Add an NGINX instance
This guide shows you how to add NGINX Open Source and NGINX Plus instances to F5 NGINX Instance Manager so you can manage them from a central dashboard.
Make sure you have:
- One or more instances running NGINX Open Source or NGINX Plus.
- Admin access to NGINX Instance Manager.
-
Open the NGINX Instance Manager web interface and log in.
-
In the Manage section on the left, select Instances.
-
Select Add.
-
Copy the
curl
command. -
On the host where your NGINX instance is running, run the
curl
command to install NGINX Agent:curl https://<NIM-FQDN>/install/nginx-agent | sudo sh
-
On the same host, run the following command to start NGINX Agent:
sudo systemctl start nginx-agent
To collect comprehensive metrics for NGINX Plus, including bytes streamed, information about upstream systems and caches, and counts of all HTTP status codes, add the following to your NGINX Plus configuration file, for example /etc/nginx/nginx.conf
or an included file:
# This block enables the NGINX Plus API and dashboard
# For configuration and security recommendations, see:
# https://docs.nginx.com/nginx/admin-guide/monitoring/live-activity-monitoring/#configuring-the-api
server {
# Change the listen port if 9000 conflicts
# (8080 is the conventional API port)
listen 9000;
location /api/ {
# To restrict write methods (POST, PATCH, DELETE), uncomment:
# limit_except GET {
# auth_basic "NGINX Plus API";
# auth_basic_user_file /path/to/passwd/file;
# }
# Enable API in write mode
api write=on;
# To restrict access by network, uncomment and set your network:
# allow 192.0.2.0/24 # replace with your network
# deny all;
}
# Serve the built-in dashboard at /dashboard.html
location = /dashboard.html {
root /usr/share/nginx/html;
}
}
Security tip
- By default, all clients can call the API.
- To limit who can access the API, uncomment the
allow
anddeny
lines underapi write=on
and replace the example CIDR with your trusted network.- To restrict write methods (
POST
,PATCH
,DELETE
), uncomment and configure thelimit_except GET
block and set up HTTP basic authentication.
For more details, see the NGINX Plus API module documentation and Configuring the NGINX Plus API.
To collect basic metrics about server activity for NGINX Open Source, add the following to your NGINX configuration file:
server {
listen 127.0.0.1:8080;
location /api {
stub_status;
allow 127.0.0.1;
deny all;
}
}
This configuration:
- Enables the stub status API.
- Allows requests only from
127.0.0.1
(localhost). - Blocks all other requests for security.
For more details, see the NGINX Stub Status module documentation.
After saving the changes, reload NGINX to apply the new configuration:
nginx -s reload