Skip to content

Commit 2f9ccd3

Browse files
ADubhlaoichADubhlaoich
authored
feat: Add WAF 2025 & 2024 changelog entries (#1227)
This commit updates the F5 WAF for NGINX changelog to add the remaining entries for 2025 and the entries from 2024 where the product diverged into the V4 and V5 labels. As part of migrating the content, feature links are updated to reflect recent documentation restructuring, and package names were combined into singular tables to reflect the new style convention.
1 parent 4c57e0d commit 2f9ccd3

File tree

4 files changed

+299
-73
lines changed

4 files changed

+299
-73
lines changed

‎content/waf/changelog/2024.md‎

Lines changed: 215 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,215 @@
1+
---
2+
title: "2024 archive"
3+
# Weights are assigned in increments of 100: determines sorting order
4+
weight: 100
5+
# Creates a table of contents and sidebar, useful for large documents
6+
toc: true
7+
# Types have a 1:1 relationship with Hugo archetypes, so you shouldn't need to change this
8+
nd-content-type: reference
9+
# Intended for internal catalogue and search, case sensitive:
10+
# Agent, N4Azure, NIC, NIM, NGF, NAP-DOS, NAP-WAF, NGINX One, NGINX+, Solutions, Unit
11+
nd-product: NAP-WAF
12+
---
13+
14+
This page is an archive of changelog entries for 2024.
15+
16+
For the current year, view [the top-level changelog]({{< ref "/waf/changelog/">}}) topic.
17+
18+
## F5 WAF for NGINX 5.4 / 4.12
19+
20+
_November 19th, 2024_
21+
22+
### New features
23+
24+
- Added support for Amazon Linux 2023
25+
- NGINX App Protect WAF now supports NGINX Plus R33.
26+
- **5.4 Only:** Added support for [readOnlyFileSystem in Kubernetes deployments]({{< ref "/waf/configure/kubernetes-read-only/" >}})
27+
- **5.4 Only:** Added a [a policy converter to the compiler]({{< ref "/waf/configure/converters.md#policy-converter">}})
28+
29+
Please read the [subscription licenses]({{< ref "/solutions/about-subscription-licenses.md" >}}) topic for information about R33.
30+
31+
### Important notes
32+
33+
- Alpine 3.16 is no longer supported.
34+
35+
### Resolved issues
36+
37+
- (11973) Updated the Go version to 1.23.1
38+
- (11469) _apt-get update_ warning for Ubuntu 22.04
39+
40+
### Known issues
41+
42+
On Ubuntu 24.04, you may receive the following error when uninstalling an old version of NGINX App Protect and installing a newer version:
43+
44+
```text
45+
APP_PROTECT failed to open /opt/app_protect/config/config_set.json
46+
```
47+
48+
This can occur if you are not using the default `nginx.conf` file and are using the `app_protect_enforcer_address` directive.
49+
50+
To fix the problem, remove the file configuration folder and recreate the directory, then restart NGINX.
51+
52+
```shell
53+
sudo rm /opt/app_protect/config
54+
sudo mkdir /opt/app_protect/config
55+
sudo service nginx restart
56+
```
57+
58+
### Packages
59+
60+
{{< table >}}
61+
62+
| Distribution name | NGINX Open Source (5.4) | NGINX Plus (5.4) | NGINX Plus (4.12) |
63+
| ------------------------ | ----------------------------------------------------------------- | -------------------------------------------------------------- |----------------------------------------------------|
64+
| Alpine 3.17 | _app-protect-module-oss-1.27.2+5.210.0-r1.apk_ | _app-protect-module-plus-33+5.210.0-r1.apk_ | _app-protect-33.5.210.0-r1.apk_ |
65+
