stable vs 1.31 Mainline, Release Strategy, and Upgrade PlanningReserved in course structure
Planned
03

Chapter 3

Installing NGINX, Package Repositories, Source Builds, and Lab Setup

5 lessons
01
Installing NGINX, Package Repositories, Source Builds, and Lab Setup: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Installing NGINX, Package Repositories, Source Builds, and Lab Setup: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Installing NGINX, Package Repositories, Source Builds, and Lab Setup: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Installing NGINX, Package Repositories, Source Builds, and Lab Setup: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Installing NGINX, Package Repositories, Source Builds, and Lab SetupReserved in course structure
Planned
04

Chapter 4

Master/Worker Architecture, Event Loop, Connections, and Request Processing

5 lessons
01
Master/Worker Architecture, Event Loop, Connections, and Request Processing: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Master/Worker Architecture, Event Loop, Connections, and Request Processing: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Master/Worker Architecture, Event Loop, Connections, and Request Processing: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Master/Worker Architecture, Event Loop, Connections, and Request Processing: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Master/Worker Architecture, Event Loop, Connections, and Request ProcessingReserved in course structure
Planned
05

Chapter 5

Configuration Files, Directives, Contexts, Includes, Inheritance, and Validation

5 lessons
01
Configuration Files, Directives, Contexts, Includes, Inheritance, and Validation: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Configuration Files, Directives, Contexts, Includes, Inheritance, and Validation: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Configuration Files, Directives, Contexts, Includes, Inheritance, and Validation: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Configuration Files, Directives, Contexts, Includes, Inheritance, and Validation: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Configuration Files, Directives, Contexts, Includes, Inheritance, and ValidationReserved in course structure
Planned
06

Chapter 6

Server Blocks, listen, server_name, Virtual Hosts, and Request Selection

5 lessons
01
Server Blocks, listen, server_name, Virtual Hosts, and Request Selection: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Server Blocks, listen, server_name, Virtual Hosts, and Request Selection: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Server Blocks, listen, server_name, Virtual Hosts, and Request Selection: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Server Blocks, listen, server_name, Virtual Hosts, and Request Selection: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Server Blocks, listen, server_name, Virtual Hosts, and Request SelectionReserved in course structure
Planned
07

Chapter 7

URI Processing, location Matching, Prefix, Regex, and Selection Rules

5 lessons
01
URI Processing, location Matching, Prefix, Regex, and Selection Rules: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
URI Processing, location Matching, Prefix, Regex, and Selection Rules: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
URI Processing, location Matching, Prefix, Regex, and Selection Rules: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
URI Processing, location Matching, Prefix, Regex, and Selection Rules: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — URI Processing, location Matching, Prefix, Regex, and Selection RulesReserved in course structure
Planned
08

Chapter 8

Static Files, root, alias, index, try_files, MIME Types, and Error Pages

5 lessons
01
Static Files, root, alias, index, try_files, MIME Types, and Error Pages: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Static Files, root, alias, index, try_files, MIME Types, and Error Pages: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Static Files, root, alias, index, try_files, MIME Types, and Error Pages: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Static Files, root, alias, index, try_files, MIME Types, and Error Pages: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Static Files, root, alias, index, try_files, MIME Types, and Error PagesReserved in course structure
Planned
09

Chapter 9

Logging Fundamentals: access_log, error_log, Formats, Variables, and Rotation

5 lessons
01
Logging Fundamentals: access_log, error_log, Formats, Variables, and Rotation: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Logging Fundamentals: access_log, error_log, Formats, Variables, and Rotation: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Logging Fundamentals: access_log, error_log, Formats, Variables, and Rotation: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Logging Fundamentals: access_log, error_log, Formats, Variables, and Rotation: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Logging Fundamentals: access_log, error_log, Formats, Variables, and RotationReserved in course structure
Planned
10

Chapter 10

Reverse Proxy Fundamentals, proxy_pass, Headers, Buffers, and Timeouts

5 lessons
01
Reverse Proxy Fundamentals, proxy_pass, Headers, Buffers, and Timeouts: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Reverse Proxy Fundamentals, proxy_pass, Headers, Buffers, and Timeouts: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Reverse Proxy Fundamentals, proxy_pass, Headers, Buffers, and Timeouts: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Reverse Proxy Fundamentals, proxy_pass, Headers, Buffers, and Timeouts: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Reverse Proxy Fundamentals, proxy_pass, Headers, Buffers, and TimeoutsReserved in course structure
Planned
11

