Вот да, выше все правильно сказал человек на самом сайте нджинкса по мануалам все легко ставится и настраивается. Еще на хабре и гитхабе можно поискать.
You could also just google search, I was able to find tons of methods out there to not only help block attacks, but also speed up NGINX itself. You should also look into network rules, you could block many known common incoming attacks. (Take a look at your CF setting aswell)