NGINX App Protect WAF 4.14

March 24th, 2025

---

New features

• Added support for NGINX Plus R34
• Upgraded the Go compiler to 1.23.7

---

Important notes

• Alpine 3.17 is no longer supported

---

Resolved issues

• Changed the maximum memory of the XML processing engine to 8GB
• (12254) A modified YAML file referenced by a JSON policy file causes a reload error when running nginx -t
• (12296) “Violation Bad Unescape” is not enabled by default
• (12297) “Violation Encoding” is not enabled by default

---

Supported packages

Distribution name	Package file
Alpine 3.19	app-protect-33.####.0-r1.apk
Debian 11	app-protect_33+####.0-1~bullseye_amd64.deb
Debian 12	app-protect_33+####.0-1~bookworm_amd64.deb
Ubuntu 20.04	app-protect_33+####.0-1~focal_amd64.deb
Ubuntu 22.04	app-protect_33+####.0-1~jammy_amd64.deb
Ubuntu 24.04	app-protect_33+####.0-1~noble_amd64.deb
Amazon Linux 2023	app-protect-33+####.0-1.amzn2023.ngx.x86_64.rpm
RHEL 8 and Rocky Linux 8	app-protect-33+####.0-1.el8.ngx.x86_64.rpm
RHEL 9	app-protect-33+####.0-1.el9.ngx.x86_64.rpm
Oracle Linux 8.1	app-protect-33+####.0-1.el8.ngx.x86_64.rpm

---

---