Merge branch 'main' into newfield-nic-migration-update

Author: jnewfield

_banners/waf-unification-notice.md

@@ -2,6 +2,4 @@
 
 Welcome to the F5 WAF for NGINX documentation! This product was formerly known as NGINX App Protect WAF.
 
-Documentation is being incrementally rewritten: if you're looking for information that hasn't been re-integrated yet, you can still browse [the old documentation]({{< ref "/nap-waf" >}}).
-
-{{< /banner >}}
+{{< /banner >}}

content/includes/nim/tech-specs/nim-app-protect-support.md

@@ -8,7 +8,7 @@ NGINX Instance Manager supports the following versions of [F5 WAF for NGINX](htt
 
 | NGINX Instance Manager | F5 WAF for NGINX              |
 |------------------------|------------------------------------|
-| 2.17.0–2.20.0          | Release 4.8.0–4.16.0, 5.1.0–5.8.0 |
+| 2.17.0–2.20.0          | Release 4.8.0–4.16.0, 5.1.0–5.9.0 |
 | 2.15.1–2.16.0          | Release 4.8.0–4.10.0              |
 | 2.14.1–2.15.0          | Release 4.4.0–4.7.0               |
 | 2.13.0–2.14.0          | Release 4.3.0–4.5.0               |

content/ngf/install/upgrade-version.md

@@ -68,7 +68,8 @@ Warning: kubectl apply should be used on resource created by either kubectl crea
 
 {{% tab name="Helm" %}}
 
-{{< call-out "important" >}} If you are using NGINX Plus and have a different Secret name than the default `nplus-license` name, specify the Secret name by setting `--set nginx.usage.secretName=<secret-name>` when running `helm install` or `helm upgrade`. {{< /call-out >}}
+
+{{< call-out "important" "Important" >}}If you are using NGINX Plus and have a different Secret name than the default `nplus-license` name, specify the Secret name by setting `--set nginx.usage.secretName=<secret-name>` when running `helm install` or `helm upgrade`.{{< /call-out >}}
 
 To upgrade the release with Helm, you can use the OCI registry, or download the chart and upgrade from the source.
 

content/nic/configuration/global-configuration/command-line-arguments.md

@@ -666,7 +666,7 @@ The default value is `false`.
 
 When enabled, the controller automatically adjusts `proxy_buffers`, `proxy_buffer_size`, and `proxy_busy_buffers_size` to ensure they work together properly and NGINX can start successfully.
 
-More explanation about this feature can be found in the guide [here](<ref "/nic/installation/configuration/proxy-buffers-configuration.md">).
+More explanation about this feature can be found in the guide [here]({{< ref "/nic/configuration/proxy-buffers-configuration.md" >}}).
 
 <a name="cmdoption-enable-directive-autoadjust"></a>
 

content/nim/nginx-app-protect/setup-waf-config-management.md

@@ -55,6 +55,7 @@ The table below shows which WAF compiler version to use for each version of F5 W
 
 | F5 WAF for NGINX version | WAF compiler version       |
 |-------------------------------|----------------------------|
+| 5.9.0                         | nms-nap-compiler-v5.527.0  |
 | 5.8.0                         | nms-nap-compiler-v5.498.0  |
 | 5.7.0                         | nms-nap-compiler-v5.442.0  |
 | 5.6.0                         | nms-nap-compiler-v5.342.0  |
@@ -85,18 +86,22 @@ The table below shows which WAF compiler version to use for each version of F5 W
 
 {{</bootstrap-table>}}
 
+{{< call-out "note" >}}
+Beginning with v5.9.0, both the installation packages for virtual machines and those for containers are categorized under the 5.x.x tag. For previous releases, packages designed for installation on virtual machines were released as 4.x.x versions (NAP 4.15.0, NAP 4.16.0, and so on.), while packages meant for installation on containers were provided as 5.x.x versions (NAP 5.7.0, NAP 5.8.0, and so on.). 
+{{< /call-out >}}
+
 ### Debian or Ubuntu
 
 To install the WAF compiler on Debian or Ubuntu, run the following command:
 
 ```shell
-sudo apt-get install nms-nap-compiler-v5.498.0
+sudo apt-get install nms-nap-compiler-v5.527.0
 ```
 
 If you want to install more than one version of the WAF compiler on the same system, append the `--force-overwrite` option to the install command after the first installation:
 
 ```shell
-sudo apt-get install nms-nap-compiler-v5.498.0 -o Dpkg::Options::="--force-overwrite"
+sudo apt-get install nms-nap-compiler-v5.527.0 -o Dpkg::Options::="--force-overwrite"
 ```
 
 {{< include "nim/nap-waf/restart-nms-integrations.md" >}}
@@ -120,7 +125,7 @@ To install the WAF compiler on RHEL 8.1 :
 3. Install the WAF compiler:
 
    ```shell
-   sudo yum install nms-nap-compiler-v5.498.0
+   sudo yum install nms-nap-compiler-v5.527.0
    ```
 
 ### RHEL 9
@@ -142,7 +147,7 @@ To install the WAF compiler on RHEL 9:
 3. Install the WAF compiler:
 
    ```shell
-   sudo yum install nms-nap-compiler-v5.498.0
+   sudo yum install nms-nap-compiler-v5.527.0
    ```
 
 4. {{< include "nim/nap-waf/restart-nms-integrations.md" >}}
@@ -166,7 +171,7 @@ To install the WAF compiler on Oracle Linux 8.1:
 3. Install the WAF compiler:
 
     ```shell
-    sudo yum install nms-nap-compiler-v5.498.0
+    sudo yum install nms-nap-compiler-v5.527.0
     ```
 
 4. {{< include "nim/nap-waf/restart-nms-integrations.md" >}}
@@ -252,7 +257,7 @@ To install the WAF compiler on a system without internet access, complete these
 
 
 Note : Version of NAP compiler can be referred from the table at the top of this page. 
-Current latest version 5.498.0 at the point of writing this document is used in below commands.
+Current latest version 5.527.0 at the point of writing this document is used in below commands.
 
 {{<tabs name="WAF compiler installation in offline environment">}}
 
@@ -282,10 +287,10 @@ sudo wget -q -O /etc/apt/apt.conf.d/90pkgs-nginx https://cs.nginx.com/static/fil
 mkdir -p compiler && cd compiler
 sudo apt-get update
 
-sudo apt-get download nms-nap-compiler-v5.498.0
+sudo apt-get download nms-nap-compiler-v5.527.0
 cd ../
 mkdir -p compiler/compiler.deps
-sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.498.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps
+sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.527.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps
 
 tar -czvf compiler.tar.gz compiler/
 ```
@@ -328,11 +333,11 @@ sudo wget -q -O /etc/apt/apt.conf.d/90pkgs-nginx https://cs.nginx.com/static/fil
 mkdir -p compiler && cd compiler
 sudo apt-get update
 
-sudo apt-get download nms-nap-compiler-v5.498.0
+sudo apt-get download nms-nap-compiler-v5.527.0
 
 cd ../
 mkdir -p compiler/compiler.deps
-sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.498.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps
+sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.527.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps
 tar -czvf compiler.tar.gz compiler/
 ```
 
@@ -370,7 +375,7 @@ sudo yum-config-manager --disable rhel-9-appstream-rhui-rpms
 sudo yum update -y
 sudo mkdir -p nms-nap-compiler
 
-sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.498.0
+sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.527.0
 tar -czvf compiler.tar.gz nms-nap-compiler/
 ```
 
@@ -414,7 +419,7 @@ EOF
 sudo yum update -y
 sudo mkdir -p nms-nap-compiler
 
-sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.498.0
+sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.527.0
 tar -czvf compiler.tar.gz nms-nap-compiler/
 ```
 
