How to install nginx-module-nftset-access on AlmaLinux, Rocky Linux & RHEL
Zero-latency IP blocking using Linux kernel nftables sets
Availability
| Distro | aarch64 | noarch | x86_64 | Version |
|---|---|---|---|---|
| RHEL 10 | ✓ | — | ✓ | 1.30.3+3.0.0 |
| RHEL 9 | ✓ | — | ✓ | 1.30.3+3.0.0 |
| RHEL 8 | ✓ | — | ✓ | 1.30.3+3.0.0 |
| RHEL 7 | — | — | — | |
| RHEL 6 | — | — | — |
Description
High-performance NGINX module for IP-based access control using Linux kernel nftables sets. Key Features: - Blacklist/Whitelist modes: Block or allow IPs based on nftables set membership - Multiple sets: Check against multiple nft sets in one directive - Live updates: Modify nft sets without reloading NGINX - Honeypot auto-add: Automatically add malicious IPs to nftables sets with configurable timeouts - Built-in rate limiting: Per-IP rate limiting with auto-ban to nftables sets - JavaScript challenges: Proof-of-work challenges to filter bots - Dual-stack support: Works with both IPv4 and IPv6 nftables sets - Custom status codes: Return any HTTP status when blocking - CIDR support: Use interval sets for network ranges - Prometheus metrics: Native /metrics endpoint for monitoring - JSON stats API: Detailed statistics endpoint - LRU cache: Shared memory cache for high-performance lookups Successor to ipset-access module, using modern nftables instead of legacy ipset. Compatible with realip module for proper client IP detection behind proxies. Note: This module requires CAP_NET_ADMIN capability. The selinux subpackage includes a systemd override and helper library to enable this automatically. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_nftset_access_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;
Compatible with all RHEL-based distributions, including CentOS, AlmaLinux, Oracle Linux, Rocky Linux, etc.
Install
nginx-module-nftset-access on AlmaLinux / Rocky Linux / Oracle Linux / RHEL 8, 9, 10
sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm sudo dnf -y install nginx-module-nftset-access
Package downloads require an active GetPageSpeed subscription — one repository for nginx-module-nftset-access and 3,000+ more packages across every maintained Enterprise Linux release.
Subscribe — from $10/moFrequently asked questions
How do I install nginx-module-nftset-access on AlmaLinux, Rocky Linux or RHEL?
Add the GetPageSpeed repository, then run: sudo dnf -y install nginx-module-nftset-access (use yum on EL7). The same package works on AlmaLinux, Rocky Linux, Oracle Linux, CentOS Stream and RHEL.
Which Enterprise Linux versions is nginx-module-nftset-access available for?
nginx-module-nftset-access is available for RHEL 8, 9, 10 and the matching AlmaLinux, Rocky Linux and Oracle Linux releases.
Is nginx-module-nftset-access compatible with Rocky Linux, Oracle Linux and CentOS Stream?
Yes. The RPM is built for Enterprise Linux and is binary-compatible across all RHEL rebuilds of the same major version, including AlmaLinux, Rocky Linux, Oracle Linux and CentOS Stream.