Chapter 11

Upstream Groups, Load Balancing, Weights, Health Concepts, and Keepalive

5 lessons
01
Upstream Groups, Load Balancing, Weights, Health Concepts, and Keepalive: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Upstream Groups, Load Balancing, Weights, Health Concepts, and Keepalive: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Upstream Groups, Load Balancing, Weights, Health Concepts, and Keepalive: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Upstream Groups, Load Balancing, Weights, Health Concepts, and Keepalive: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Upstream Groups, Load Balancing, Weights, Health Concepts, and KeepaliveReserved in course structure
Planned
12

Chapter 12

Round Robin, least_conn, ip_hash, hash, Sticky Concepts, and Session Affinity

5 lessons
01
Round Robin, least_conn, ip_hash, hash, Sticky Concepts, and Session Affinity: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Round Robin, least_conn, ip_hash, hash, Sticky Concepts, and Session Affinity: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Round Robin, least_conn, ip_hash, hash, Sticky Concepts, and Session Affinity: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Round Robin, least_conn, ip_hash, hash, Sticky Concepts, and Session Affinity: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Round Robin, least_conn, ip_hash, hash, Sticky Concepts, and Session AffinityReserved in course structure
Planned
13

Chapter 13

Proxy HTTP Versions, Keep-Alive, Connection Reuse, and Backend Efficiency

5 lessons
01
Proxy HTTP Versions, Keep-Alive, Connection Reuse, and Backend Efficiency: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Proxy HTTP Versions, Keep-Alive, Connection Reuse, and Backend Efficiency: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Proxy HTTP Versions, Keep-Alive, Connection Reuse, and Backend Efficiency: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Proxy HTTP Versions, Keep-Alive, Connection Reuse, and Backend Efficiency: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Proxy HTTP Versions, Keep-Alive, Connection Reuse, and Backend EfficiencyReserved in course structure
Planned
14

Chapter 14

WebSocket Proxying, Upgrade Headers, Timeouts, and Long-Lived Connections

5 lessons
01
WebSocket Proxying, Upgrade Headers, Timeouts, and Long-Lived Connections: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
WebSocket Proxying, Upgrade Headers, Timeouts, and Long-Lived Connections: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
WebSocket Proxying, Upgrade Headers, Timeouts, and Long-Lived Connections: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
WebSocket Proxying, Upgrade Headers, Timeouts, and Long-Lived Connections: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — WebSocket Proxying, Upgrade Headers, Timeouts, and Long-Lived ConnectionsReserved in course structure
Planned
15

Chapter 15

gRPC and HTTP/2 Backend Proxying, grpc_pass, and Service Delivery

5 lessons
01
gRPC and HTTP/2 Backend Proxying, grpc_pass, and Service Delivery: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
gRPC and HTTP/2 Backend Proxying, grpc_pass, and Service Delivery: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
gRPC and HTTP/2 Backend Proxying, grpc_pass, and Service Delivery: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
gRPC and HTTP/2 Backend Proxying, grpc_pass, and Service Delivery: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — gRPC and HTTP/2 Backend Proxying, grpc_pass, and Service DeliveryReserved in course structure
Planned
16

Chapter 16

FastCGI, PHP-FPM, uwsgi, SCGI, and Application Server Integration

5 lessons
01
FastCGI, PHP-FPM, uwsgi, SCGI, and Application Server Integration: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
FastCGI, PHP-FPM, uwsgi, SCGI, and Application Server Integration: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
FastCGI, PHP-FPM, uwsgi, SCGI, and Application Server Integration: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
FastCGI, PHP-FPM, uwsgi, SCGI, and Application Server Integration: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — FastCGI, PHP-FPM, uwsgi, SCGI, and Application Server IntegrationReserved in course structure
Planned
17

Chapter 17

TLS Foundations, Certificates, Private Keys, Protocols, Ciphers, and Handshakes

5 lessons
01
TLS Foundations, Certificates, Private Keys, Protocols, Ciphers, and Handshakes: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
TLS Foundations, Certificates, Private Keys, Protocols, Ciphers, and Handshakes: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
TLS Foundations, Certificates, Private Keys, Protocols, Ciphers, and Handshakes: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
TLS Foundations, Certificates, Private Keys, Protocols, Ciphers, and Handshakes: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — TLS Foundations, Certificates, Private Keys, Protocols, Ciphers, and HandshakesReserved in course structure
Planned
18

