Skip to content

Commit a4d754b

Browse files
authored
Merge branch 'main' into unit/remove-docs
2 parents 59aa2b4 + a3dba2a commit a4d754b

File tree

4 files changed

+38
-34
lines changed

4 files changed

+38
-34
lines changed

content/nginxaas-azure/getting-started/nginx-configuration/overview.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ Some directives cannot be overridden by the user provided configuration.
6767
|------------------ | ----------------------- | -----------------|
6868
| `user` | `nginx` | The `nginx` user has the correct permissions for accessing certificates, policy files and other auxfiles. |
6969
| `worker_processes` | `auto` | Set to `auto` to automatically set `worker_processes` to the number of CPU cores. |
70-
| `worker_connections` | <ul><li>Standard V2 plan `4000`</li><li>basic plan `3000`</li></ul> | To ensure reasonable performance of the NGINXaaS deployment for Standard V2 plan, the `worker_connections` is fixed at 400/NCU; for basic plan this is set lower.<br><br> Changing the value in the config has no effect on the NGINX process in the deployment. |
70+
| `worker_connections` | <ul><li>Standard V2 plan `4000`</li><li>basic plan `20`</li></ul> | To ensure reasonable performance of the NGINXaaS deployment for Standard V2 plan, the `worker_connections` is fixed at 400/NCU; for basic plan this is set lower.<br><br> Changing the value in the config has no effect on the NGINX process in the deployment. |
7171
| `pid` | `/run/nginx/nginx.pid` | Set to this value to allow NGINXaaS to automatically manage the NGINX master process. |
7272
| `daemon` | `on` | Automatically set to `on` to allow NGINXaaS to manage the NGINX master process. |
7373
| `master_process` | `on` | This directive is intended for NGINX developers. |

content/waf/fundamentals/technical-specifications.md

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -41,18 +41,19 @@ The F5 WAF for NGINX package has the following dependencies:
4141

4242
| Module name | Description |
4343
| ------------------------------------------ | ----------- |
44-
| nginx-plus-module-appprotect | NGINX Plus dynamic module for F5 WAF for NGINX |
45-
| app-protect-engine | The F5 WAF for NGINX enforcement engine |
46-
| app-protect-plugin | The F5 WAF for NGINX connector API between the engine and the NGINX Plus dynamic module |
44+
| app-protect-attack-signatures | The F5 WAF for NGINX attack signatures update package |
45+
| app-protect-bot-signatures | The F5 WAF for NGINX bot signatures update package |
46+
| app-protect-common | The F5 WAF for NGINX shared libraries package |
4747
| app-protect-compiler | The F5 WAF for NGINX enforcement engine compiler agent |
48-
| app-protect-common | The F5 WAF for NGINX shared libraries package |
48+
| app-protect-engine | The F5 WAF for NGINX enforcement engine |
4949
| app-protect-geoip | The F5 WAF for NGINX geolocation update package |
5050
| app-protect-graphql | The F5 WAF for NGINX shared library package for GraphQL protection |
51-
| app-protect-attack-signatures | The F5 WAF for NGINX attack signatures update package |
52-
| app-protect-threat-campaigns | The F5 WAF for NGINX threat campaigns update package |
53-
| app-protect-bot-signatures | The F5 WAF for NGINX bot signatures update package |
54-
| app-protect-selinux (**1**) | The prebuilt SELinux policy module for F5 WAF for NGINX |
5551
| app-protect-ip-intelligence (**1**, **2**) | Necessary for the IP intelligence feature |
52+
| app-protect-plugin | The F5 WAF for NGINX connector API between the engine and the NGINX Plus dynamic module |
53+
| app-protect-selinux (**1**) | The prebuilt SELinux policy module for F5 WAF for NGINX |
54+
| app-protect-threat-campaigns | The F5 WAF for NGINX threat campaigns update package |
55+
| nginx-plus-module-appprotect | NGINX Plus dynamic module for F5 WAF for NGINX |
56+
5657