| Amazon Linux 2023 | _app-protect-module-oss-1.27.2+5.210.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-module-plus-33+5.210.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-33+5.210.0-1.amzn2023.ngx.x86_64.rpm_ |
66+
| Debian 11 | _app-protect-module-oss_1.27.2+5.210.0-1\~bullseye_amd64.deb_ | _app-protect-module-plus_33+5.210.0-1\~bullseye_amd64.deb_ | _app-protect_33+5.210.0-1\~bullseye_amd64.deb_ |
67+
| Debian 12 | _app-protect-module-oss_1.27.2+5.210.0-1\~bookworm_amd64.deb_ | _app-protect-module-plus_33+5.210.0-1\~bookworm_amd64.deb_ | _app-protect_33+5.210.0-1\~bookworm_amd64.deb_ |
68+
| Oracle Linux 8.1 | _app-protect-module-oss-1.27.2+5.210.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-33+5.210.0-1.el8.ngx.x86_64.rpm_ | _app-protect-33+5.210.0-1.el8.ngx.x86_64.rpm_ |
69+
| Ubuntu 20.04 | _app-protect-module-oss_1.27.2+5.210.0-1\~focal_amd64.deb_ | _app-protect-module-plus_33+5.210.0-1\~focal_amd64.deb_ | _app-protect_33+5.210.0-1\~focal_amd64.deb_ |
70+
| Ubuntu 22.04 | _app-protect-module-oss_1.27.2+5.210.0-1\~jammy_amd64.deb_ | _app-protect-module-plus_33+5.210.0-1\~jammy_amd64.deb_ | _app-protect_33+5.210.0-1\~jammy_amd64.deb_ |
71+
| Ubuntu 24.04 | _app-protect-module-oss_1.27.2+5.210.0-1\~noble_amd64.deb_ | _app-protect-module-plus_33+5.210.0-1\~noble_amd64.deb_ | _app-protect_33+5.210.0-1\~noble_amd64.deb_ |
72+
| RHEL 8 and Rocky Linux 8 | _app-protect-module-oss-1.27.2+5.210.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-33+5.210.0-1.el8.ngx.x86_64.rpm_ | _app-protect-33+5.210.0-1.el8.ngx.x86_64.rpm_ |
73+
| RHEL 9 | _app-protect-module-oss-1.27.2+5.210.0-1.el9.ngx.x86_64.rpm_ | _app-protect-module-plus-33+5.210.0-1.el9.ngx.x86_64.rpm_ | _app-protect-33+5.210.0-1.el9.ngx.x86_64.rpm_ |
74+
75+
{{< /table >}}
76+
77+
## F5 WAF for NGINX 5.3 / 4.11
78+
79+
_September 25, 2024_
80+
81+
### New features
82+
83+
- Ubuntu 24.04 support
84+
- **5.3 Only:** [Secure Traffic Between NGINX and App Protect Enforcer]({{< ref "/waf/configure/secure-mtls.md" >}})
85+
86+
### Important notes
87+
88+
- Starting from this release, CentOS 7.4, Rhel 7.4 and Amazon Linux 2 support has been deprecated.
89+
90+
### Resolved issues
91+
92+
- (10775) Resolved a threshold calculation in the base64 decoding mechanism.
93+
- (11426) Resolved log entry of an XFF header that contains more than one value.
94+
- (11272) Resolved an issue where, in certain instances, the original HTTP response code was shown for rejected requests.
95+
- (11568) Support seamless upgrades by using the latest tag instead of hardcoded versions.
96+
- (5302) The enforcer leaves an incomplete job when NGINX reloads during DNS resolution.
97+
98+
### Packages
99+
100+
{{< table >}}
101+
102+
| Distribution name | NGINX Open Source (5.3) | NGINX Plus (5.3) | NGINX Plus (4.11) |
103+
| ------------------------ | ----------------------------------------------------------------- | -------------------------------------------------------------- |----------------------------------------------------|
104+
| Alpine 3.17 | _app-protect-module-oss-1.25.4+5.144.0-r1.apk_ | _app-protect-module-plus-32+5.144.0-r1.apk_ | _app-protect-32.5.144.0-r1.apk_ |
105+
| Amazon Linux 2023 | _app-protect-module-oss-1.25.4+5.144.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-module-plus-32+5.144.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-32+5.144.0-1.amzn2023.ngx.x86_64.rpm_ |
