NGINX Instance Manager

NGINX One

  • NGINX One Console
  • NGINX Plus
  • NGINX Instance Manager
  • NGINX Ingress Controller
  • NGINX Gateway Fabric
  • NGINX Open Source
  • NGINX Agent

F5 WAF for NGINX

  • F5 WAF for NGINX
  • F5 DoS for NGINX

NGINX as a Service

  • NGINXaaS for Azure
  • NGINXaaS for Google Cloud

Glossary

  • F5 NGINX Glossary
Skip Navigation
    • Technical Specifications
    • NGINX Instance Manager dashboard
    • Overview: NGINX Instance Manager REST API
      • Deploy using Docker Compose
      • Deploy NGINX Plus in a container (data plane)
      • Deploy using Helm
      • Configurable Helm settings
      • Frequently used Helm configurations
      • Use external TLS certificates
      • Overview
      • Install with Ansible
      • Build and deploy images
      • Install NGINX Instance Manager using a script
      • Manually install NGINX Instance Manager
    • Install NGINX Instance Manager using a script (disconnected)
    • Manually install NGINX Instance Manager (disconnected)
        • Set up basic authentication
        • Get started with OIDC
        • Microsoft Entra: Set up OIDC authentication
        • Automate OIDC with Microsoft Entra
        • Keycloak: Set up OIDC authentication
        • Provision users and groups using SCIM
      • Overview: RBAC
      • Create and manage roles
      • Assign roles to users or user groups
      • Manage resource groups
    • Perform a system health check
    • Back up and restore
    • Add a license (connected)
    • Report usage data to F5 (connected)
    • Add a license (disconnected)
    • Report usage data to F5 (disconnected)
    • Change telemetry settings
    • Configure settings with nms.conf
    • Use a third-party forward proxy
    • High availability with keepalived
    • Configure ClickHouse
    • Use Vault for storing secrets
    • Configure SELinux
    • Configure telemetry and web analytics
    • Optimize NGINX proxy gateway for large data planes
    • Secure client access and network traffic
    • Overview: NGINX instance metrics
    • Query the Metrics API
    • View events and metrics
      • Dimensions Catalog
      • Events Catalog
      • Metrics Catalog
    • Stage NGINX configs
    • Publish NGINX configs
    • Publish NGINX configs with version control
        • About NGINX config templates
        • F5 Global Default base template
        • Augment templates
        • Template resource files
        • Manage NGINX configs with templates
        • RBAC for config templates and submissions
        • Round-robin reverse proxy with an augment template
        • JSON Schemas for Dynamic Web Forms
    • Add an NGINX instance
    • Scan and discover NGINX instances
    • Create and manage instance groups
    • Manage SSL certificates
    • Organize instances with tags
    • How WAF policy management works
      • Overview
        • Install the WAF compiler
        • Install the WAF compiler in a disconnected environment
        • Automatically update the WAF compiler
        • Manually update the WAF compiler
        • Overview
        • Automatically update security packages
        • Manually update security packages
        • Update Security Monitoring attack signature database
      • Set up compiler resource pruning
        • Install NGINX Agent
        • Configure NGINX Agent
        • Verify instance onboarding
        • Configure Docker Compose
        • Add WAF configuration
        • Edit WAF configuration
        • Verify WAF configuration
        • Onboard custom security policies
      • Troubleshooting
      • Overview
        • Create a security policy
        • Update a security policy
        • Delete a security policy
        • Add signature sets and exceptions
        • Add cookies, parameters, and URLs
        • Review policy
        • Matching types: Explicit vs. Wildcard
        • Create a security policy bundle
        • Download a security policy bundle
        • List security policy bundles
        • Configure and deploy log profiles
        • Compile log profiles (REST API)
        • Deploy log profiles
        • Review log profiles
        • Download log profile bundles (REST API)
        • Create and deploy profiles (REST API)
        • Update log profiles (REST API)
        • Delete security log profiles (REST API)
        • Publish updates to instances
        • Check publication status
    • Set up F5 WAF for NGINX instances for Security Monitoring
    • Add user access to Security Monitoring dashboards
    • Update the attack signature database
    • Update the geolocation database used in dashboards
    • Troubleshooting
    • Create a support package
    • Create a support package from a Helm installation
    • Where to go for support
    • Release notes
    • Known issues
NGINX Docs
  • F5

    Deliver and secure every app

  • DevCentral

    Connect & learn in our hosted community

  • MyF5

    Your key to everything F5, including support, registration keys, and subscriptions

  • NGINX

    Learn more about NGINX Open Source and read the community blog

  • Community Forum

    Engage with the broader NGINX community for discussions and troubleshooting

  1. Home
  2. F5 NGINX Instance Manager
  3. Configure your system

Configure your system

In this section

Configure settings with nms.conf

Use a third-party forward proxy

Configure F5 NGINX Instance Manager to route outbound traffic through a third-party forward proxy for license verification, telemetry, and updates.

High availability with keepalived

Configure active-passive high availability for F5 NGINX Instance Manager using keepalived so the system stays available if one server fails.

Configure ClickHouse

Use Vault for storing secrets

Configure F5 NGINX Instance Manager to store secrets in an existing HashiCorp Vault installation instead of the default on-disk encrypted store.

Configure SELinux

Apply the optional SELinux policy module for F5 NGINX Instance Manager to run it on systems with SELinux in Enforcing mode.

Configure telemetry and web analytics

Enable or disable telemetry and web analytics sharing in F5 NGINX Instance Manager to control what usage data is sent to F5.

Optimize NGINX proxy gateway for large data planes

Tune the NGINX proxy gateway worker connections and other settings in F5 NGINX Instance Manager to support a large number of managed instances.

Secure client access and network traffic

Configure TLS certificates and mutual TLS in F5 NGINX Instance Manager to secure client connections and inter-service network traffic.

View source
Edit this page
Create a new issue
F5 logo

©2026 F5, Inc. All rights reserved. NGINX is a registered trademark of F5, Inc.

Trademarks Policies Privacy California Privacy Do Not Sell My Personal Information