Skip to content

Commit 53bb6c7

Browse files
vvnginxmjang
authored andcommitted
fix: Add support for NAP v4.16.0/v5.8.0 in NIM (#1002)
* fix: Update setup-waf-config-management.md * fix: Update nim-app-protect-support.md Now NIM supports NAP version 4.16.0 and 5.8.0 as well! --------- Co-authored-by: Mike Jang <[email protected]>
1 parent 68b9044 commit 53bb6c7

File tree

2 files changed

+23
-21
lines changed

2 files changed

+23
-21
lines changed

content/includes/nim/tech-specs/nim-app-protect-support.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ NGINX Instance Manager supports the following versions of [NGINX App Protect WAF
88

99
| NGINX Instance Manager | NGINX App Protect WAF |
1010
|------------------------|------------------------------------|
11-
| 2.17.0–2.20.0 | Release 4.8.0–4.15.0, 5.1.0–5.7.0 |
11+
| 2.17.0–2.20.0 | Release 4.8.0–4.16.0, 5.1.0–5.8.0 |
1212
| 2.15.1–2.16.0 | Release 4.8.0–4.10.0 |
1313
| 2.14.1–2.15.0 | Release 4.4.0–4.7.0 |
1414
| 2.13.0–2.14.0 | Release 4.3.0–4.5.0 |

content/nim/nginx-app-protect/setup-waf-config-management.md

Lines changed: 22 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -55,13 +55,15 @@ The table below shows which WAF compiler version to use for each version of NGIN
5555

5656
| NGINX App Protect WAF version | WAF compiler version |
5757
|-------------------------------|----------------------------|
58+
| 5.8.0 | nms-nap-compiler-v5.498.0 |
5859
| 5.7.0 | nms-nap-compiler-v5.442.0 |
5960
| 5.6.0 | nms-nap-compiler-v5.342.0 |
6061
| 5.5.0 | nms-nap-compiler-v5.264.0 |
6162
| 5.4.0 | nms-nap-compiler-v5.210.0 |
6263
| 5.3.0 | nms-nap-compiler-v5.144.0 |
6364
| 5.2.0 | nms-nap-compiler-v5.48.0 |
6465
| 5.1.0 | nms-nap-compiler-v5.17.0 |
66+
| 4.16.0 | nms-nap-compiler-v5.498.0 |
6567
| 4.15.0 | nms-nap-compiler-v5.442.0 |
6668
| 4.14.0 | nms-nap-compiler-v5.342.0 |
6769
| 4.13.0 | nms-nap-compiler-v5.264.0 |
@@ -88,13 +90,13 @@ The table below shows which WAF compiler version to use for each version of NGIN
8890
To install the WAF compiler on Debian or Ubuntu, run the following command:
8991

9092
```shell
91-
sudo apt-get install nms-nap-compiler-v5.442.0
93+
sudo apt-get install nms-nap-compiler-v5.498.0
9294
```
9395

9496
If you want to install more than one version of the WAF compiler on the same system, append the `--force-overwrite` option to the install command after the first installation:
9597

9698
```shell
97-
sudo apt-get install nms-nap-compiler-v5.442.0 -o Dpkg::Options::="--force-overwrite"
99+
sudo apt-get install nms-nap-compiler-v5.498.0 -o Dpkg::Options::="--force-overwrite"
98100
```
99101

100102
{{< include "nim/nap-waf/restart-nms-integrations.md" >}}
@@ -118,7 +120,7 @@ To install the WAF compiler on RHEL 8.1 :
118120
3. Install the WAF compiler:
119121

120122
```shell
121-
sudo yum install nms-nap-compiler-v5.442.0
123+
sudo yum install nms-nap-compiler-v5.498.0
122124
```
123125

124126
### RHEL 9
@@ -140,7 +142,7 @@ To install the WAF compiler on RHEL 9:
140142
3. Install the WAF compiler:
141143

142144
```shell
143-
sudo yum install nms-nap-compiler-v5.442.0
145+
sudo yum install nms-nap-compiler-v5.498.0
144146
```
145147

