NGINX
274 incident problems in NGINX environments.
먼저 읽을 가이드
추천 문제
All problems (274)
SECURITY-1404A hardened reverse proxy blocks all normal verbs and still leaks file...A hardened reverse proxy blocks all normal verbs and still leaks file... focuses on Identity And Access and asks the reader to isolate the key signal in NGINX. Security gaps often hide in old HTTP methods that were never exercised during stan...SecurityAdvanced13 minProK8S-1449A host-network ingress stays ready and still fails trafficHost-network ingress remains ready while user traffic fails after firewall automation changed.KubernetesAdvanced13 minProSECURITY-1394An NGINX auth_request flow protects GET and POST and one WebDAV verb bypasses...An NGINX auth_request flow protects GET and POST and one WebDAV verb... focuses on Identity And Access and asks the reader to isolate the key signal in NGINX. Rare HTTP verbs often follow older location trees and can bypass newer auth subrequ...SecurityAdvanced13 minProNETWORK-1455An NGINX stream SNI route sends traffic to the default upstreamA new privacy feature rollout sends traffic to the default upstream only on the stream ingress tier.NetworkAdvanced13 minProSECURITY-1342An OpenSearch dashboard login loopsA proxy hardening change improves cookie posture and later dashboard users get trapped in a login redirect loop.SecurityIntermediate13 minProSECURITY-1338An OpenSearch Dashboards login loop appearsAn OpenSearch Dashboards login loop appears focuses on Identity And Access and asks the reader to isolate the key signal in NGINX. Modern cookie defaults can break older federated flows even when every credential and endpoint is correct.SecurityIntermediate13 minProSECURITY-1352An OpenSearch SSO redirect loop appears after proxy hardeningA reverse proxy is hardened and later users become trapped in a dashboard login loop even though the identity provider is healthy.SecurityIntermediate13 minProNETWORK-1391A CDN hostname serves HTTP/2 cleanly and API uploads fail over HTTP/3Uploads fail only for clients that negotiate HTTP/3 while ordinary browsing and HTTP/2 API calls remain healthy.NetworkAdvanced14 minProSECURITY-1403A JWKS rotation finishes cleanly and token verification still fails on one...A JWKS rotation finishes cleanly and token verification still fails on one... focuses on Cache Control and asks the reader to isolate the key signal in NGINX. Key rotation failures often come from stale cache behavior, not from bad tokens...SecurityAdvanced14 minProSECURITY-1413A JWKS rotation succeeds and one edge still rejects valid tokensA JWKS rotation succeeds and one edge still rejects valid tokens focuses on Cache Control and asks the reader to isolate the key signal in NGINX. JWKS cache bugs can be path-scoped even when the issuer hostname is shared across applications.SecurityAdvanced14 minProSECURITY-1423A JWKS rotation succeeds and one edge tier still rejects valid tokensA JWKS rotation succeeds and one edge tier still rejects valid tokens focuses on Cache Control and asks the reader to isolate the key signal in NGINX. JWKS cache bugs can hide at the path level even when the issuer hostname is shared.SecurityAdvanced14 minProSECURITY-1433A JWKS rotation succeeds and one edge tier still rejects valid tokensA JWKS rotation succeeds and one edge tier still rejects valid tokens focuses on Cache Control and asks the reader to isolate the key signal in NGINX. JWKS cache issues can hide at the path level even when the issuer hostname is shared.SecurityAdvanced14 minProSECURITY-1443A JWKS rotation succeeds and one edge tier still rejects valid tokensOne application starts failing token validation after a key rotation while another under the same issuer still works.SecurityAdvanced14 minProSECURITY-1346A Netgate and CrowdSec style ban pipeline blocks the proxy addressA Netgate and CrowdSec style ban pipeline blocks the proxy address focuses on incident-response and asks the reader to isolate the key signal in NGINX. Source-IP based security automation breaks quickly when proxy trust boundaries...SecurityIntermediate14 minProNETWORK-1381A QUIC-enabled edge works for browsers and the enterprise proxy breaks API...A QUIC-enabled edge works for browsers and the enterprise proxy breaks API... focuses on incident-response and asks the reader to isolate the key signal in NGINX. Protocol negotiation bugs can hide in header mutation behavior that differs...NetworkAdvanced14 minProNETWORK-1431An HTTP/3 edge rollout passes smoke tests and breaks origin authAn HTTP/3 edge rollout passes smoke tests and breaks origin auth focuses on edge-routing and asks the reader to isolate the key signal in NGINX. Protocol upgrades can change the signed representation of request metadata even when t...NetworkAdvanced14 minProNETWORK-1411An HTTP/3 edge rollout passes smoke tests and signed origin requests failAn HTTP/3 edge rollout passes smoke tests and signed origin requests fail focuses on edge-routing and asks the reader to isolate the key signal in NGINX. Protocol upgrades can quietly change the byte representation of values used for o...NetworkAdvanced14 minProNETWORK-1401An HTTP/3 listener works for browsers and breaks signed backend authAn HTTP/3 listener works for browsers and breaks signed backend auth focuses on edge-routing and asks the reader to isolate the key signal in NGINX. Protocol upgrades can subtly change how edge layers normalize authority information be...NetworkAdvanced14 minProNETWORK-1421An HTTP/3 rollout succeeds and signed origin requests failAn HTTP/3 rollout succeeds and signed origin requests fail focuses on edge-routing and asks the reader to isolate the key signal in NGINX. Protocol upgrades can change the exact bytes used for origin auth even when the logical host looks identical.NetworkAdvanced14 minProSECURITY-1384An NGINX allowlist protects private APIs and one upstream app becomes...An NGINX allowlist protects private APIs and one upstream app becomes... focuses on Identity And Access and asks the reader to isolate the key signal in NGINX. Security gaps can live in the ordering between normalization and authorization, no...SecurityAdvanced14 minPro