NGINX App Protect WAF 5.4

November 19th, 2024

Warning

When upgrading, you must recompile all policy and log bundles using the latest WAF compiler.

Older bundles will be detected and disallowed.

New features

• Added support for Amazon Linux 2023
• Added support for readOnlyFileSystem in Kubernetes deployments
• Added a a policy converter to the compiler
• NGINX App Protect WAF now supports NGINX Plus R33

Please read the subscription licenses topic for information about R33.

Important notes

• Alpine 3.16 is no longer supported.

Resolved issues

• 11973 Fixed - Updated the Go version to 1.23.1
• 11469 Fixed apt-get update warning for Ubuntu 22.04

Known issues

On Ubuntu 24.04, you may receive the following error when uninstalling an old version of NGINX App Protect and installing a newer version:

APP_PROTECT failed to open /opt/app_protect/config/config_set.json

APP_PROTECT failed to open /opt/app_protect/config/config_set.json

This can occur if you are not using the default nginx.conf file and are using the app_protect_enforcer_address directive.

To fix the problem, remove the file configuration folder and recreate the directory, then restart NGINX.

sudo rm /opt/app_protect/config
sudo mkdir /opt/app_protect/config
sudo service nginx restart

sudo rm /opt/app_protect/config
sudo mkdir /opt/app_protect/config
sudo service nginx restart

Supported packages

NGINX Open Source

NGINX Plus