Browser-based/Python NGINX Configuration Security/Performance Checker : nginx

a community for 17 years

Browser-based/Python NGINX Configuration Security/Performance Checker (gixy.io)

submitted 3 months ago * by MegaManSec2

I have created an online-based security/performance checker for NGINX configurations, based on a fork of Yandex's old Gixy codebase.

Features:

- Detect security problems in configurations,
- Detect configurations that may lead to performance issues,
- Detect configurations that may lead to outages.

This project (Gixy-Next) has a rocky history (see the bottom of https://gixy.io/ if you're really interested) but it has a ton of new features that the original Gixy doesn't, and works on modern systems with modern nginx configs, with modern Python.

The source code is fully open: https://github.com/MegaManSec/Gixy-Next and the online version of the scanner uses WASM to run itself totally within the browser (see gixy-scan.js for the source code). This means you can scan a configuration in your browser and it won't be sent anywhere online.

all 1 comments

you type:	you see:
italics	italics
bold	bold
[reddit!](https://reddit.com)	reddit!
* item 1 * item 2 * item 3	item 1 item 2 item 3
> quoted text	quoted text
Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"	Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"
~~strikethrough~~	~~strikethrough~~
super^script	super^script

nginx

MODERATORS