Merge branch 'main' into Update-docs-issue147

ADubhlaoich · web-flow · commit 867c5dfec3f0 · 2025-07-02T11:28:46.000+01:00
diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml
@@ -25,6 +25,6 @@ jobs:
         uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2 # v4.2.2
 
       - name: Scan
-        uses: fossas/fossa-action@c0a7d013f84c8ee5e910593186598625513cc1e4 # v1.6.0
+        uses: fossas/fossa-action@3ebcea1862c6ffbd5cf1b4d0bd6b3fe7bd6f2cac # v1.7.0
         with:
           api-key: ${{ secrets.FOSSA_TOKEN }}
diff --git a/.github/workflows/ossf_scorecard.yml b/.github/workflows/ossf_scorecard.yml
@@ -56,6 +56,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload SARIF results to code scanning
-        uses: github/codeql-action/upload-sarif@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
+        uses: github/codeql-action/upload-sarif@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
         with:
           sarif_file: results.sarif
diff --git a/content/nginx-one/_index.md b/content/nginx-one/_index.md
@@ -1,48 +1,42 @@
 ---
 title: F5 NGINX One Console
-nd-subtitle: The F5 NGINX One Console makes it easy to manage NGINX instances across locations and environments. The console lets you monitor and control your NGINX fleet from one place—you can check configurations, track performance metrics, identify security vulnerabilities, manage SSL certificates, and more.
+nd-subtitle: Optimize, secure, and scale your modern apps 
 url: /nginx-one/
 nd-landing-page: true
 cascade:
   logo: "NGINX-One-product-icon.svg"
 nd-content-type: landing-page
 nd-product: NGINX One
 ---
+
+## About
+[//]: # "These are Markdown comments to guide you through document structure. Remove them as you go, as well as any unnecessary sections."
+[//]: # "Use underscores for _italics_, and double asterisks for **bold**."
+[//]: # "Backticks are for `monospace`, used sparingly and reserved mostly for executable names - they can cause formatting problems. Avoid them in tables: use italics instead."
+The F5 NGINX One Console makes it easy to manage NGINX instances across locations and environments. The console lets you monitor and control your NGINX fleet from one place—you can check configurations, track performance metrics, identify security vulnerabilities, manage SSL certificates, and more.
+
+## Featured content
+[//]: # "You can add a maximum of three cards: any extra will not display."
+[//]: # "One card will take full width page: two will take half width each. Three will stack like an inverse pyramid."
+[//]: # "Some examples of content could be the latest release note, the most common install path, and a popular new feature."
 {{<card-layout>}}
-  {{<card-section>}}
-    {{<card title="Manage your NGINX fleet" titleUrl="/nginx-one/about/" >}}
-      Simplify, scale, secure, and collaborate with your NGINX fleet 
-    {{</card >}}
-    {{<card title="Get started" titleUrl="/nginx-one/getting-started/">}}
+  {{<card-section showAsCards="true" isFeaturedSection="true">}}
+    {{<card title="Get started" titleUrl="nginx-one/getting-started/" isFeatured="true" icon="unplug">}}
       See benefits from the NGINX One Console
     {{</card >}}
-    {{<card title="Connect your instances" titleUrl="/nginx-one/connect-instances/" >}}
-      Work with data plane keys, containers, and proxy servers
-    {{</card >}}
-    {{<card title="Manage your NGINX instances" titleUrl="/nginx-one/nginx-configs/">}}
-      Monitor and maintain your deployments
-    {{</card >}}
-    {{<card title="Draft new configurations" titleUrl="/nginx-one/staged-configs">}}
-      Work with Staged Configurations
-    {{</ card >}}
-    {{<card title="Set up metrics" titleUrl="/nginx-one/metrics/">}}
-      Review your deployments in a dashboard 
-    {{</card >}}
-    {{<card title="Organize users with RBAC" titleUrl="/nginx-one/rbac/">}}
-      Assign responsibilities with role-based access control 
-    {{</card >}}
-    {{<card title="Automate with the NGINX One API" titleUrl="/nginx-one/api/">}}
-      Manage your NGINX fleet over REST 
-    {{</card >}}
-    {{<card title="Glossary" titleUrl="/nginx-one/glossary/">}}
-      Learn terms unique to NGINX One Console 
-    {{</card >}}
-    {{<card title="Changelog" titleUrl="/nginx-one/changelog/" >}}{{< changelog-dates >}}{{</card >}}
-  {{</card-section >}}
-{{</card-layout >}}
+    {{<card title="Changelog" titleUrl="nginx-one/changelog/" icon="clock-alert">}}
+      See latest updates: New features, improvements, and bug fixes
+    {{</card>}}
+    {{<card title="Add an NGINX instance" titleUrl="nginx-one/connect-instances/add-instance/" icon="copy-plus">}}
+      Connect your instances to NGINX One
+    {{</card>}}
+  {{</card-section>}}
+{{</card-layout>}}
 
