• F5

    Deliver and secure every app

  • DevCentral

    Connect & learn in our hosted community

  • MyF5

    Your key to everything F5, including support, registration keys, and subscriptions

  • NGINX

    Learn more about NGINX Open Source and read the community blog

  • Community Forum

    Engage with the broader NGINX community for discussions and troubleshooting

Changelog

Information architecture note
This page is incomplete, only listing the most recent releases: the remainder will be migrated and reformatted to fit the package table format.

This changelog lists all of the information for F5 WAF for NGINX releases in 2025.

F5 WAF for NGINX 5.9

September 29th, 2025

New features

Important notes

  • Restructured documentation
    • NGINX App Protect WAF renamed to F5 WAF for NGINX
    • Versions aligned for packages and other artefacts
    • No workflow or breaking changes
  • Upgrade Go compiler to 1.23.12

Packages

Distribution name NGINX Open Source NGINX Plus NGINX Plus (Virtual/Single container)
Alpine 3.19 app-protect-module-oss-1.29.0+5.527.0-r1.apk app-protect-module-plus-35+5.527.0-r1.apk app-protect-35.5.527.0-r1.apk
Amazon Linux 2023 app-protect-module-oss-1.29.0+5.527.0-1.amzn2023.ngx.x86_64.rpm app-protect-module-plus-35+5.527.0-1.amzn2023.ngx.x86_64.rpm app-protect-35+5.527.0-1.amzn2023.ngx.x86_64.rpm
Debian 11 app-protect-module-oss_1.29.0+5.527.0-1~bullseye_amd64.deb app-protect-module-plus_35+5.527.0-1~bullseye_amd64.deb app-protect_35+5.527.0-1~bullseye_amd64.deb
Debian 12 app-protect-module-oss_1.29.0+5.527.0-1~bookworm_amd64.deb app-protect-module-plus_35+5.527.0-1~bookworm_amd64.deb app-protect_35+5.527.0-1~bookworm_amd64.deb
Oracle Linux 8.1 app-protect-module-oss-1.29.0+5.527.0-1.el8.ngx.x86_64.rpm app-protect-module-plus-35+5.527.0-1.el8.ngx.x86_64.rpm app-protect-35+5.527.0-1.el8.ngx.x86_64.rpm
RHEL 8 and Rocky Linux 8 app-protect-module-oss-1.29.0+5.527.0-1.el8.ngx.x86_64.rpm app-protect-module-plus-35+5.527.0-1.el8.ngx.x86_64.rpm app-protect-35+5.527.0-1.el8.ngx.x86_64.rpm
RHEL 9 and Rocky Linux 9 app-protect-module-oss-1.29.0+5.527.0-1.el9.ngx.x86_64.rpm app-protect-module-plus-35+5.527.0-1.el8.ngx.x86_64.rpm app-protect-35+5.527.0-1.el9.ngx.x86_64.rpm
Ubuntu 22.04 app-protect-module-oss_1.29.0+5.527.0-1~jammy_amd64.deb app-protect-module-plus_35+5.527.0-1~jammy_amd64.deb app-protect_35+5.527.0-1~jammy_amd64.deb
Ubuntu 24.04 app-protect-module-oss_1.29.0+5.527.0-1~noble_amd64.deb app-protect-module-plus_35+5.527.0-1~noble_amd64.deb app-protect_35+5.527.0-1~noble_amd64.deb