106+
| Debian 11 | _app-protect-module-oss_1.25.4+5.144.0-1\~bullseye_amd64.deb_ | _app-protect-module-plus_32+5.144.0-1\~bullseye_amd64.deb_ | _app-protect_32+5.144.0-1\~bullseye_amd64.deb_ |
107+
| Debian 12 | _app-protect-module-oss_1.25.4+5.144.0-1\~bookworm_amd64.deb_ | _app-protect-module-plus_32+5.144.0-1\~bookworm_amd64.deb_ | _app-protect_32+5.144.0-1\~bookworm_amd64.deb_ |
108+
| Oracle Linux 8.1 | _app-protect-module-oss-1.25.4+5.144.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-32+5.144.0-1.el8.ngx.x86_64.rpm_ | _app-protect-32+5.144.0-1.el8.ngx.x86_64.rpm_ |
109+
| Ubuntu 20.04 | _app-protect-module-oss_1.25.4+5.144.0-1\~focal_amd64.deb_ | _app-protect-module-plus_32+5.144.0-1\~focal_amd64.deb_ | _app-protect_32+5.144.0-1\~focal_amd64.deb_ |
110+
| Ubuntu 22.04 | _app-protect-module-oss_1.25.4+5.144.0-1\~jammy_amd64.deb_ | _app-protect-module-plus_32+5.144.0-1\~jammy_amd64.deb_ | _app-protect_32+5.144.0-1\~jammy_amd64.deb_ |
111+
| Ubuntu 24.04 | _app-protect-module-oss_1.25.4+5.144.0-1\~noble_amd64.deb_ | _app-protect-module-plus_32+5.144.0-1\~noble_amd64.deb_ | _app-protect_32+5.144.0-1\~noble_amd64.deb_ |
112+
| RHEL 8 and Rocky Linux 8 | _app-protect-module-oss-1.25.4+5.144.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-32+5.144.0-1.el8.ngx.x86_64.rpm_ | _app-protect-32+5.144.0-1.el8.ngx.x86_64.rpm_ |
113+
| RHEL 9 | _app-protect-module-oss-1.25.4+5.144.0-1.el9.ngx.x86_64.rpm_ | _app-protect-module-plus-32+5.144.0-1.el9.ngx.x86_64.rpm_ | _app-protect-32+5.144.0-1.el9.ngx.x86_64.rpm_ |
114+
115+
{{< /table >}}
116+
117+
## F5 WAF for NGINX 5.2 / 4.10
118+
119+
_May 29, 2024_
120+
121+
### New features
122+
123+
- [Added apreload]({{< ref "/waf/configure/apreload.md" >}})
124+
125+
### Resolved issues
126+
127+
- (11038) In some scenarios, autodetect does not correctly recognize the internal buffer as base_64 buffer and so does not decode the data.
128+
- (11059) Enforcer may crash in specific scenarios.
129+
- (11105) Update libprotobuf to version 1.33.0+.
130+
- (11148) When following the config guide for starting NAP v5 in docker or kubernetes and leaving nginx.conf without any 'app_protect' directive: changing the conf to include NAP does not work. Enforcer times out every 40 secs waiting for the configuration.
131+
132+
### Packages
133+
134+
{{< table >}}
135+
136+
| Distribution name | NGINX Open Source (5.2) | NGINX Plus (5.2) | NGINX Plus (4.10) |
137+
| ------------------------ | ----------------------------------------------------------------- | -------------------------------------------------------------- |----------------------------------------------------|
138+
| Alpine 3.17 | _app-protect-module-oss-1.25.4+5.144.0-r1.apk_ | _app-protect-module-plus-32+5.144.0-r1.apk_ | _app-protect-32.5.144.0-r1.apk_ |
139+
| Amazon Linux 2023 | _app-protect-module-oss-1.25.4+5.144.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-module-plus-32+5.144.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-32+5.144.0-1.amzn2023.ngx.x86_64.rpm_ |
140+
| Debian 11 | _app-protect-module-oss_1.25.4+5.144.0-1\~bullseye_amd64.deb_ | _app-protect-module-plus_32+5.144.0-1\~bullseye_amd64.deb_ | _app-protect_32+5.144.0-1\~bullseye_amd64.deb_ |
141+
| Debian 12 | _app-protect-module-oss_1.25.4+5.144.0-1\~bookworm_amd64.deb_ | _app-protect-module-plus_32+5.144.0-1\~bookworm_amd64.deb_ | _app-protect_32+5.144.0-1\~bookworm_amd64.deb_ |