5758
1. _Optional dependencies_
5859
2. _This module needs to be installed separately, and includes a client for downloading and updating the feature's database_
@@ -63,4 +64,4 @@ The following security policy features are available with F5 WAF for NGINX.
6364

6465
The names link to additional information in the [Policies]({{< ref "/waf/policies/configuration.md" >}}) section.
6566

66-
{{< include "waf/table-policy-features.md" >}}
67+
{{< include "waf/table-policy-features.md" >}}

content/waf/install/virtual-environment.md

Lines changed: 22 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -127,27 +127,6 @@ Install the F5 WAF for NGINX package and its dependencies:
127127
sudo dnf install app-protect
128128
```
129129

130-
### Ubuntu
131-
132-
Add the F5 WAF for NGINX repositories:
133-
134-
```shell
135-
printf "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
136-
https://pkgs.nginx.com/app-protect/ubuntu `lsb_release -cs` nginx-plus\n" | \
137-
sudo tee /etc/apt/sources.list.d/nginx-app-protect.list
138-
139-
printf "deb [signed-by=/usr/share/keyrings/app-protect-security-updates.gpg] \
140-
https://pkgs.nginx.com/app-protect-security-updates/ubuntu `lsb_release -cs` nginx-plus\n" | \
141-
sudo tee /etc/apt/sources.list.d/app-protect-security-updates.list
142-
```
143-
144-
Update the repositories, then install the F5 WAF for NGINX package and its dependencies:
145-
146-
```shell
147-
sudo apt-get update
148-
sudo apt-get install app-protect
149-
```
150-
151130
### RHEL / Rocky Linux 9
152131

153132
Add the F5 WAF for NGINX repository:
@@ -174,6 +153,27 @@ Install the F5 WAF for NGINX package and its dependencies:
174153
sudo dnf install app-protect
175154
```
176155

156+
### Ubuntu
157+
158+
Add the F5 WAF for NGINX repositories:
159+
160+
```shell
161+
printf "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
162+
https://pkgs.nginx.com/app-protect/ubuntu `lsb_release -cs` nginx-plus\n" | \
163+
sudo tee /etc/apt/sources.list.d/nginx-app-protect.list
164+
165+
printf "deb [signed-by=/usr/share/keyrings/app-protect-security-updates.gpg] \
166+
https://pkgs.nginx.com/app-protect-security-updates/ubuntu `lsb_release -cs` nginx-plus\n" | \
167+
sudo tee /etc/apt/sources.list.d/app-protect-security-updates.list
168+
```
169+
170+
Update the repositories, then install the F5 WAF for NGINX package and its dependencies:
171+
172+
```shell
173+
sudo apt-get update
174+
sudo apt-get install app-protect
175+
```
176+
177177
## Update configuration files
178178

179179
{{< include "waf/install-update-configuration.md" >}}
@@ -184,4 +184,4 @@ sudo dnf install app-protect
184184

185185
## Next steps
186186

187-
{{< include "waf/install-next-steps.md" >}}
187+
{{< include "waf/install-next-steps.md" >}}

content/waf/policies/configuration.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -218,7 +218,10 @@ Similar to policies, it is customized from the base template, so it detects and
218218
To obtain the strict policy, execute the following command:
219219

220220
```shell
221-
sudo docker run --rm -v $(pwd):$(pwd) --entrypoint='' private-registry.nginx.com/nap/waf-compiler:1.0.0 cat /etc/app_protect/conf/NginxStrictPolicy.json
221+
sudo docker run --rm -v $(pwd):$(pwd) \
222+
--entrypoint='' \
223+
private-registry.nginx.com/nap/waf-compiler:1.0.0 \
224+
cat /etc/app_protect/conf/NginxStrictPolicy.json
222225
```
223226

224227
Replace the `1.0.0` with the actual release version.
@@ -391,4 +394,4 @@ Be aware, however, that in a transparent policy no violations are blocked, even
391394
}
392395
}
393396
}
394-
```
397+
```

0 commit comments

Comments
 (0)