-# Other Components
-{{<card-layout>}}
+## Other Components  
+[//]: # "You can add any extra content for the page here, such as additional cards, diagrams or text."
+
+{{< card-layout >}}
   {{< card-section title="Kubernetes Solutions">}}
     {{< card title="NGINX Ingress Controller" titleUrl="/nginx-ingress-controller/" brandIcon="NGINX-Ingress-Controller-product-icon">}}
       Kubernetes traffic management with API gateway, identity, and observability features. 
diff --git a/content/nginx-one/changelog.md b/content/nginx-one/changelog.md
@@ -30,6 +30,14 @@ h2 {
 
 Stay up-to-date with what's new and improved in the F5 NGINX One Console.
 
+## July 1, 2025
+
+### NGINX Agent version 3 support
+
+We have added support for NGINX Agent 3.x in NGINX One Console. You can now:
+
+- Manage data plane instances with NGINX Agent version 3.
+
 ## May 19, 2025
 
 ### Import and export your Staged Configs
diff --git a/content/nginxaas-azure/changelog.md b/content/nginxaas-azure/changelog.md
@@ -16,6 +16,13 @@ To review older entries, visit the [Changelog archive]({{< ref "/nginxaas-azure/
 
 ## May 22, 2025
 
+- {{% icon-feature %}} **NGINXaaS for Azure now supports IPv6**
+
+  Users can now configure their NGINXaaS deployments with just a single IPv6 frontend IP or in dual-stack (IPv4 + IPv6) mode.
+
+  If you plan to use an IPv6 IP address whether standalone or in dual-stack mode, ensure that the subnet used by NGINXaaS has both IPv4 and IPv6 address spaces included. For more information on creating a vnets and subnets with IPv6 address spaces, refer to [Add IPv6 to virtual Network](https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/add-dual-stack-ipv6-vm-portal?tabs=azureportal#add-ipv6-to-virtual-network)
+
+
 - {{% icon-feature %}} **NGINXaaS is now running NGINX Plus Release 33 (R33) in the Stable Upgrade Channel**
 
   NGINXaaS for Azure deployments using the **Stable** [Upgrade Channel]({{< ref "/nginxaas-azure/quickstart/upgrade-channels.md" >}}) have now been automatically upgraded to  [NGINX Plus Release 33 (R33)]({{< ref "/nginx/releases.md#nginxplusrelease-33-r33" >}}). This upgrade also includes updates to the following NGINX Plus modules:
diff --git a/content/nginxaas-azure/getting-started/create-deployment/deploy-azure-cli.md b/content/nginxaas-azure/getting-started/create-deployment/deploy-azure-cli.md
@@ -64,6 +64,25 @@ az nginx deployment create --deployment-name
       network-interface-configuration="{subnet-id:/subscriptions/mySubscription/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVNet/subnets/mySubnet}"
    ```
 
+- Create a dual-stack (IPv4 + IPv6) NGINXaaS deployment with public IPs:
+
+   ```bash
+   az nginx deployment create --name myDeployment --resource-group \
+      myResourceGroup --location eastus2 --sku name="standardv2_Monthly" \
+      --network-profile front-end-ip-configuration="{public-ip-addresses:[{id:/subscriptions/mySubscription/resourceGroups/myResourceGroup/providers/Microsoft.Network/publicIPAddresses/pubIPv4},{id:/subscriptions/mySubscription/resourceGroups/myResourceGroup/providers/Microsoft.Network/publicIPAddresses/pubIPv6}]}" \
+      network-interface-configuration="{subnet-id:/subscriptions/mySubscription/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVNet/subnets/mySubnet}"
+   ```
+
+- Create a dual-stack (IPv4 + IPv6) NGINXaaS deployment with private IPs:
+
+   ```bash
+   az nginx deployment create --name myDeployment --resource-group \
+      myResourceGroup --location eastus2 --sku \
+      name="standardv2_Monthly" --network-profile \
+      front-end-ip-configuration="{private-ip-addresses:[{private-ip-allocation-method:Static,subnet-id:/subscriptions/mySubscription/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVNet/subnets/mySubnet,private-ip-address:10.0.0.2},{private-ip-allocation-method:Static,subnet-id:/subscriptions/mySubscription/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVNet/subnets/mySubnet,private-ip-address:2001:0db8:85a3:0000:0000:8a2e:0370:7334}]}" \
+      network-interface-configuration="{subnet-id:/subscriptions/mySubscription/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVNet/subnets/mySubnet}"
+   ```
+
 - Create a deployment with managed identity, storage account and scaling:
 