142+
| Oracle Linux 8.1 | _app-protect-module-oss-1.25.4+5.144.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-32+5.144.0-1.el8.ngx.x86_64.rpm_ | _app-protect-32+5.144.0-1.el8.ngx.x86_64.rpm_ |
143+
| Ubuntu 20.04 | _app-protect-module-oss_1.25.4+5.144.0-1\~focal_amd64.deb_ | _app-protect-module-plus_32+5.144.0-1\~focal_amd64.deb_ | _app-protect_32+5.144.0-1\~focal_amd64.deb_ |
144+
| Ubuntu 22.04 | _app-protect-module-oss_1.25.4+5.144.0-1\~jammy_amd64.deb_ | _app-protect-module-plus_32+5.144.0-1\~jammy_amd64.deb_ | _app-protect_32+5.144.0-1\~jammy_amd64.deb_ |
145+
| RHEL 8 and Rocky Linux 8 | _app-protect-module-oss-1.25.4+5.144.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-32+5.144.0-1.el8.ngx.x86_64.rpm_ | _app-protect-32+5.144.0-1.el8.ngx.x86_64.rpm_ |
146+
| RHEL 9 | _app-protect-module-oss-1.25.4+5.144.0-1.el9.ngx.x86_64.rpm_ | _app-protect-module-plus-32+5.144.0-1.el9.ngx.x86_64.rpm_ | _app-protect-32+5.144.0-1.el9.ngx.x86_64.rpm_ |
147+
148+
{{< /table >}}
149+
150+
## F5 WAF for NGINX 5.1 / 4.9
151+
152+
_April 18, 2024_
153+
154+
### New features
155+
156+
- Authorization Rules in URLs
157+
- New [JSON Web Token]({{< ref "/waf/policies/jwt-protection.md" >}}) signature signing algorithm support for:
158+
- **RSA**: RS256, RS384, RS512
159+
- **PSS**: PS256, PS384, PS512
160+
- **ECDSA**: ES256, ES256K, ES384, ES512
161+
- **EdDSA**
162+
- [Time-based signature staging]({{< ref "/waf/policies/time-based-signature-staging.md" >}})
163+
164+
### Resolved issues
165+
166+
- (10250/10251) Fixed issues related to upgrading on Debian and Ubuntu.
167+
- (10219/10512) Resolved issues related to base64 detection and decoding.
168+
- (10465) Resolved the "header already sent" alert message in the NGINX error log.
169+
170+
### Packages
171+
172+
{{< table >}}
173+
174+
| Distribution name | NGINX Open Source (5.1) | NGINX Plus (5.1) | NGINX Plus (4.9) |
175+
| ------------------------ | ----------------------------------------------------------------- | -------------------------------------------------------------- |----------------------------------------------------|
176+
| Alpine 3.17 | _app-protect-module-oss-1.25.4+5.17.0-r1.apk_ | _app-protect-module-plus-31+5.17.0-r1.apk_ | _app-protect-31.5.17.0-r1.apk_ |
177+
| Amazon Linux 2023 | _app-protect-module-oss-1.25.4+5.17.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-module-plus-31+5.17.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-31+5.17.0-1.amzn2023.ngx.x86_64.rpm_ |
178+
| Debian 11 | _app-protect-module-oss_1.25.4+5.17.0-1\~bullseye_amd64.deb_ | _app-protect-module-plus_31+5.17.0-1\~bullseye_amd64.deb_ | _app-protect_31+5.17.0-1\~bullseye_amd64.deb_ |
179+
| Debian 12 | _app-protect-module-oss_1.25.4+5.17.0-1\~bookworm_amd64.deb_ | _app-protect-module-plus_31+5.17.0-1\~bookworm_amd64.deb_ | _app-protect_31+5.17.0-1\~bookworm_amd64.deb_ |
180+
| Oracle Linux 8.1 | _app-protect-module-oss-1.25.4+5.17.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-31+5.17.0-1.el8.ngx.x86_64.rpm_ | _app-protect-31+5.17.0-1.el8.ngx.x86_64.rpm_ |
181+
| Ubuntu 20.04 | _app-protect-module-oss_1.25.4+5.17.0-1\~focal_amd64.deb_ | _app-protect-module-plus_31+5.17.0-1\~focal_amd64.deb_ | _app-protect_31+5.17.0-1\~focal_amd64.deb_ |
182+
