diff --git a/content/ngf/waf-integration/get-started.md b/content/ngf/waf-integration/get-started-http.md similarity index 99% rename from content/ngf/waf-integration/get-started.md rename to content/ngf/waf-integration/get-started-http.md index 78ffd4493..a34bdddce 100644 --- a/content/ngf/waf-integration/get-started.md +++ b/content/ngf/waf-integration/get-started-http.md @@ -1,5 +1,5 @@ --- -title: Get started with F5 WAF for NGINX +title: Get started with F5 WAF for NGINX (HTTP) weight: 200 toc: true f5-content-type: how-to @@ -8,6 +8,8 @@ f5-description: Quick start guide for protecting traffic with F5 WAF for NGINX i f5-summary: > Deploy a sample application, compile a WAF policy, and apply it to a Gateway using NGINX Gateway Fabric. This walkthrough uses the HTTP source type to demonstrate the full flow from policy compilation to attack blocking. +aliases: + - /nginx-gateway-fabric/waf-integration/get-started/ --- This guide walks through the complete flow of protecting traffic with F5 WAF for NGINX: deploy a sample application, compile a WAF policy, apply it to a Gateway, and verify that attacks are blocked. diff --git a/content/ngf/waf-integration/get-started-plm.md b/content/ngf/waf-integration/get-started-plm.md new file mode 100644 index 000000000..8466a6c37 --- /dev/null +++ b/content/ngf/waf-integration/get-started-plm.md @@ -0,0 +1,37 @@ +--- +title: Get started with F5 WAF for NGINX (PLM) +weight: 199 +toc: true +f5-content-type: tutorial +f5-docs: DOCS-000 +f5-product: F5 NGINX Gateway Fabric +f5-description: Tutorial for setting up F5 WAF for NGINX with a PLM-based policy workflow in F5 NGINX Gateway Fabric. +f5-keywords: "F5 NGINX Gateway Fabric, F5 WAF for NGINX, policy lifecycle manager, tutorial, step by step, beginner" +f5-summary: > + Set up and validate a policy lifecycle workflow for F5 WAF for NGINX in F5 NGINX Gateway Fabric. + Learn how to deploy a sample app, attach a WAFPolicy, and verify policy enforcement. + This tutorial is for platform engineers and operators with basic Kubernetes and Gateway API knowledge. +f5-audience: operator +--- + +Introduction text goes here. + +## Before you begin + +## