F5 DoS for NGINX 4.11
F5 DoS for NGINX provides behavioral protection against denial-of-service (DoS) attacks for your web applications.
October 14, 2026
- NGINX Plus R37.0 support, the long-term support release
- Debian 11 support removed
- Errors in the security log configuration now name the file that failed to parse.
| Distribution name | Package file |
|---|---|
| Alpine 3.21 | app-protect-dos-37+4.11.0-r1.apk |
| Alpine 3.22 | app-protect-dos-37+4.11.0-r1.apk |
| Amazon Linux 2023 | app-protect-dos-37+4.11.0-1.amzn2023.ngx.x86_64.rpm |
| RHEL 8 and Rocky Linux 8 | app-protect-dos-37+4.11.0-1.el8.ngx.x86_64.rpm |
| RHEL 9 and Rocky Linux 9 | app-protect-dos-37+4.11.0-1.el9.ngx.x86_64.rpm |
| RHEL 10 and Rocky Linux 10 | app-protect-dos-37+4.11.0-1.el10.ngx.x86_64.rpm |
| Debian 12 | app-protect-dos_37+4.11.0-1~bookworm_amd64.deb |
| Debian 13 | app-protect-dos_37+4.11.0-1~trixie_amd64.deb |
| Ubuntu 22.04 | app-protect-dos_37+4.11.0-1~jammy_amd64.deb |
| Ubuntu 24.04 | app-protect-dos_37+4.11.0-1~noble_amd64.deb |
| NGINX Plus | NGINX Plus R37.0 |
- F5 DoS for NGINX 4.11 requires NGINX Plus R37.0, but 4.10 requires R37.1. R37.0 is the long-term support release, so you move NGINX Plus back from R37.1 to R37.0 when you update from 4.10 to 4.11. Plan the update as a coordinated change, not a routine one.
- Each
nginx-plus-module-appprotectdospackage depends on a virtual package namednginx-plus-r<RELEASE>.<RELEASE>is the NGINX Plus release number. Only the matching NGINX Plus release provides that package, so update F5 DoS for NGINX and NGINX Plus together. - On Debian and Ubuntu,
aptinstalls only the newestnginx-plusand won’t choose an older one. When you install a specific F5 DoS for NGINX version, pinnginx-plustoo. Otherwise, the install fails with "Unable to correct problems, you have held broken packages". For the exact commands, see the F5 DoS for NGINX Deployment Guide. - If you use L4 accelerated mitigation, pin
app-protect-dos-ebpf-managerto the same version asapp-protect-dos. An unpinned package installs the newest version, which can differ from your other packages. - Debian 11 reached end of life and is no longer supported. If you run Debian 11, upgrade to Debian 12 or Debian 13 before you update to 4.11.