NGINXaaS for Azure Config
NGINXaaS for Azure places restrictions on the instance’s filesystem; only a specific set of directories are allowed to be read from and written to. Below is a table describing what directories the NGINX worker process can read and write to and what directories files can be written to. These files include certificate files and any files uploaded to the deployment, excluding NGINX configuration files.
| Allowed Directory | NGINX worker process can read/write to | Files can be written to |
|---|---|---|
| /etc/nginx | ||
| /opt | ||
| /srv | ||
| /tmp | ||
| /var/cache/nginx | ||
| /var/www |
Attempts to access other directories will be denied and result in a 5xx error.
Some directives are not supported because of specific limitations. If you include one of these directives in your NGINX configuration, you’ll get an error.
| Disallowed Directive | Reason |
|---|---|
| ssl_engine | No hardware SSL accelerator is available. |
| debug_points | NGINXaaS does not provide access to NGINX processes for debugging. |
| fastcgi_bind grpc_bind memcached_bind proxy_bind scgi_bind uwsgi_bind |
Source IP specification for active-active deployments is not allowed. |
| quic_bpf | QUIC connection migration is not currently supported for active-active deployments. |
You may find that a few directives are not listed here as either allowed or disallowed. Our team is working on getting these directives supported soon.
Some directives cannot be overridden by the user provided configuration.
| Persistent Directive | Value | Reason |
|---|---|---|
user |
nginx |
The nginx user has the correct permissions for accessing certificates, policy files and other auxfiles. |
worker_processes |
auto |
Set to auto to automatically set worker_processes to the number of CPU cores. |
worker_connections |
|
To ensure reasonable performance of the NGINXaaS deployment for Standard V2 plan, the worker_connections is fixed at 400/NCU; for basic plan this is set lower. |
pid |
/run/nginx/nginx.pid |
Set to this value to allow NGINXaaS to automatically manage the NGINX master process. |
daemon |
on |
Automatically set to on to allow NGINXaaS to manage the NGINX master process. |
master_process |
on |
This directive is intended for NGINX developers. |
worker_cpu_affinity |
auto |
The value auto allows binding worker processes automatically to available CPUs based on the current capacity of the deployment. |