NGINX App Protect WAF 5.4

November 19th, 2024

Warning:

When upgrading, you must recompile all policy and log bundles using the latest WAF compiler.

Older bundles will be detected and disallowed.

New features

• Added support for Amazon Linux 2023
• Added support for readOnlyFileSystem in Kubernetes deployments
• Added a a policy converter to the compiler
• NGINX App Protect WAF now supports NGINX Plus R33

Please read the subscription licenses topic for information about R33.

Important notes

• Alpine 3.16 is no longer supported.

Resolved issues

• Updated the Go version to 1.23.1
• Fixed apt-get update warning for Ubuntu 22.04

Known issues

On Ubuntu 24.04, you may receive the following error when uninstalling an old version of NGINX App Protect and installing a newer version:

APP_PROTECT failed to open /opt/app_protect/config/config_set.json

This can occur if you are not using the default nginx.conf file and are using the app_protect_enforcer_address directive.

To fix the problem, remove the file configuration folder and recreate the directory, then restart NGINX.

sudo rm /opt/app_protect/config
sudo mkdir /opt/app_protect/config
sudo service nginx restart

Supported packages

App Protect Module for NGINX Open Source

App Protect Module for NGINX Plus