| Ubuntu 22.04 | _app-protect-module-oss_1.25.4+5.17.0-1\~jammy_amd64.deb_ | _app-protect-module-plus_31+5.17.0-1\~jammy_amd64.deb_ | _app-protect_31+5.17.0-1\~jammy_amd64.deb_ |
183+
| RHEL 7 | _app-protect-module-oss-1.25.4+5.17.0-1.el7.ngx.x86_64.rpm | _app-protect-module-plus-31+5.17.0-1.el7.ngx.x86_64.rpm_ | _app-protect-31+5.17.0-1.el7.ngx.x86_64.rpm_ |
184+
| RHEL 8 and Rocky Linux 8 | _app-protect-module-oss-1.25.4+5.17.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-31+5.17.0-1.el8.ngx.x86_64.rpm_ | _app-protect-31+5.17.0-1.el8.ngx.x86_64.rpm_ |
185+
| RHEL 9 | _app-protect-module-oss-1.25.4+5.17.0-1.el9.ngx.x86_64.rpm_ | _app-protect-module-plus-31+5.17.0-1.el9.ngx.x86_64.rpm_ | _app-protect-31+5.17.0-1.el9.ngx.x86_64.rpm_ |
186+
187+
{{< /table >}}
188+
189+
## F5 WAF for NGINX 5.0 / 4.8.1
190+
191+
_March 19, 2024_
192+
193+
### New features
194+
195+
- [New deployment types]({{< ref "/waf/fundamentals/technical-specifications.md#supported-deployment-environments" >}})
196+
- [Security policy and logging profile bundles]({{< ref "/waf/configure/compiler.md">}})
197+
198+
### Packages
199+
200+
{{< table >}}
201+
202+
| Distribution name | NGINX Open Source (5.1) | NGINX Plus (5.1) | NGINX Plus (4.9) |
203+
| ------------------------ | ----------------------------------------------------------------- | -------------------------------------------------------------- |----------------------------------------------------|
204+
| Alpine 3.17 | _app-protect-module-oss-1.25.4+4.815.0-r1.apk_ | _app-protect-module-plus-31+4.815.0-r1.apk_ | _app-protect-31.4.815.0-r1.apk_ |
205+
| Amazon Linux 2023 | _app-protect-module-oss-1.25.4+4.815.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-module-plus-31+4.815.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-31+4.815.0-1.amzn2023.ngx.x86_64.rpm_ |
206+
| Debian 11 | _app-protect-module-oss_1.25.4+4.815.0-1\~bullseye_amd64.deb_ | _app-protect-module-plus_31+4.815.0-1\~bullseye_amd64.deb_ | _app-protect_31+4.815.0-1\~bullseye_amd64.deb_ |
207+
| Debian 12 | _app-protect-module-oss_1.25.4+4.815.0-1\~bookworm_amd64.deb_ | _app-protect-module-plus_31+4.815.0-1\~bookworm_amd64.deb_ | _app-protect_31+4.815.0-1\~bookworm_amd64.deb_ |
208+
| Oracle Linux 8.1 | _app-protect-module-oss-1.25.4+4.815.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-31+4.815.0-1.el8.ngx.x86_64.rpm_ | _app-protect-31+4.815.0-1.el8.ngx.x86_64.rpm_ |
209+
| Ubuntu 20.04 | _app-protect-module-oss_1.25.4+4.815.0-1\~focal_amd64.deb_ | _app-protect-module-plus_31+4.815.0-1\~focal_amd64.deb_ | _app-protect_31+4.815.0-1\~focal_amd64.deb_ |
210+
| Ubuntu 22.04 | _app-protect-module-oss_1.25.4+4.815.0-1\~jammy_amd64.deb_ | _app-protect-module-plus_31+4.815.0-1\~jammy_amd64.deb_ | _app-protect_31+4.815.0-1\~jammy_amd64.deb_ |
211+
| RHEL 7 | _app-protect-module-oss-1.25.4+4.815.0-1.el7.ngx.x86_64.rpm | _app-protect-module-plus-31+4.815.0-1.el7.ngx.x86_64.rpm_ | _app-protect-31+4.815.0-1.el7.ngx.x86_64.rpm_ |
212+
| RHEL 8 and Rocky Linux 8 | _app-protect-module-oss-1.25.4+4.815.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-31+4.815.0-1.el8.ngx.x86_64.rpm_ | _app-protect-31+4.815.0-1.el8.ngx.x86_64.rpm_ |
213+
| RHEL 9 | _app-protect-module-oss-1.25.4+4.815.0-1.el9.ngx.x86_64.rpm_ | _app-protect-module-plus-31+4.815.0-1.el9.ngx.x86_64.rpm_ | _app-protect-31+4.815.0-1.el9.ngx.x86_64.rpm_ |
214+
215+
{{< /table >}}

0 commit comments

Comments
 (0)