Chapter 18

TLS Configuration, Session Reuse, OCSP, Stapling Concepts, and Modern Hardening

5 lessons
01
TLS Configuration, Session Reuse, OCSP, Stapling Concepts, and Modern Hardening: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
TLS Configuration, Session Reuse, OCSP, Stapling Concepts, and Modern Hardening: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
TLS Configuration, Session Reuse, OCSP, Stapling Concepts, and Modern Hardening: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
TLS Configuration, Session Reuse, OCSP, Stapling Concepts, and Modern Hardening: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — TLS Configuration, Session Reuse, OCSP, Stapling Concepts, and Modern HardeningReserved in course structure
Planned
19

Chapter 19

ACME Automation, nginx-acme Concepts, Certificate Renewal, and Operational Safety

5 lessons
01
ACME Automation, nginx-acme Concepts, Certificate Renewal, and Operational Safety: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
ACME Automation, nginx-acme Concepts, Certificate Renewal, and Operational Safety: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
ACME Automation, nginx-acme Concepts, Certificate Renewal, and Operational Safety: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
ACME Automation, nginx-acme Concepts, Certificate Renewal, and Operational Safety: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — ACME Automation, nginx-acme Concepts, Certificate Renewal, and Operational SafetyReserved in course structure
Planned
20

Chapter 20

HTTP/2 Serving, Multiplexing, Priorities, and Configuration Considerations

5 lessons
01
HTTP/2 Serving, Multiplexing, Priorities, and Configuration Considerations: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
HTTP/2 Serving, Multiplexing, Priorities, and Configuration Considerations: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
HTTP/2 Serving, Multiplexing, Priorities, and Configuration Considerations: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
HTTP/2 Serving, Multiplexing, Priorities, and Configuration Considerations: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — HTTP/2 Serving, Multiplexing, Priorities, and Configuration ConsiderationsReserved in course structure
Planned
21

Chapter 21

HTTP/3 and QUIC, UDP Requirements, TLS 1.3, and Deployment Considerations

5 lessons
01
HTTP/3 and QUIC, UDP Requirements, TLS 1.3, and Deployment Considerations: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
HTTP/3 and QUIC, UDP Requirements, TLS 1.3, and Deployment Considerations: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
HTTP/3 and QUIC, UDP Requirements, TLS 1.3, and Deployment Considerations: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
HTTP/3 and QUIC, UDP Requirements, TLS 1.3, and Deployment Considerations: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — HTTP/3 and QUIC, UDP Requirements, TLS 1.3, and Deployment ConsiderationsReserved in course structure
Planned
22

Chapter 22

Caching Fundamentals, proxy_cache, Keys, Zones, Validity, and Cache Status

5 lessons
01
Caching Fundamentals, proxy_cache, Keys, Zones, Validity, and Cache Status: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Caching Fundamentals, proxy_cache, Keys, Zones, Validity, and Cache Status: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Caching Fundamentals, proxy_cache, Keys, Zones, Validity, and Cache Status: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Caching Fundamentals, proxy_cache, Keys, Zones, Validity, and Cache Status: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Caching Fundamentals, proxy_cache, Keys, Zones, Validity, and Cache StatusReserved in course structure
Planned
23

Chapter 23

Advanced Caching, Revalidation, Stale Content, Locking, Bypass, and Purging Concepts

5 lessons
01
Advanced Caching, Revalidation, Stale Content, Locking, Bypass, and Purging Concepts: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Advanced Caching, Revalidation, Stale Content, Locking, Bypass, and Purging Concepts: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Advanced Caching, Revalidation, Stale Content, Locking, Bypass, and Purging Concepts: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Advanced Caching, Revalidation, Stale Content, Locking, Bypass, and Purging Concepts: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Advanced Caching, Revalidation, Stale Content, Locking, Bypass, and Purging ConceptsReserved in course structure
Planned
24

Chapter 24

Compression, gzip, Brotli Awareness, Static Assets, and Content Optimization

5 lessons
01
Compression, gzip, Brotli Awareness, Static Assets, and Content Optimization: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Compression, gzip, Brotli Awareness, Static Assets, and Content Optimization: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Compression, gzip, Brotli Awareness, Static Assets, and Content Optimization: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Compression, gzip, Brotli Awareness, Static Assets, and Content Optimization: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Compression, gzip, Brotli Awareness, Static Assets, and Content OptimizationReserved in course structure
Planned
25

