F5 DoS for NGINX 4.12
F5 DoS for NGINX provides behavioral protection against denial-of-service (DoS) attacks for your web applications.
October 14, 2026
- NGINX Plus R37.2 support
Debian 11 support was removed in 4.11 and is not reinstated in 4.12.
| Distribution name | Package file |
|---|---|
| Alpine 3.21 | app-protect-dos-37+4.12.0-r1.apk |
| Alpine 3.22 | app-protect-dos-37+4.12.0-r1.apk |
| Amazon Linux 2023 | app-protect-dos-37+4.12.0-1.amzn2023.ngx.x86_64.rpm |
| RHEL 8 and Rocky Linux 8 | app-protect-dos-37+4.12.0-1.el8.ngx.x86_64.rpm |
| RHEL 9 and Rocky Linux 9 | app-protect-dos-37+4.12.0-1.el9.ngx.x86_64.rpm |
| RHEL 10 and Rocky Linux 10 | app-protect-dos-37+4.12.0-1.el10.ngx.x86_64.rpm |
| Debian 12 | app-protect-dos_37+4.12.0-1~bookworm_amd64.deb |
| Debian 13 | app-protect-dos_37+4.12.0-1~trixie_amd64.deb |
| Ubuntu 22.04 | app-protect-dos_37+4.12.0-1~jammy_amd64.deb |
| Ubuntu 24.04 | app-protect-dos_37+4.12.0-1~noble_amd64.deb |
| NGINX Plus | NGINX Plus R37.2 |
- F5 DoS for NGINX 4.12 requires NGINX Plus R37.2, whereas 4.11 requires R37.0. Each
nginx-plus-module-appprotectdospackage depends on a virtual package namednginx-plus-r<RELEASE>.<RELEASE>is the NGINX Plus release number. Only the matching NGINX Plus release provides that package, so update F5 DoS for NGINX and NGINX Plus together. - On Debian and Ubuntu,
aptinstalls only the newestnginx-plusand won’t choose an older one. When you install a specific F5 DoS for NGINX version, pinnginx-plustoo. Otherwise, the install fails with "Unable to correct problems, you have held broken packages". For the exact commands, see the F5 DoS for NGINX Deployment Guide. - If you use L4 accelerated mitigation, pin
app-protect-dos-ebpf-managerto the same version asapp-protect-dos. An unpinned package installs the newest version, which can differ from your other packages. - Debian 11 reached end of life and is no longer supported. If you run Debian 11, upgrade to Debian 12 or Debian 13 before you update to 4.12.