Skip to content

Commit 6f43c18

Browse files
committed
Merge branch 'main' into waf/refactor
2 parents bdb0426 + 2f25dc8 commit 6f43c18

File tree

13 files changed

+185
-185
lines changed

13 files changed

+185
-185
lines changed

.github/workflows/dot-org-content.yml

Lines changed: 0 additions & 56 deletions
This file was deleted.
Lines changed: 88 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,88 @@
1+
---
2+
title: Features configuration
3+
weight: 150
4+
toc: true
5+
nd-docs: DOCS-000
6+
nd-content-type: how-to
7+
---
8+
9+
## Overview
10+
11+
This guide describes the F5 NGINX Agent features, and how to enable and disable features using the NGINX Agent configuration file.
12+
13+
## Before you begin
14+
15+
Before you start, make sure that you have:
16+
17+
- [NGINX Agent installed]({{< ref "/agent/installation-upgrade/" >}}) in your system.
18+
- Access to the NGINX Agent configuration file.
19+
20+
## Features
21+
22+
The following table lists the NGINX Agent features:
23+
24+
{{< table "features" >}}
25+
| Feature Name | Description | Default/Non-default |
26+
| ---------------- | ----------------------------------------------------------------------- | ------------------- |
27+
| registration | Registering the NGINX Agent with the management plane. | Default |
28+
| nginx-config-async | Enable the publishing and uploading of NGINX configurations from the management plane. | Default |
29+
| metrics | Enable collecting of NGINX metrics. | Default |
30+
| metrics-throttle | Batch metrics before sending. | Non-default |
31+
| metrics-sender | Reports metrics over the gRPC connection. | Non-default |
32+
| dataplane-status | Report the health of the NGINX Instance. | Default |
33+
| process-watcher | Observe changes to the NGINX process. | Default |
34+
| file-watcher | Observe changes to the NGINX configuration or any changes to files on disk. | Default |
35+
| activity-events | Send NGINX or NGINX Agent related events to the management plane. | Default |
36+
| agent-api | Enable the NGINX Agent REST API. | Default |
37+
{{< /table >}}
38+
39+
## Use cases
40+
41+
### Enable metrics only
42+
43+
1. Access the NGINX instance: Connect using SSH to the VM or server where NGINX Agent is running.
44+
45+
`ssh user@your-nginx-instance`
46+
47+
1. Open the NGINX Agent configuration file in a text editor.
48+
49+
`sudo vim /etc/nginx-agent/nginx-agent.conf`
50+
51+
1. Add the features section: Add the following to the end of the configuration file if it doesn't already exist.
52+
53+
```nginx
54+
features:
55+
- metrics
56+
- metrics-throttle
57+
- dataplane-status
58+
```
59+
60+
1. Restart the NGINX Agent service to apply the changes.
61+
62+
`sudo systemctl restart nginx-agent`
63+
64+
Once the steps have been completed, users will be able to view metrics data being sent but will not have the capability to push NGINX configuration changes.
65+
66+
### Enable the publishing of NGINX configurations and disable the collection of metrics
67+
68+
1. Access the NGINX instance: Connect using SSH to the VM or server where NGINX Agent is running.
69+
70+
`ssh user@your-nginx-instance`
71+
72+
1. Open the NGINX Agent configuration file in a text editor.
73+
74+
`sudo vim /etc/nginx-agent/nginx-agent.conf`
75+
76+
1. Add the fetures section: Add the following to the end of the configuration file if it doesn't already exist.
77+
78+
```nginx
79+
features:
80+
- nginx-config-async
81+
- dataplane-status
82+
- file-watcher
83+
84+
1. Restart the NGINX Agent service to apply the changes.
85+
86+
`sudo systemctl restart nginx-agent`
87+
88+
Once the steps have been completed, users will be able to publish NGINX configurations but metrics data will not be collected by the NGINX Agent.

content/includes/nginx-one/how-to/install-nginx-agent.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,13 +8,14 @@ files:
88
