How to install nginx-module-ipset-access on Fedora Linux
Zero-latency IP blocking using Linux kernel ipsets (v2)
Availability
| Distro | aarch64 | noarch | x86_64 | Version |
|---|---|---|---|---|
| Fedora 44 | ✓ | — | ✓ | 1.30.3+2.0.10 |
| Fedora 43 | ✓ | — | ✓ | 1.30.3+2.0.10 |
| Fedora 42 | ✓ | — | ✓ | 1.30.0+2.0.9 |
| Fedora 41 | ✓ | — | ✓ | 1.28.0+1.0.6 |
| Fedora 40 | ✓ | — | ✓ | 1.26.3+1.0.3 |
Description
High-performance NGINX module for IP-based access control using Linux kernel ipsets. Key Features: - Blacklist/Whitelist modes: Block or allow IPs based on ipset membership - Honeypot auto-add: Automatically add malicious IPs to ipsets with configurable timeouts and custom HTTP status codes - Built-in rate limiting: Per-IP rate limiting with auto-ban to ipsets - JavaScript challenges: Proof-of-work challenges to filter bots - Dual-stack support: Works with both IPv4 and IPv6 ipsets - FirewallD compatible: Integrates with firewall-cmd managed ipsets - Whitelist bypass: Whitelisted IPs skip rate limiting and challenges - Dry-run mode: Test rules in production without blocking - Prometheus metrics: Native /metrics endpoint for monitoring - LRU cache: Shared memory cache for high-performance lookups Uses libipset directly (no CLI fallback) for kernel-level performance. Compatible with realip module for proper client IP detection behind proxies. Note: This module requires CAP_NET_ADMIN capability. The selinux subpackage includes a systemd override and helper library to enable this automatically. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_ipset_access_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;
Built for Fedora Linux.
Install
nginx-module-ipset-access on Fedora Linux 40, 41, 42, 43, 44
sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm sudo dnf -y install nginx-module-ipset-access
Package downloads require an active GetPageSpeed subscription — one repository for nginx-module-ipset-access and thousands more packages for Fedora Linux.
Subscribe — from $10/moFrequently asked questions
How do I install nginx-module-ipset-access on Fedora Linux?
Add the GetPageSpeed repository, then install the nginx-module-ipset-access package with your system package manager.
Which Fedora Linux versions is nginx-module-ipset-access available for?
nginx-module-ipset-access is available for Fedora 40, 41, 42, 43, 44.