146148
4. {{< include "nim/nap-waf/restart-nms-integrations.md" >}}
@@ -164,7 +166,7 @@ To install the WAF compiler on Oracle Linux 8.1:
164166
3. Install the WAF compiler:
165167

166168
```shell
167-
sudo yum install nms-nap-compiler-v5.442.0
169+
sudo yum install nms-nap-compiler-v5.498.0
168170
```
169171

170172
4. {{< include "nim/nap-waf/restart-nms-integrations.md" >}}
@@ -250,7 +252,7 @@ To install the WAF compiler on a system without internet access, complete these
250252

251253

252254
Note : Version of NAP compiler can be referred from the table at the top of this page.
253-
Current latest version 5.442.0 at the point of writing this document is used in below commands.
255+
Current latest version 5.498.0 at the point of writing this document is used in below commands.
254256

255257
{{<tabs name="WAF compiler installation in offline environment">}}
256258

@@ -280,10 +282,10 @@ sudo wget -q -O /etc/apt/apt.conf.d/90pkgs-nginx https://cs.nginx.com/static/fil
280282
mkdir -p compiler && cd compiler
281283
sudo apt-get update
282284
283-
sudo apt-get download nms-nap-compiler-v5.442.0
285+
sudo apt-get download nms-nap-compiler-v5.498.0
284286
cd ../
285287
mkdir -p compiler/compiler.deps
286-
sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.442.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps
288+
sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.498.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps
287289
288290
tar -czvf compiler.tar.gz compiler/
289291
```
@@ -326,10 +328,11 @@ sudo wget -q -O /etc/apt/apt.conf.d/90pkgs-nginx https://cs.nginx.com/static/fil
326328
mkdir -p compiler && cd compiler
327329
sudo apt-get update
328330
329-
sudo apt-get download nms-nap-compiler-v5.442.0
331+
sudo apt-get download nms-nap-compiler-v5.498.0
332+
330333
cd ../
331334
mkdir -p compiler/compiler.deps
332-
sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.442.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps
335+
sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.498.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps
333336
tar -czvf compiler.tar.gz compiler/
334337
```
335338

@@ -367,7 +370,7 @@ sudo yum-config-manager --disable rhel-9-appstream-rhui-rpms
367370
sudo yum update -y
368371
sudo mkdir -p nms-nap-compiler
369372
370-
sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.442.0
373+
sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.498.0
371374
tar -czvf compiler.tar.gz nms-nap-compiler/
372375
```
373376

@@ -411,8 +414,7 @@ EOF
411414
sudo yum update -y
412415
sudo mkdir -p nms-nap-compiler
413416
414-
sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.442.0
415-
417+
sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.498.0
416418
tar -czvf compiler.tar.gz nms-nap-compiler/
417419
```
418420

@@ -1205,21 +1207,21 @@ sudo /opt/nms-nap-compiler/app_protect-<version>/bin/apcompile -h
12051207
**Example:**
12061208
12071209
```shell
1208-
sudo /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -h
1210+
sudo /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -h
12091211
```
12101212
12111213
**Expected output:**
12121214
12131215
```text
12141216
USAGE:
1215-
/opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile <options>
1217+
/opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile <options>
12161218
12171219
Examples:
1218-
/opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -p /path/to/policy.json -o mypolicy.tgz
1219-
/opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -p policyA.json -g myglobal.json -o /path/to/policyA_bundle.tgz
1220-
/opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -g myglobalsettings.json --global-state-outfile /path/to/myglobalstate.tgz
1221-
/opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -b /path/to/policy_bundle.tgz --dump
1222-
/opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -l logprofA.json -o /path/to/logprofA_bundle.tgz
1220+
/opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -p /path/to/policy.json -o mypolicy.tgz
1221+
/opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -p policyA.json -g myglobal.json -o /path/to/policyA_bundle.tgz
1222+
/opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -g myglobalsettings.json --global-state-outfile /path/to/myglobalstate.tgz
1223+
/opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -b /path/to/policy_bundle.tgz --dump
1224+
/opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -l logprofA.json -o /path/to/logprofA_bundle.tgz
12231225
```
12241226
12251227
### Confirm NGINX Agent configuration on the NGINX App Protect WAF instance

0 commit comments

Comments
 (0)