After entering your data plane key, you'll see a `curl` command to install NGINX Agent, similar to the one below. Copy and run this command on each NGINX instance. Once installed, NGINX Agent typically registers with NGINX One within a few seconds.
99

1010
{{<call-out "important" "Connecting to NGINX One" >}}
11-
Ensure that any firewall rules you have in place for your NGINX hosts allows network traffic to port `443` for all of the following IPs:
11+
Make sure your firewall rules for NGINX hosts allow traffic to port `443` from these IP address ranges:
1212

13-
- `3.135.72.139`
14-
- `3.133.232.50`
15-
- `52.14.85.249`
13+
- `3.135.72.139/32`
14+
- `3.133.232.50/32`
15+
- `52.14.85.249/32`
16+
- `2600:1f16:19c8:d400::/62`
1617

17-
NGINX Agent must be able to establish a connection to NGINX One Console's Agent endpoint (`agent.connect.nginx.com`).
18+
NGINX Agent must be able to establish a connection to NGINX One Console's Agent endpoint (`agent.connect.nginx.com`).
1819
{{</call-out>}}
1920

2021
To install NGINX Agent on an NGINX instance:

content/nginx-one/changelog.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,6 +30,13 @@ h2 {
3030

3131
Stay up-to-date with what's new and improved in the F5 NGINX One Console.
3232

33+
## September 16, 2025
34+
35+
### IPv6 endpoints for NGINX Agent and NGINX Plus usage reporting
36+
37+
Your instances which run in dual-stack or IPv6-only environments can now communicate with NGINX One Console APIs through IPv6 addresses.
38+
See the [Getting Started Guide]({{< ref "/nginx-one/getting-started.md#install-nginx-agent" >}}) for the IP address ranges you need to allow in your firewalls.
39+
3340
## July 15, 2025
3441

3542
### Set up F5 WAF for NGINX security policies

content/nginx-one/getting-started.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -126,11 +126,12 @@ Depending on whether this is your first time using NGINX One Console or you've u
126126
After entering your data plane key, you'll see a `curl` command similar to the one below. Copy and run this command on each NGINX instance to install NGINX Agent. Once installed, NGINX Agent typically registers with NGINX One within a few seconds.
127127

128128
{{<call-out "important" "Connecting to NGINX One" >}}
129-
NGINX Agent must be able to establish a connection to NGINX One Console's Agent endpoint (`agent.connect.nginx.com`). Ensure that any firewall rules you have in place for your NGINX hosts allows network traffic to port `443` for all of the following IPs:
129+
NGINX Agent must be able to establish a connection to NGINX One Console's Agent endpoint (`agent.connect.nginx.com`). Ensure that any firewall rules you have in place for your NGINX hosts allows network traffic to port `443` for all of the following IP address ranges:
130130

131-
- `3.135.72.139`
132-
- `3.133.232.50`
133-
- `52.14.85.249`
131+
- `3.135.72.139/32`
132+
- `3.133.232.50/32`
133+
- `52.14.85.249/32`
134+
- `2600:1f16:19c8:d400::/62`
134135
{{</call-out>}}
135136

136137
To install NGINX Agent on an NGINX instance:

content/nginxaas-azure/disaster-recovery.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Disaster recovery
3-
weight: 750
3+
weight: 650
44
toc: true
55
url: /nginxaas/azure/disaster-recovery/
66
type:

content/nginxaas-azure/module-changelog.md

Lines changed: 28 additions & 87 deletions
Original file line numberDiff line numberDiff line change
@@ -7,111 +7,52 @@ url: /nginxaas/azure/module-changelog/
77

88
Learn about the modules supported by the latest versions of F5 NGINXaaS for Azure.
99

10-
## September 18, 2025
11-
12-
### Preview
13-
14-
{{<bootstrap-table "table table-bordered table-striped table-responsive table-sm">}}
15-
16-
| Name | Version | Description |
17-
|------------------------------------------|--------------------------|------------------------------------------------------------------------|
18-
| nginx-plus | 1.29.0 (nginx-plus-r35) | NGINX Plus, provided by Nginx, Inc. |
19-
| nginx-agent | 1.20.16-2026591880 | NGINX Agent - Management for NGINXaaS |
20-
| Operating System | Ubuntu 22.04.5 | Jammy Jellyfish, provided by Canonical Ltd. |
21-
| nginx-plus-module-geoip2 | 35+3.4-1 | NGINX Plus 3rd-party GeoIP2 dynamic modules |
22-
| nginx-plus-module-headers-more | 35+0.37-1 | NGINX Plus 3rd-party headers-more dynamic module |
23-
| nginx-plus-module-image-filter | 35-1 | NGINX Plus image filter dynamic module |
24-
| nginx-plus-module-lua | 35+0.10.28-1 | NGINX Plus 3rd-party Lua dynamic modules |
25-
| nginx-plus-module-ndk | 35+0.3.3-1 | NGINX Plus 3rd-party NDK dynamic module |
26-
| nginx-plus-module-njs | 35+0.9.1-1 | NGINX Plus njs dynamic modules |
27-
| nginx-plus-module-otel | 35+0.1.2-1 | NGINX Plus OpenTelemetry dynamic module |
28-
| nginx-plus-module-xslt | 35-1 | NGINX Plus xslt dynamic module |
29-
| nginx-plus-module-appprotect | 35+5.498.0-1 | NGINX Plus app protect dynamic module version 5.498.0 |
30-
| app-protect-module-plus | 35+5.498.0-1 | App-Protect package for Nginx Plus, includes all of the default files and examples. NGINX App Protect provides web application firewall (WAF) security protection for your web applications, including OWASP Top 10 attacks. |
31-
| app-protect-plugin | 6.20.0-1 | NGINX App Protect plugin |
32-
{{</bootstrap-table>}}
33-
3410
## Access module versions using data plane API:
3511

36-
To access available module versions from the data plane API, follow these steps:
37-
- View Your API Endpoints and Create an API Key
38-
- Follow the [NGINXaaS data plane API endpoint]({{< ref "/nginxaas-azure/loadbalancer-kubernetes.md#nginxaas-data-plane-api-endpoint" >}}) and [Create an NGINXaaS data plane API key]({{< ref "/nginxaas-azure/loadbalancer-kubernetes.md#create-an-nginxaas-data-plane-api-key" >}}) to locate your dataplane API endpoint and create an API key.
12+
To view the version of the NGINX Plus modules that are part of your deployment, follow these steps:
13+
- Retrieve your [data plane API endpoint]({{< ref "/nginxaas-azure/loadbalancer-kubernetes.md#nginxaas-data-plane-api-endpoint" >}}).
3914

40-
- Construct the Request URL
41-
- Add `/packages` to your data plane API endpoint, for example `https://<your-endpoint>/packages`.
15+
- Create an [API key]({{< ref "/nginxaas-azure/loadbalancer-kubernetes.md#create-an-nginxaas-data-plane-api-key" >}}) if you do not already have one.
4216

43-
- Authenticate API requests
44-
- Encode your API key to Base64 and add the prefix `ApiKey` to the encoded string.
45-
- Set the `Authorization` HTTP header to:
46-
`ApiKey <your_hashed_api_key>`
17+
- Construct the package request URL.
18+
- Add **/packages** to your data plane API endpoint.
19+
- For example: `https://my-deployment-b7e43dfb7e26.eastus.nginxaas.net/packages`
4720

21+
- Authenticate the API requests using the **Authorization** HTTP header.
22+
- Encode your API key to **base64** and add the prefix **ApiKey** to the encoded string.
23+
- For example:
24+
- Authorization: ApiKey ZjkzY2ZlYWItZjAxNS01MDAwLTgyM2UtNjBmNjY5ZTUwOWF2
4825

26+
Request Example:
4927
```shell
50-
curl -H "Authorization: ApiKey <your_hashed_api_key>" https://<your-endpoint>/packages
28+
curl -H "Authorization: ApiKey <your_base64_api_key>" https://<your-dataplane-api-endpoint>/packages
5129
```
5230

5331
Response Example:
5432
```json
5533
{
5634
"packages": [
5735
{
58-
"name": "nginx-plus-module-headers-more",
59-
"version":"35+0.37-1~jammy"
36+
"name": "nginx-plus",
37+
"version": "33-4~jammy"
38+
},
39+
{
40+
"name": "nginx-agent",
41+
"version": "1.20.15-2010533110"
42+
},
43+
{
44+
"name": "nginx-plus-module-appprotect",
45+
"version": "33+5.264.0-1~jammy"
46+
},
47+
{
48+
"name": "nginx-plus-module-ndk",
49+
"version": "33+0.3.3-1~jammy"
6050
},
6151
{
62-
"name": "nginx-plus-module-otel",
63-
"version": "35+0.1.2-1~jammy"
52+
"name": "nginx-plus-module-njs",
53+
"version": "33+0.8.9-1~jammy"
6454
},
6555
...
6656
]
6757
}
6858
```
69-
70-
71-
## July 03, 2025
72-
73-
### Stable
74-
75-