Chapter 25

Rewrites, return, rewrite, map, Variables, and Safe Request Transformation

5 lessons
01
Rewrites, return, rewrite, map, Variables, and Safe Request Transformation: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Rewrites, return, rewrite, map, Variables, and Safe Request Transformation: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Rewrites, return, rewrite, map, Variables, and Safe Request Transformation: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Rewrites, return, rewrite, map, Variables, and Safe Request Transformation: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Rewrites, return, rewrite, map, Variables, and Safe Request TransformationReserved in course structure
Planned
26

Chapter 26

Authentication, Basic Auth, auth_request, JWT Concepts, and External Identity

5 lessons
01
Authentication, Basic Auth, auth_request, JWT Concepts, and External Identity: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Authentication, Basic Auth, auth_request, JWT Concepts, and External Identity: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Authentication, Basic Auth, auth_request, JWT Concepts, and External Identity: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Authentication, Basic Auth, auth_request, JWT Concepts, and External Identity: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Authentication, Basic Auth, auth_request, JWT Concepts, and External IdentityReserved in course structure
Planned
27

Chapter 27

Access Control, allow/deny, Geo, Maps, CORS, Headers, and Browser Security

5 lessons
01
Access Control, allow/deny, Geo, Maps, CORS, Headers, and Browser Security: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Access Control, allow/deny, Geo, Maps, CORS, Headers, and Browser Security: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Access Control, allow/deny, Geo, Maps, CORS, Headers, and Browser Security: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Access Control, allow/deny, Geo, Maps, CORS, Headers, and Browser Security: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Access Control, allow/deny, Geo, Maps, CORS, Headers, and Browser SecurityReserved in course structure
Planned
28

Chapter 28

Rate Limiting, Connection Limiting, Burst Control, and Abuse Protection

5 lessons
01
Rate Limiting, Connection Limiting, Burst Control, and Abuse Protection: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Rate Limiting, Connection Limiting, Burst Control, and Abuse Protection: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Rate Limiting, Connection Limiting, Burst Control, and Abuse Protection: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Rate Limiting, Connection Limiting, Burst Control, and Abuse Protection: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Rate Limiting, Connection Limiting, Burst Control, and Abuse ProtectionReserved in course structure
Planned
29

Chapter 29

Request Body Limits, Buffering, Timeouts, Slow Clients, and DoS Resistance

5 lessons
01
Request Body Limits, Buffering, Timeouts, Slow Clients, and DoS Resistance: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Request Body Limits, Buffering, Timeouts, Slow Clients, and DoS Resistance: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Request Body Limits, Buffering, Timeouts, Slow Clients, and DoS Resistance: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Request Body Limits, Buffering, Timeouts, Slow Clients, and DoS Resistance: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Request Body Limits, Buffering, Timeouts, Slow Clients, and DoS ResistanceReserved in course structure
Planned
30

Chapter 30

Stream Module, TCP Proxying, UDP Proxying, SNI Routing, and Layer-4 Load Balancing

5 lessons
01
Stream Module, TCP Proxying, UDP Proxying, SNI Routing, and Layer-4 Load Balancing: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Stream Module, TCP Proxying, UDP Proxying, SNI Routing, and Layer-4 Load Balancing: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Stream Module, TCP Proxying, UDP Proxying, SNI Routing, and Layer-4 Load Balancing: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Stream Module, TCP Proxying, UDP Proxying, SNI Routing, and Layer-4 Load Balancing: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Stream Module, TCP Proxying, UDP Proxying, SNI Routing, and Layer-4 Load BalancingReserved in course structure
Planned
31

Chapter 31

Mail Proxy Module, SMTP/IMAP/POP3 Concepts, and Authentication Integration

5 lessons
01
Mail Proxy Module, SMTP/IMAP/POP3 Concepts, and Authentication Integration: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Mail Proxy Module, SMTP/IMAP/POP3 Concepts, and Authentication Integration: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Mail Proxy Module, SMTP/IMAP/POP3 Concepts, and Authentication Integration: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Mail Proxy Module, SMTP/IMAP/POP3 Concepts, and Authentication Integration: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Mail Proxy Module, SMTP/IMAP/POP3 Concepts, and Authentication IntegrationReserved in course structure
Planned
32