@@ -1207,21 +1212,21 @@ sudo /opt/nms-nap-compiler/app_protect-<version>/bin/apcompile -h
 **Example:**
 
 ```shell
-sudo /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -h
+sudo /opt/nms-nap-compiler/app_protect-5.527.0/bin/apcompile -h
 ```
 
 **Expected output:**
 
 ```text
 USAGE:
-    /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile <options>
+    /opt/nms-nap-compiler/app_protect-5.527.0/bin/apcompile <options>
 
 Examples:
-    /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -p /path/to/policy.json -o mypolicy.tgz
-    /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -p policyA.json -g myglobal.json -o /path/to/policyA_bundle.tgz
-    /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -g myglobalsettings.json --global-state-outfile /path/to/myglobalstate.tgz
-    /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -b /path/to/policy_bundle.tgz --dump
-    /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -l logprofA.json -o /path/to/logprofA_bundle.tgz
+    /opt/nms-nap-compiler/app_protect-5.527.0/bin/apcompile -p /path/to/policy.json -o mypolicy.tgz
+    /opt/nms-nap-compiler/app_protect-5.527.0/bin/apcompile -p policyA.json -g myglobal.json -o /path/to/policyA_bundle.tgz
+    /opt/nms-nap-compiler/app_protect-5.527.0/bin/apcompile -g myglobalsettings.json --global-state-outfile /path/to/myglobalstate.tgz
+    /opt/nms-nap-compiler/app_protect-5.527.0/bin/apcompile -b /path/to/policy_bundle.tgz --dump
+    /opt/nms-nap-compiler/app_protect-5.527.0/bin/apcompile -l logprofA.json -o /path/to/logprofA_bundle.tgz
 ```
 
 ### Confirm NGINX Agent configuration on the F5 WAF for NGINX instance

content/waf/changelog.md

@@ -33,9 +33,10 @@ _September 29th, 2025_
 ### Important notes
 
 - Restructured documentation
-    - NGINX App Protect WAF renamed to F5 WAF for NGINX
-    - Versions aligned for packages and other artefacts
-    - No workflow or breaking changes
+    - NGINX App Protect WAF renamed to F5 WAF for NGINX - no workflow or breaking changes
+    - Packaged NAP version (VM-based or bare-metal deployments) alignment - renamed from v4 to v5 so both packaged and containerized offerings now share the same version number (v5.9).
+          This doesn't introduce breaking changes.
+          For example: Upgrades work exactly the same. Users can upgrade from v4.x (for example, 4.16) to 5.9 just as they did between earlier v4 releases (for example, 4.15 → 4.16).
 - Upgrade Go compiler to 1.23.12
 
 ### Packages
@@ -187,4 +188,4 @@ _April 1st, 2025_
 | Ubuntu 22.04             | _app-protect_34+5.342.0-1\~jammy_amd64.deb_        |
 | Ubuntu 24.04             | _app-protect_34+5.342.0-1\~noble_amd64.deb_        |
 | RHEL 8 and Rocky Linux 8 | _app-protect-34+5.342.0-1.el8.ngx.x86_64.rpm_      |
-| RHEL 9                   | _app-protect-34+5.342.0-1.el9.ngx.x86_64.rpm_      |
+| RHEL 9                   | _app-protect-34+5.342.0-1.el9.ngx.x86_64.rpm_      |

content/waf/install/kubernetes-plm.md

@@ -18,7 +18,7 @@ nd-product: NAP-WAF
 
 There are two new features available for Kubernetes through early access:
 
-**Security policy orchestration**, which removes the need for compilaton by updating existing JSON security policies.
+**Security policy orchestration**, which removes the need for compilation by updating existing security policies. The supported security policy formats are JSON, YAML (where the security policy is defined inline within the AppPolicy CR), and Bundle.
 
 **Automated signature updates**, which can auto-update security signatures.
 
@@ -1379,4 +1379,4 @@ status:
 
 - Verify the persistent volume is properly mounted
 - Check storage permissions (Should be 101:101)
-- Confirm PVC is bound to the correct PV
+- Confirm PVC is bound to the correct PV