{{< table >}}
76-
77-
| Name | Version | Description |
78-
|------------------------------------------|--------------------------|------------------------------------------------------------------------|
79-
| nginx-plus | 1.27.2 (nginx-plus-r33-p2) | NGINX Plus, provided by Nginx, Inc. |
80-
| nginx-agent | 1.19.15-1795423089 | NGINX Agent - Management for NGINXaaS |
81-
| Operating System | Ubuntu 22.04.5 | Jammy Jellyfish, provided by Canonical Ltd. |
82-
| nginx-plus-module-geoip2 | 33+3.4-1 | NGINX Plus 3rd-party GeoIP2 dynamic modules |
83-
| nginx-plus-module-headers-more | 33+0.37-1 | NGINX Plus 3rd-party headers-more dynamic module |
84-
| nginx-plus-module-image-filter | 33-1 | NGINX Plus image filter dynamic module |
85-
| nginx-plus-module-lua | 33+0.10.27-1 | NGINX Plus 3rd-party Lua dynamic modules |
86-
| nginx-plus-module-ndk | 33+0.3.3-1 | NGINX Plus 3rd-party NDK dynamic module |
87-
| nginx-plus-module-njs | 33+0.8.9-1 | NGINX Plus njs dynamic modules |
88-
| nginx-plus-module-otel | 33+0.1.0-1 | NGINX Plus OpenTelemetry dynamic module |
89-
| nginx-plus-module-xslt | 33-1 | NGINX Plus xslt dynamic module |
90-
| nginx-plus-module-appprotect | 33+5.264.0-1 | NGINX Plus app protect dynamic module version 5.264.0 |
91-
| app-protect-module-plus | 33+5.264.0-1 | App-Protect package for Nginx Plus, includes all of the default files and examples. NGINX App Protect provides web application firewall (WAF) security protection for your web applications, including OWASP Top 10 attacks. |
92-
| app-protect-plugin | 6.9.0-1 | NGINX App Protect plugin |
93-
{{< /table >}}
94-
95-
96-
97-
### Preview
98-
99-
{{< table >}}
100-
101-
| Name | Version | Description |
102-
|------------------------------------------|--------------------------|------------------------------------------------------------------------|
103-
| nginx-plus | 1.27.2 (nginx-plus-r33-p2) | NGINX Plus, provided by Nginx, Inc. |
104-
| nginx-agent | 1.19.15-1795423089 | NGINX Agent - Management for NGINXaaS |
105-
| Operating System | Ubuntu 22.04.5 | Jammy Jellyfish, provided by Canonical Ltd. |
106-
| nginx-plus-module-geoip2 | 33+3.4-1 | NGINX Plus 3rd-party GeoIP2 dynamic modules |
107-
| nginx-plus-module-headers-more | 33+0.37-1 | NGINX Plus 3rd-party headers-more dynamic module |
108-
| nginx-plus-module-image-filter | 33-1 | NGINX Plus image filter dynamic module |
109-
| nginx-plus-module-lua | 33+0.10.27-1 | NGINX Plus 3rd-party Lua dynamic modules |
110-
| nginx-plus-module-ndk | 33+0.3.3-1 | NGINX Plus 3rd-party NDK dynamic module |
111-
| nginx-plus-module-njs | 33+0.8.9-1 | NGINX Plus njs dynamic modules |
112-
| nginx-plus-module-otel | 33+0.1.0-1 | NGINX Plus OpenTelemetry dynamic module |
113-
| nginx-plus-module-xslt | 33-1 | NGINX Plus xslt dynamic module |
114-
| nginx-plus-module-appprotect | 33+5.264.0-1 | NGINX Plus app protect dynamic module version 5.264.0 |
115-
| app-protect-module-plus | 33+5.264.0-1 | App-Protect package for Nginx Plus, includes all of the default files and examples. NGINX App Protect provides web application firewall (WAF) security protection for your web applications, including OWASP Top 10 attacks. |
116-
| app-protect-plugin | 6.9.0-1 | NGINX App Protect plugin |
117-
{{< /table >}}
Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
---
2+
title: Service status
3+
weight: 710
4+
toc: true
5+
url: /nginxaas/azure/service-status/
6+
type:
7+
- how-to
8+
---
9+
10+
You can monitor the health status of the F5 NGINXaaS service at the [F5 Cloud Status page](https://www.f5cloudstatus.com/history?filter=88pmy2nlbd01). The status page provides information related to service degradation and unscheduled downtime. When appropriate, we provide mitigations to minimize the impact to your deployments.
11+
12+
You may also subscribe to receive emails, webhooks, and RSS feeds when an incident related to NGINXaaS is created, updated, or resolved.

0 commit comments

Comments
 (0)