Chapter 32

njs and QuickJS, Dynamic Request Logic, Fetch, Crypto, and Extension Patterns

5 lessons
01
njs and QuickJS, Dynamic Request Logic, Fetch, Crypto, and Extension Patterns: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
njs and QuickJS, Dynamic Request Logic, Fetch, Crypto, and Extension Patterns: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
njs and QuickJS, Dynamic Request Logic, Fetch, Crypto, and Extension Patterns: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
njs and QuickJS, Dynamic Request Logic, Fetch, Crypto, and Extension Patterns: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — njs and QuickJS, Dynamic Request Logic, Fetch, Crypto, and Extension PatternsReserved in course structure
Planned
33

Chapter 33

Dynamic Modules, Built-In Modules, Module Compatibility, and Packaging

5 lessons
01
Dynamic Modules, Built-In Modules, Module Compatibility, and Packaging: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Dynamic Modules, Built-In Modules, Module Compatibility, and Packaging: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Dynamic Modules, Built-In Modules, Module Compatibility, and Packaging: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Dynamic Modules, Built-In Modules, Module Compatibility, and Packaging: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Dynamic Modules, Built-In Modules, Module Compatibility, and PackagingReserved in course structure
Planned
34

Chapter 34

DNS Resolution, resolver, Dynamic Backends, Service Discovery, and Containers

5 lessons
01
DNS Resolution, resolver, Dynamic Backends, Service Discovery, and Containers: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
DNS Resolution, resolver, Dynamic Backends, Service Discovery, and Containers: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
DNS Resolution, resolver, Dynamic Backends, Service Discovery, and Containers: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
DNS Resolution, resolver, Dynamic Backends, Service Discovery, and Containers: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — DNS Resolution, resolver, Dynamic Backends, Service Discovery, and ContainersReserved in course structure
Planned
35

Chapter 35

Docker and Compose Deployment, Volumes, Config Injection, and Immutable Images

5 lessons
01
Docker and Compose Deployment, Volumes, Config Injection, and Immutable Images: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Docker and Compose Deployment, Volumes, Config Injection, and Immutable Images: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Docker and Compose Deployment, Volumes, Config Injection, and Immutable Images: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Docker and Compose Deployment, Volumes, Config Injection, and Immutable Images: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Docker and Compose Deployment, Volumes, Config Injection, and Immutable ImagesReserved in course structure
Planned
36

Chapter 36

Kubernetes NGINX Ingress Controller vs ingress-nginx, Architecture, and Trade-Offs

5 lessons
01
Kubernetes NGINX Ingress Controller vs ingress-nginx, Architecture, and Trade-Offs: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Kubernetes NGINX Ingress Controller vs ingress-nginx, Architecture, and Trade-Offs: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Kubernetes NGINX Ingress Controller vs ingress-nginx, Architecture, and Trade-Offs: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Kubernetes NGINX Ingress Controller vs ingress-nginx, Architecture, and Trade-Offs: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Kubernetes NGINX Ingress Controller vs ingress-nginx, Architecture, and Trade-OffsReserved in course structure
Planned
37

Chapter 37

NGINX Gateway Fabric, Kubernetes Gateway API, Routes, Policies, and L4/L7 Delivery

5 lessons
01
NGINX Gateway Fabric, Kubernetes Gateway API, Routes, Policies, and L4/L7 Delivery: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
NGINX Gateway Fabric, Kubernetes Gateway API, Routes, Policies, and L4/L7 Delivery: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
NGINX Gateway Fabric, Kubernetes Gateway API, Routes, Policies, and L4/L7 Delivery: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
NGINX Gateway Fabric, Kubernetes Gateway API, Routes, Policies, and L4/L7 Delivery: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — NGINX Gateway Fabric, Kubernetes Gateway API, Routes, Policies, and L4/L7 DeliveryReserved in course structure
Planned
38

Chapter 38

Metrics, Stub Status, Access Logs, Prometheus Exporters, and Observability

5 lessons
01
Metrics, Stub Status, Access Logs, Prometheus Exporters, and Observability: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Metrics, Stub Status, Access Logs, Prometheus Exporters, and Observability: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Metrics, Stub Status, Access Logs, Prometheus Exporters, and Observability: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Metrics, Stub Status, Access Logs, Prometheus Exporters, and Observability: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Metrics, Stub Status, Access Logs, Prometheus Exporters, and ObservabilityReserved in course structure
Planned
39

