← Docs
Recipe

NGINX patterns

Production-grade reverse-proxy configurations that pair with Meridian's loader and CDN pipeline.

Rate‑limit tier

limit_req_zone $binary_remote_addr zone=meridian:10m rate=5r/s;

server {
    listen 443 ssl http2;
    server_name cdn.getnimbus.net;

    location /payloads/ {
        limit_req zone=meridian burst=12 nodelay;
        limit_req_status 429;
        proxy_pass http://upstream_s3;
    }
}

Header‑based routing

map $http_x_meridian_channel $backend {
    default    stable;
    "canary"   canary;
}

server {
    location /update {
        proxy_pass http://$backend;
        proxy_set_header X-Channel $http_x_meridian_channel;
    }
}

Cache‑stampede guard

proxy_cache_path /tmp/meridian levels=1:2 keys_zone=mcache:64m
                 max_size=2g inactive=6h use_temp_path=off;

server {
    location / {
        proxy_cache mcache;
        proxy_cache_lock on;
        proxy_cache_lock_age 8s;
        proxy_cache_lock_timeout 15s;
        proxy_cache_valid 200 302 10m;
        add_header X-Cache-Status $upstream_cache_status;
    }
}

These snippets assume TLS termination at the edge. Combine with hardening for a complete deployment profile.