Category: Knowledge Base
-

NGINX Routing on HTTP Request Body
Note: Written by a human. In blog diagram graphic made by AI. NGINX processes HTTP requests in phases. Each phase is designed for specific actions and decisions on the qualities of the request. However, reading of various parts of the request is spread out through multiple phases. A HTTP request consists of several distinct parts.…
-

HTTP Strict Transport Security Policy in NGINX Ingress Controller
NGINX Ingress Controller 5.6.0 introduces HSTS as a Policy type for the VirtualServer CRD. This blog gives a quick overview of the feature with some deployment examples and tips on how to correctly configure this policy. Across this blog, we’re focused on: What is HSTS? HTTP Strict Transport Security (HSTS) is a security feature that…
-

Predicate Routing for Native Handling of API Traffic
Note: No AI was hurt while writing this blog post. Human tears only. In September 2026 we introduced NGINX 1.31.5 with several core features for one same goal. We expanded the core routing methods and the most critical nginx directives to enable native, non-scripted routing of any API traffic. In this blog post we will…
-

External Authentication Policy in NGINX Ingress Controller: A Real World Use Case
NGINX Ingress Controller 5.5.0 introduced the ExternalAuth Policy. This is the second blog post in a two part series that covers the ExternalAuth Policy, and is focused on a real world use…
-
External Authentication Policy in NGINX Ingress Controller: Patterns for VirtualServer and Ingress
NGINX Ingress Controller 5.5.0 introduced the ExternalAuth Policy. This is the first blog post in a two part series that covers the ExternalAuth Policy, and is focused on how the policy…
-

mTLS Policies in NGINX Ingress Controller
NGINX Ingress Controller 5.5 brings full support for mTLS in Ingress objects! This blog post gives a more in-depth overview of our GitHub deployment examples and shows how to configure both our new ingress and egress mTLS Policy CRDs in NGINX Ingress Controller using annotations. Ingress mTLS Ingress mTLS configures how NGINX verifies client certificates…
-

Built for Change: How NGINX Ingress Controller and NGINX Gateway Fabric Handle Kubernetes Backend Changes Natively
Kubernetes applications are designed to change constantly. Pods scale out, roll forward, restart, and disappear, so the traffic layer has to keep pace with a backend set that is never truly static. That is the backdrop for both NGINX Ingress Controller (NIC) and NGINX Gateway Fabric (NGF). In both cases, Kubernetes is the source of…