Chapter 39

Zero-Downtime Reloads, Binary Upgrades, Signals, PID Files, and Process Control

5 lessons
01
Zero-Downtime Reloads, Binary Upgrades, Signals, PID Files, and Process Control: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Zero-Downtime Reloads, Binary Upgrades, Signals, PID Files, and Process Control: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Zero-Downtime Reloads, Binary Upgrades, Signals, PID Files, and Process Control: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Zero-Downtime Reloads, Binary Upgrades, Signals, PID Files, and Process Control: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Zero-Downtime Reloads, Binary Upgrades, Signals, PID Files, and Process ControlReserved in course structure
Planned
40

Chapter 40

Performance Tuning: Workers, Connections, File I/O, Buffers, Caching, and Kernel Limits

5 lessons
01
Performance Tuning: Workers, Connections, File I/O, Buffers, Caching, and Kernel Limits: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Performance Tuning: Workers, Connections, File I/O, Buffers, Caching, and Kernel Limits: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Performance Tuning: Workers, Connections, File I/O, Buffers, Caching, and Kernel Limits: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Performance Tuning: Workers, Connections, File I/O, Buffers, Caching, and Kernel Limits: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Performance Tuning: Workers, Connections, File I/O, Buffers, Caching, and Kernel LimitsReserved in course structure
Planned
41

Chapter 41

Troubleshooting 4xx/5xx, Upstreams, TLS, DNS, Performance, and Debug Logging

5 lessons
01
Troubleshooting 4xx/5xx, Upstreams, TLS, DNS, Performance, and Debug Logging: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Troubleshooting 4xx/5xx, Upstreams, TLS, DNS, Performance, and Debug Logging: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Troubleshooting 4xx/5xx, Upstreams, TLS, DNS, Performance, and Debug Logging: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Troubleshooting 4xx/5xx, Upstreams, TLS, DNS, Performance, and Debug Logging: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Troubleshooting 4xx/5xx, Upstreams, TLS, DNS, Performance, and Debug LoggingReserved in course structure
Planned
42

Chapter 42

Security Patching, CVE Response, Supply Chain, Permissions, Chroot/Containers, and Hardening

5 lessons
01
Security Patching, CVE Response, Supply Chain, Permissions, Chroot/Containers, and Hardening: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
Security Patching, CVE Response, Supply Chain, Permissions, Chroot/Containers, and Hardening: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
Security Patching, CVE Response, Supply Chain, Permissions, Chroot/Containers, and Hardening: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
Security Patching, CVE Response, Supply Chain, Permissions, Chroot/Containers, and Hardening: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — Security Patching, CVE Response, Supply Chain, Permissions, Chroot/Containers, and HardeningReserved in course structure
Planned
43

Chapter 43

High Availability, Failover, Anycast/LB Frontends, Config Delivery, and DR Patterns

5 lessons
01
High Availability, Failover, Anycast/LB Frontends, Config Delivery, and DR Patterns: Concepts, Vocabulary, and Mental ModelReserved in course structure
Planned
02
High Availability, Failover, Anycast/LB Frontends, Config Delivery, and DR Patterns: Guided Configuration and Hands-On WorkflowReserved in course structure
Planned
03
High Availability, Failover, Anycast/LB Frontends, Config Delivery, and DR Patterns: Design Patterns, Trade-Offs, and Production DecisionsReserved in course structure
Planned
04
High Availability, Failover, Anycast/LB Frontends, Config Delivery, and DR Patterns: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure
Planned
05
Checkpoint Lab — High Availability, Failover, Anycast/LB Frontends, Config Delivery, and DR PatternsReserved in course structure
Planned
44

Chapter 44

Production Capstone: Design, Secure, Observe, Tune, and Recover a Multi-Service NGINX Edge

5 lessons
01
Capstone Requirements, Architecture, Threat Model, and Success CriteriaReserved in course structure
Planned
02
Build the End-to-End Environment — Design, Secure, Observe, Tune, and Recover a Multi-Service NGINX EdgeReserved in course structure
Planned
03
Integrate Automation, Security Controls, Observability, and GovernanceReserved in course structure
Planned
04
Inject Failures, Diagnose Behavior, Recover Safely, and Verify StateReserved in course structure
Planned
05
Final Validation, Runbook, Operational Handoff, and Improvement BacklogReserved in course structure
Planned

Keep the academy open

Support free, practical DevOps education.

Every lesson is designed to remain readable in a browser, downloadable from GitHub, and usable without a paid learning platform. Contributions help expand and maintain the curriculum.

Ethereum / ERC-20
0x716c4Ab160C4B66F31a28AE2448BfF68fc3a2ef0 Send only Ethereum/ERC-20 compatible assets to this address.