F5 WAF for NGINX 5.8 / 4.16

August 13th, 2025

New features

  • Added support for NGINX Plus R35

Packages

Distribution name NGINX Open Source (5.8) NGINX Plus (5.8) NGINX Plus (4.16)
Alpine 3.19 app-protect-module-oss-1.29.0+5.498.0-r1.apk app-protect-module-plus-35+5.498.0-r1.apk app-protect-35.5.498.0-r1.apk
Amazon Linux 2023 app-protect-module-oss-1.29.0+5.498.0-1.amzn2023.ngx.x86_64.rpm app-protect-module-plus-35+5.498.0-1.amzn2023.ngx.x86_64.rpm app-protect-35+5.498.0-1.amzn2023.ngx.x86_64.rpm
Debian 11 app-protect-module-oss_1.29.0+5.498.0-1~bullseye_amd64.deb app-protect-module-plus_35+5.498.0-1~bullseye_amd64.deb app-protect_35+5.498.0-1~bullseye_amd64.deb
Debian 12 app-protect-module-oss_1.29.0+5.498.0-1~bookworm_amd64.deb app-protect-module-plus_35+5.498.0-1~bookworm_amd64.deb app-protect_35+5.498.0-1~bookworm_amd64.deb
Oracle Linux 8.1 app-protect-module-oss-1.29.0+5.498.0-1.el8.ngx.x86_64.rpm app-protect-module-plus-35+5.498.0-1.el8.ngx.x86_64.rpm app-protect-35+5.498.0-1.el8.ngx.x86_64.rpm
Ubuntu 22.04 app-protect-module-oss_1.29.0+5.498.0-1~jammy_amd64.deb app-protect-module-plus_35+5.498.0-1~jammy_amd64.deb app-protect_35+5.498.0-1~jammy_amd64.deb
Ubuntu 24.04 app-protect-module-oss_1.29.0+5.498.0-1~noble_amd64.deb app-protect-module-plus_35+5.498.0-1~noble_amd64.deb app-protect_35+5.498.0-1~noble_amd64.deb
RHEL 8 and Rocky Linux 8 app-protect-module-oss-1.29.0+5.498.0-1.el8.ngx.x86_64.rpm app-protect-module-plus-35+5.498.0-1.el8.ngx.x86_64.rpm app-protect-35+5.498.0-1.el8.ngx.x86_64.rpm
RHEL 9 and Rocky Linux 9 app-protect-module-oss-1.29.0+5.498.0-1.el9.ngx.x86_64.rpm app-protect-module-plus-35+5.498.0-1.el8.ngx.x86_64.rpm app-protect-35+5.498.0-1.el9.ngx.x86_64.rpm

F5 WAF for NGINX 5.7 / 4.15

June 24th, 2025

New features

  • Added support for Rocky Linux 9
  • Added support for IP Intelligence
  • Added support for Override rules for IP Address Lists

Important notes

  • Ubuntu 20.04 is no longer supported
  • (12447) Upgrade libk5crypto3 package
  • (12520) Upgrade Go compiler to 1.23.8

Resolved issues

  • (12527) Remove CPAN - installed certs and source files
  • (11112) Remove systemd/init.d leftovers in NAP WAF v5 pkgs
  • (12400) Cookie attributes are not added to a TS cookie when there is more than one TS cookie
  • (12498) Undefined behavior when using huge XFF
  • (12731) Multiple clean_resp_reset internal error messages in logs when loading NAP

Packages

Distribution name NGINX Open Source (5.7) NGINX Plus (5.7) NGINX Plus (4.15)
Alpine 3.19 app-protect-module-oss-1.27.4+5.442.0-r1.apk app-protect-module-plus-34+5.442.0-r1.apk app-protect-34.5.442.0-r1.apk
Amazon Linux 2023 app-protect-module-oss-1.27.4+5.442.0-1.amzn2023.ngx.x86_64.rpm app-protect-module-plus-34+5.442.0-1.amzn2023.ngx.x86_64.rpm app-protect-34+5.442.0-1.amzn2023.ngx.x86_64.rpm
Debian 11 app-protect-module-oss_1.27.4+5.442.0-1~bullseye_amd64.deb app-protect-module-plus_34+5.442.0-1~bullseye_amd64.deb app-protect_34+5.442.0-1~bullseye_amd64.deb
Debian 12 app-protect-module-oss_1.27.4+5.442.0-1~bookworm_amd64.deb app-protect-module-plus_34+5.442.0-1~bookworm_amd64.deb app-protect_34+5.442.0-1~bookworm_amd64.deb
Oracle Linux 8.1 app-protect-module-oss-1.27.4+5.442.0-1.el8.ngx.x86_64.rpm app-protect-module-plus-34+5.442.0-1.el8.ngx.x86_64.rpm app-protect-34+5.442.0-1.el8.ngx.x86_64.rpm
Ubuntu 22.04 app-protect-module-oss_1.27.4+5.442.0-1~jammy_amd64.deb app-protect-module-plus_34+5.442.0-1~jammy_amd64.deb app-protect_34+5.442.0-1~jammy_amd64.deb
Ubuntu 24.04 app-protect-module-oss_1.27.4+5.442.0-1~noble_amd64.deb app-protect-module-plus_34+5.442.0-1~noble_amd64.deb app-protect_34+5.442.0-1~noble_amd64.deb
RHEL 8 and Rocky Linux 8 app-protect-module-oss-1.27.4+5.442.0-1.el8.ngx.x86_64.rpm app-protect-module-plus-34+5.442.0-1.el8.ngx.x86_64.rpm app-protect-34+5.442.0-1.el8.ngx.x86_64.rpm
RHEL 9 and Rocky Linux 9 app-protect-module-oss-1.27.4+5.442.0-1.el9.ngx.x86_64.rpm app-protect-module-plus-34+5.442.0-1.el9.ngx.x86_64.rpm app-protect-34+5.442.0-1.el9.ngx.x86_64.rpm