    ```bash
@@ -115,6 +134,14 @@ az nginx deployment update [--add]
    tag2="value2" --enable-diagnostics
    ```
 
+Update an NGINXaaS deployment to a dual-stack (IPv4 + IPv6) network configuration with public IPs:
+
+   ```bash
+   az nginx deployment update --name myDeployment --resource-group myResourceGroup \
+      --network-profile front-end-ip-configuration="{public-ip-addresses:[{id:/subscriptions/mySubscription/resourceGroups/myResourceGroup/providers/Microsoft.Network/publicIPAddresses/pubIPv4},{id:/subscriptions/mySubscription/resourceGroups/myResourceGroup/providers/Microsoft.Network/publicIPAddresses/pubIPv6}]}" \
+      network-interface-configuration="{subnet-id:/subscriptions/mySubscription/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVNet/subnets/mySubnet}"
+   ```
+
 See the [Azure CLI Deployment Update Documentation](https://learn.microsoft.com/en-us/cli/azure/nginx/deployment#az-nginx-deployment-update) for more details on the required and optional parameters.
 
 
diff --git a/content/nginxaas-azure/getting-started/create-deployment/deploy-azure-portal.md b/content/nginxaas-azure/getting-started/create-deployment/deploy-azure-portal.md
@@ -63,6 +63,7 @@ You can start the NGINXaaS deployment process by visiting the [Create NGINXaaS](
    - The minimum subnet size for NGINXaaS is `/27` and is enough for a single NGINXaaS deployment even at large scales.
    - You can use an existing subnet; make sure that the subnet is delegated to `NGINX.NGINXPLUS/nginxDeployments` before creating a deployment in it. The subnet can contain other resources.
    - You can deploy more than one NGINXaaS in the same subnet. Every deployment in the subnet will share the subnet IP address space. A larger subnet, for example, a `/24` is recommended.
+   - If you plan on using an IPv6 address on the frontend, make sure the subnet is dual-stack, i.e., the subnet has both IPv4 and IPv6 address spaces. Attempting to use a subnet that is not dual-stack will cause deployment creation to fail.
    - Changes to a virtual network's DNS settings will not be applied automatically to your NGINXaaS deployment. To ensure DNS settings are applied, you must add any custom DNS servers to the VNET's DNS settings before creating an NGINXaaS deployment. As a workaround for existing deployments, we recommend using the [`resolver` directive](https://nginx.org/en/docs/http/ngx_http_core_module.html#resolver) to explicitly specify your name server(s) and the [`resolve` parameter](https://nginx.org/en/docs/http/ngx_http_upstream_module.html#resolve) to automatically re-resolve the domain name of the server without restarting NGINX.
 
       <details>
diff --git a/content/nginxaas-azure/known-issues.md b/content/nginxaas-azure/known-issues.md
@@ -103,8 +103,6 @@ If a configuration update request uses a certificate that is in failed `provisio
 - NGINXaaS deployments cannot access [Private Endpoints](https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview) behind network security groups for private links. Attempts to do so will fail silently.
 - NGINXaaS deployments cannot access [Private Endpoints](https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview) in a globally peered VNET. Attempts to do so will fail silently.
 - The resource group which contains the public IP resource attached to NGINXaaS deployment cannot be moved across subscriptions. Attempts to do so will result in a validation error.
-- Creating an NGINXaaS deployment in a dual-stack subnet is not supported. Attempts to do so will result in a validation error.
-- NGINXaaS deployments cannot be created with an IPv6 Public IP address. Attempts to do so will result in a validation error.
 - [Network security group](https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview) (NSG) flow logs will not be available for IP traffic flowing through an NGINXaaS deployment attached to a customer delegated subnet. Flow logs for other resources on the same subnet will be available as normal.
 
