Brute Force Protection and Rate Limiting for Login Endpoints
Protect login endpoints with layered defenses: rate limit by account and by source, slow down repeated failures progressively, require multi-factor...
Search
903 results for "Gin"
Nginx Security Headers Configuration for Web Applications
Nginx can add important security headers to every response: Strict-Transport-Security to enforce HTTPS, X-Content-Type-Options to stop MIME sniffing, a frame...
Nginx WebSocket Proxying and Idle Timeout Behavior
To proxy WebSockets through Nginx, use HTTP/1.1 and pass the Upgrade and Connection headers to the backend. Connections are closed when idle longer than...
Nginx Load Balancing Algorithms for Stateless APIs
For stateless APIs, round robin is a sound default in Nginx, and least connections is usually the better choice when request durations vary a lot. Hash-based...
Nginx Static Asset Caching With Cache Control and ETag Headers
For static assets, the best Nginx setup combines fingerprinted filenames with long-lived Cache-Control headers, so browsers cache files for a long time and...
Nginx Client Body Size Limits for API Gateways
A request size cap protects proxy and application resources from unexpectedly large uploads. Start with a clearly defined correctness invariant and workload....
Nginx HTTP2 Connection Multiplexing and Upstream Bottlenecks
HTTP/2 multiplexes requests on a client connection but does not automatically remove backend connection limits. Start with a clearly defined correctness...
Nginx Conditional Requests With ETag and Last Modified
Conditional GET requests can avoid transferring unchanged response bodies when validators match. Start with a clearly defined correctness invariant and...
Go Gin Binding and Validation Tags for Request Payloads
Gin binds request data into Go structs using struct tags, and validates it with the validator library through the binding tag. Prefer the ShouldBind family...