NGINX as compressor, TLS offloader, loadbalancer

Schematic overview

digraph {

rankdir=TB; newrank=true; compound=false;

browser -> nginx [label="HTTP(S)"; dir="both"];

subgraph cluster_1 { style="bold"; color="brown"; nginx [shape="box3d"; label="NGINX"]; tlsoffloader [label="TLS offloader"]; nginx -> cache -> nginx [color="blue"]; nginx -> tlsoffloader -> nginx [color="blue"]; nginx -> compression -> nginx [color="blue"]; } nginx -> lighttpd [dir="both"]; nginx -> apache [dir="both"];

subgraph cluster_10 { label="webtier 0"; style="bold"; lighttpd [shape="box3d"; label="lighttpd"]; }

subgraph cluster_11 { label="webtier 1"; style="bold"; apache [shape="box3d"; label="apache"]; } }

TLS offloading

It is not an SSL offloader anymore, as I decided not to support SSL due to various security concerns.

   ssl_certificate ssl-cert.pem;
   ssl_certificate_key ssl-cert.key;
   ssl_protocols TLSv1.1 TLSv1.2;
   ssl_ciphers HIGH;

Compression offloading

   # Gzip compression
   gzip on;
   gzip_http_version 1.1;
   gzip_comp_level 5;
   gzip_min_length 1000;
   gzip_proxied any;
   gzip_types text/plain text/css application/javascript;

Note: text/html is always compressed

Caching