 ### {{% icon-bug %}} Deployment locked when updating mutliple certificates at once. (ID-767)
diff --git a/content/nginxaas-azure/module-changelog.md b/content/nginxaas-azure/module-changelog.md
@@ -0,0 +1,57 @@
+---
+title: "Module Changelog"
+weight: 950
+toc: true
+url: /nginxaas/azure/module-changelog/
+---
+
+Learn about the modules supported by the latest versions of F5 NGINX as a Service for Azure.
+
+
+## July 03, 2025 
+
+### Stable
+
+ {{<bootstrap-table "table table-bordered table-striped table-responsive table-sm">}}
+
+| Name                                     | Version                  | Description                                                            |
+|------------------------------------------|--------------------------|------------------------------------------------------------------------|
+| nginx-plus                               | 1.27.2 (nginx-plus-r33-p2)    | NGINX Plus, provided by Nginx, Inc.                          |
+| nginx-agent                              | 1.19.15-1795423089  | NGINX Agent - Management for NGINXaaS                                  |
+| Operating System                         | Ubuntu 22.04.5      | Jammy Jellyfish, provided by Canonical Ltd.                            |
+| nginx-plus-module-geoip2                 | 33+3.4-1            | NGINX Plus 3rd-party GeoIP2 dynamic modules                            |
+| nginx-plus-module-headers-more           | 33+0.37-1           | NGINX Plus 3rd-party headers-more dynamic module                       |
+| nginx-plus-module-image-filter           | 33-1                | NGINX Plus image filter dynamic module                                 |
+| nginx-plus-module-lua                    | 33+0.10.27-1        | NGINX Plus 3rd-party Lua dynamic modules                               |
+| nginx-plus-module-ndk                    | 33+0.3.3-1          | NGINX Plus 3rd-party NDK dynamic module                                |
+| nginx-plus-module-njs                    | 33+0.8.9-1          | NGINX Plus njs dynamic modules                                         |
+| nginx-plus-module-otel                   | 33+0.1.0-1          | NGINX Plus OpenTelemetry dynamic module                                |
+| nginx-plus-module-xslt                   | 33-1                | NGINX Plus xslt dynamic module                                         |
+| nginx-plus-module-appprotect             | 33+5.264.0-1        | NGINX Plus app protect dynamic module version 5.264.0                  |
+| app-protect-module-plus                  | 33+5.264.0-1        | App-Protect package for Nginx Plus, includes all of the default files and examples. NGINX App Protect provides web application firewall (WAF) security protection for your web applications, including OWASP Top 10 attacks. |
+| app-protect-plugin                       | 6.9.0-1             | NGINX App Protect plugin |
+{{</bootstrap-table>}}
+
+
+
+### Preview
+
+ {{<bootstrap-table "table table-bordered table-striped table-responsive table-sm">}}
+
+| Name                                     | Version                  | Description                                                            |
+|------------------------------------------|--------------------------|------------------------------------------------------------------------|
+| nginx-plus                               | 1.27.2 (nginx-plus-r33-p2)    | NGINX Plus, provided by Nginx, Inc.                          |
+| nginx-agent                              | 1.19.15-1795423089  | NGINX Agent - Management for NGINXaaS                                  |
+| Operating System                         | Ubuntu 22.04.5      | Jammy Jellyfish, provided by Canonical Ltd.                            |
+| nginx-plus-module-geoip2                 | 33+3.4-1            | NGINX Plus 3rd-party GeoIP2 dynamic modules                            |
+| nginx-plus-module-headers-more           | 33+0.37-1           | NGINX Plus 3rd-party headers-more dynamic module                       |
+| nginx-plus-module-image-filter           | 33-1                | NGINX Plus image filter dynamic module                                 |
+| nginx-plus-module-lua                    | 33+0.10.27-1        | NGINX Plus 3rd-party Lua dynamic modules                               |
+| nginx-plus-module-ndk                    | 33+0.3.3-1          | NGINX Plus 3rd-party NDK dynamic module                                |
+| nginx-plus-module-njs                    | 33+0.8.9-1          | NGINX Plus njs dynamic modules                                         |
+| nginx-plus-module-otel                   | 33+0.1.0-1          | NGINX Plus OpenTelemetry dynamic module                                |
+| nginx-plus-module-xslt                   | 33-1                | NGINX Plus xslt dynamic module                                         |
+| nginx-plus-module-appprotect             | 33+5.264.0-1        | NGINX Plus app protect dynamic module version 5.264.0                  |
+| app-protect-module-plus                  | 33+5.264.0-1        | App-Protect package for Nginx Plus, includes all of the default files and examples. NGINX App Protect provides web application firewall (WAF) security protection for your web applications, including OWASP Top 10 attacks. |
+| app-protect-plugin                       | 6.9.0-1             | NGINX App Protect plugin |
+{{</bootstrap-table>}}
diff --git a/content/nginxaas-azure/overview/overview.md b/content/nginxaas-azure/overview/overview.md
@@ -36,8 +36,8 @@ The key capabilities of NGINXaaS for Azure are:
 
 ## Limitations
 
-- NGINXaaS does not support IPv6 yet.
-- NGINXaaS supports one public or private IP per deployment. NGINXaaS doesn't support a mix of public and private IPs at this time.
+- NGINXaaS supports at most one IPv4 and one IPv6 IP address at any given time.
+- NGINXaaS doesn't support a mix of public and private IPs at this time.
 - The IP address associated with an NGINXaaS deployment can't be changed from public to private, or from private to public.
 
 ## Supported regions
diff --git a/content/nim/deploy/kubernetes/deploy-using-helm.md b/content/nim/deploy/kubernetes/deploy-using-helm.md
diff --git a/documentation/style-guide.md b/documentation/style-guide.md
