GetPageSpeed Extras

How to install nginx-module-nftset-access on Ubuntu

Zero-latency IP blocking using Linux kernel nftables sets

Vendor: GetPageSpeed https://nginx-extras.getpagespeed.com/modules/nftset-access/

Availability

Compare package tracks by distribution and architecture. Checkmarks show the architectures available in each repository channel.

Distro Channel amd64 arm64 Version
Ubuntu 26.04 (resolute) Stable 1.30.6+3.0.0
NGINX mainline 1.31.8+3.0.0
Ubuntu 24.04 (noble) Stable 1.30.6+3.0.0
NGINX mainline 1.31.8+3.0.0
Ubuntu 22.04 (jammy) Stable 1.30.6+3.0.0
NGINX mainline 1.31.8+3.0.0
Ubuntu 20.04 (focal) Stable 1.30.6+3.0.0
NGINX mainline 1.31.8+3.0.0

Description

High-performance NGINX module for IP-based access control using Linux kernel nftables sets. Key Features: - Blacklist/Whitelist modes: Block or allow IPs based on nftables set membership - Multiple sets: Check against multiple nft sets in one directive - Live updates: Modify nft sets without reloading NGINX - Honeypot auto-add: Automatically add malicious IPs to nftables sets with configurable timeouts - Built-in rate limiting: Per-IP rate limiting with auto-ban to nftables sets - JavaScript challenges: Proof-of-work challenges to filter bots - Dual-stack support: Works with both IPv4 and IPv6 nftables sets - Custom status codes: Return any HTTP status when blocking - CIDR support: Use interval sets for network ranges - Prometheus metrics: Native /metrics endpoint for monitoring - JSON stats API: Detailed statistics endpoint - LRU cache: Shared memory cache for high-performance lookups Successor to ipset-access module, using modern nftables instead of legacy ipset. Compatible with realip module for proper client IP detection behind proxies. Note: This module requires CAP_NET_ADMIN capability. The selinux subpackage includes a systemd override and helper library to enable this automatically.

Built for Ubuntu.

Install

Stable Ubuntu 20.04, 22.04, 24.04, 26.04

nginx-module-nftset-access on Ubuntu 20.04 (focal), 22.04 (jammy), 24.04 (noble), 26.04 (resolute)

curl -fsSL https://extras.getpagespeed.com/release-latest.deb -o /tmp/getpagespeed-release.deb
sudo apt-get install -y /tmp/getpagespeed-release.deb
rm /tmp/getpagespeed-release.deb
sudo apt-get update
sudo apt-get install -y nginx-module-nftset-access
NGINX mainline Ubuntu 20.04, 22.04, 24.04, 26.04

nginx-module-nftset-access on Ubuntu 20.04 (focal), 22.04 (jammy), 24.04 (noble), 26.04 (resolute)

curl -fsSL https://extras.getpagespeed.com/release-latest.deb -o /tmp/getpagespeed-release.deb
sudo apt-get install -y /tmp/getpagespeed-release.deb
rm /tmp/getpagespeed-release.deb
sudo getpagespeed-extras-channel mainline
sudo apt-get update
sudo apt-get install -y nginx-module-nftset-access

Package downloads require an active GetPageSpeed subscription — one repository for nginx-module-nftset-access and thousands more packages for Ubuntu.

Subscribe — from $10/mo

Other releases and channels: use the setup wizard.

Frequently asked questions

How do I install nginx-module-nftset-access on Ubuntu?

Add the GetPageSpeed repository, then install the nginx-module-nftset-access package with your system package manager.

Which Ubuntu versions is nginx-module-nftset-access available for?

nginx-module-nftset-access is available for Ubuntu 20.04, 22.04, 24.04, 26.04.

Subscribe