How to install nginx-module-ipset-access on Ubuntu
Zero-latency IP blocking using Linux kernel ipsets (v2)
Availability
Compare package tracks by distribution and architecture. Checkmarks show the architectures available in each repository channel.
| Distro | Channel | amd64 | arm64 | Version |
|---|---|---|---|---|
| Ubuntu 26.04 (resolute) | Stable | 1.30.6+2.0.10 | ||
| NGINX mainline | 1.31.8+2.0.10 | |||
| Ubuntu 24.04 (noble) | Stable | 1.30.6+2.0.10 | ||
| NGINX mainline | 1.31.8+2.0.10 | |||
| Ubuntu 22.04 (jammy) | Stable | 1.30.6+2.0.10 | ||
| NGINX mainline | 1.31.8+2.0.10 | |||
| Ubuntu 20.04 (focal) | Stable | 1.30.6+2.0.10 | ||
| NGINX mainline | 1.31.8+2.0.10 |
Description
High-performance NGINX module for IP-based access control using Linux kernel ipsets. Key Features: - Blacklist/Whitelist modes: Block or allow IPs based on ipset membership - Honeypot auto-add: Automatically add malicious IPs to ipsets with configurable timeouts and custom HTTP status codes - Built-in rate limiting: Per-IP rate limiting with auto-ban to ipsets - JavaScript challenges: Proof-of-work challenges to filter bots - Dual-stack support: Works with both IPv4 and IPv6 ipsets - FirewallD compatible: Integrates with firewall-cmd managed ipsets - Whitelist bypass: Whitelisted IPs skip rate limiting and challenges - Dry-run mode: Test rules in production without blocking - Prometheus metrics: Native /metrics endpoint for monitoring - LRU cache: Shared memory cache for high-performance lookups Uses libipset directly (no CLI fallback) for kernel-level performance. Compatible with realip module for proper client IP detection behind proxies. Note: This module requires CAP_NET_ADMIN capability. The selinux subpackage includes a systemd override and helper library to enable this automatically.
Built for Ubuntu.
Install
nginx-module-ipset-access on Ubuntu 20.04 (focal), 22.04 (jammy), 24.04 (noble), 26.04 (resolute)
curl -fsSL https://extras.getpagespeed.com/release-latest.deb -o /tmp/getpagespeed-release.deb sudo apt-get install -y /tmp/getpagespeed-release.deb rm /tmp/getpagespeed-release.deb sudo apt-get update sudo apt-get install -y nginx-module-ipset-access
nginx-module-ipset-access on Ubuntu 20.04 (focal), 22.04 (jammy), 24.04 (noble), 26.04 (resolute)
curl -fsSL https://extras.getpagespeed.com/release-latest.deb -o /tmp/getpagespeed-release.deb sudo apt-get install -y /tmp/getpagespeed-release.deb rm /tmp/getpagespeed-release.deb sudo getpagespeed-extras-channel mainline sudo apt-get update sudo apt-get install -y nginx-module-ipset-access
Package downloads require an active GetPageSpeed subscription — one repository for nginx-module-ipset-access and thousands more packages for Ubuntu.
Subscribe — from $10/moOther releases and channels: use the setup wizard.
Frequently asked questions
How do I install nginx-module-ipset-access on Ubuntu?
Add the GetPageSpeed repository, then install the nginx-module-ipset-access package with your system package manager.
Which Ubuntu versions is nginx-module-ipset-access available for?
nginx-module-ipset-access is available for Ubuntu 20.04, 22.04, 24.04, 26.04.