Installation with NGINX App Protect Dos

Note: The NGINX Kubernetes Ingress Controller integration with NGINX App Protect requires the use of NGINX Plus.

This document provides an overview of the steps required to use NGINX App Protect Dos with your NGINX Ingress Controller deployment. You can visit the linked documents to find additional information and instructions.


  1. Make sure you have access to the Ingress controller image:
    • For NGINX Plus Ingress controller, see here for details on how to pull the image from the F5 Docker registry.
    • To pull from the F5 Container registry in your Kubernetes cluster, configure a docker registry secret using your JWT token from the MyF5 portal by following the instructions from here.
    • It is also possible to build your own image and push it to your private Docker registry by following the instructions from here.
  2. Clone the Ingress controller repo:
    $ git clone
    $ cd kubernetes-ingress
    $ git checkout v2.1.0

Create the namespace and service account

  kubectl apply -f common/ns-and-sa.yaml

Install the App Protect Dos Arbitrator

  • Deploy the app protect dos arbitrator
    kubectl apply -f deployment/appprotect-dos-arb.yaml
    kubectl apply -f service/appprotect-dos-arb-svc.yaml

Build the Docker Image

Take the steps below to create the Docker image that you’ll use to deploy NGINX Ingress Controller with App Protect Dos in Kubernetes.

Install the Ingress Controller

Take the steps below to set up and deploy the NGINX Ingress Controller and App Protect Dos module in your Kubernetes cluster.

  1. Configure role-based access control (RBAC).

    Important: You must have an admin role to configure RBAC in your Kubernetes cluster.

  2. Create the common Kubernetes resources.

  3. Enable the App Protect Dos module by adding the enable-app-protect-dos cli argument to your Deployment or DaemonSet file.

  4. Deploy the Ingress Controller.

For more information, see the Configuration guide,the NGINX Ingress Controller with App Protect Dos example for Ingress and the NGINX Ingress Controller with App Protect Dos example for VirtualServer.