F5 WAF for NGINX 5.6 / 4.14

April 1st, 2025

New features

Important notes

  • Alpine 3.17 is no longer supported

Resolved issues

  • Upgraded the Go compiler to 1.23.7
  • (12140) Changed the maximum memory of the XML processing engine to 8GB
  • (12254) A modified YAML file referenced by a JSON policy file causes a reload error when running nginx -t
  • (12296) “Violation Bad Unescape” is not enabled by default
  • (12297) “Violation Encoding” is not enabled by default

5.6 packages

NGINX Open Source

Distribution name Package file
Alpine 3.19 app-protect-module-oss-1.27.4+5.342.0-r1.apk
Amazon Linux 2023 app-protect-module-oss-1.27.4+5.342.0-1.amzn2023.ngx.x86_64.rpm
Debian 11 app-protect-module-oss_1.27.4+5.342.0-1~bullseye_amd64.deb
Debian 12 app-protect-module-oss_1.27.4+5.342.0-1~bookworm_amd64.deb
Oracle Linux 8.1 app-protect-module-oss-1.27.4+5.342.0-1.el8.ngx.x86_64.rpm
Ubuntu 20.04 app-protect-module-oss_1.27.4+5.342.0-1~focal_amd64.deb
Ubuntu 22.04 app-protect-module-oss_1.27.4+5.342.0-1~jammy_amd64.deb
Ubuntu 24.04 app-protect-module-oss_1.27.4+5.342.0-1~noble_amd64.deb
RHEL 8 and Rocky Linux 8 app-protect-module-oss-1.27.4+5.342.0-1.el8.ngx.x86_64.rpm
RHEL 9 app-protect-module-oss-1.27.4+5.342.0-1.el9.ngx.x86_64.rpm

NGINX Plus

Distribution name Package file
Alpine 3.19 app-protect-module-plus-34+5.342.0-r1.apk
Amazon Linux 2023 app-protect-module-plus-34+5.342.0-1.amzn2023.ngx.x86_64.rpm
Debian 11 app-protect-module-plus_34+5.342.0-1~bullseye_amd64.deb
Debian 12 app-protect-module-plus_34+5.342.0-1~bookworm_amd64.deb
Oracle Linux 8.1 app-protect-module-plus-34+5.342.0-1.el8.ngx.x86_64.rpm
Ubuntu 20.04 app-protect-module-plus_34+5.342.0-1~focal_amd64.deb
Ubuntu 22.04 app-protect-module-plus_34+5.342.0-1~jammy_amd64.deb
Ubuntu 24.04 app-protect-module-plus_34+5.342.0-1~noble_amd64.deb
RHEL 8 and Rocky Linux 8 app-protect-module-plus-34+5.342.0-1.el8.ngx.x86_64.rpm
RHEL 9 app-protect-module-plus-34+5.342.0-1.el9.ngx.x86_64.rpm

4.14 packages

Distribution name Package file
Alpine 3.19 app-protect-34.5.342.0-r1.apk
Amazon Linux 2023 app-protect-34+5.342.0-1.amzn2023.ngx.x86_64.rpm
Debian 11 app-protect_34+5.342.0-1~bullseye_amd64.deb
Debian 12 app-protect_34+5.342.0-1~bookworm_amd64.deb
Oracle Linux 8.1 app-protect-34+5.342.0-1.el8.ngx.x86_64.rpm
Ubuntu 20.04 app-protect_34+5.342.0-1~focal_amd64.deb
Ubuntu 22.04 app-protect_34+5.342.0-1~jammy_amd64.deb
Ubuntu 24.04 app-protect_34+5.342.0-1~noble_amd64.deb
RHEL 8 and Rocky Linux 8 app-protect-34+5.342.0-1.el8.ngx.x86_64.rpm
RHEL 9 app-protect-34+5.342.0-1.el9.ngx.x86_64.rpm
View source
Edit this page
Create a new issue