It should not and it does not! If the client does not send a cookie with name "abc" or "def" I do not assume nginx to have any variable with that name. Am I missing anything? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,236075,236110#msg-236110