Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a private network with many servers and web based services running on it. There is no application level authentication. I would like to expose many of the servers to the internet, but I want to proxy it behind nginx with nginx providing authentication. HttpAuthBasicModule is not sufficient, I would like to use scrypt for password digests, rate limit logins, and log the login attempts.

I am formidable with Python, but I am lost with C. Any advise?

share|improve this question
Advice: Instead of getting stuck on the idea of using a certain tool, decide what you actually need to do, then find (or create, if necessary) the right tool to accomplish what you want. – Michael Hampton Jul 20 '12 at 0:32
Good observation, I'll try implementing it with twisted. – Jacob Stoner Jul 20 '12 at 2:43
up vote 1 down vote accepted

Probably, the http_auth_request module is suitable for your task. Repo. Docs.

For rate limiting login attempts you can easily utilize nginx limit req module. For custom log: nginx log module. All these modules would be suitable for you in combination with the location directive.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.