Skip to content
SPECIFICTION
Get listed

F5 WAF for NGINX

docs.nginx.com

Free trial LinuxSelf-hosted
Visit docs.nginx.com
Spec score 7.7 #11 of 35 in Web Application Firewall Software

Spec sheet

Purpose
F5 WAF for NGINX is an advanced, lightweight, high-performance web application firewall for applications and APIs.Read 30 Sep 2026 · docs.nginx.com
Deployment
It supports virtual machine or bare-metal, Docker, and Kubernetes deployments.Read 30 Sep 2026 · docs.nginx.com
Support
Installation, troubleshooting, and usage assistance is provided through the MyF5 Customer Portal.Read 30 Sep 2026 · docs.nginx.com
Headquarters
Seattle, Washington, USARead 28 Sep 2026 · docs.nginx.com
Founded
1996Read 28 Sep 2026 · docs.nginx.com
Attack signatures
The product includes predefined attack signatures that can be applied to requests and responses.Read 30 Sep 2026 · docs.nginx.com
Bot defense
Bot signatures inspect User-Agent headers and request URIs, and bot defense is enabled by default with header-anomaly detection.Read 30 Sep 2026 · docs.nginx.com
Core protection
It protects against the OWASP Top 10 and provides HTTP response inspection, protocol compliance, JSON and XML schema validation, meta character checking, and disallowed file-type controls.Read 30 Sep 2026 · docs.nginx.com
Current version
The latest documented F5 WAF for NGINX version is 5.15.0.Read 30 Sep 2026 · docs.nginx.com
Ingress integration
With NGINX Ingress Controller, WAF policies can be applied to VirtualServer, VirtualServerRoute, and Ingress resources through Policy resources referencing WAF bundles or bundle sources.Read 30 Sep 2026 · docs.nginx.com
Integration limitation
NGINX subrequest-dependent features such as ExternalAuth, APIKey, remote-JWKS JWT, OIDC, and cache background updates may not function as expected when used with F5 WAF for NGINX on the same route.Read 30 Sep 2026 · docs.nginx.com
Management API
NGINX Instance Manager provides a REST API for managing WAF policies, log profiles, attack signatures, bot signatures, and threat campaigns across instances.Read 30 Sep 2026 · docs.nginx.com
NGINX integration
F5 WAF for NGINX runs natively on NGINX Plus and NGINX Ingress Controller and is included in NGINX One premium packages.Read 30 Sep 2026 · docs.nginx.com
Resource limit
F5 WAF for NGINX supports a maximum of 127 CPU cores.Read 30 Sep 2026 · docs.nginx.com
Supported systems
Supported operating systems include Alpine Linux 3.22 and 3.24, Amazon Linux 2023, Debian 12 and 13, Oracle Linux 8, RHEL/Rocky Linux 8–10, and Ubuntu 22.04, 24.04, and 26.04.Read 30 Sep 2026 · docs.nginx.com
Threat intelligence
Threat campaigns provide frequently updated contextual feeds about active attack campaigns observed by F5 Threat Labs.Read 30 Sep 2026 · docs.nginx.com

Plans and prices

F5 WAF for NGINX subscription Priced on request pricing varies by deployment size · covered environments · required features Read 30 Sep 2026 · f5.com

Every F5 WAF for NGINX plan and price →

Where Specifiction places it

Alternatives to F5 WAF for NGINXAll alternatives →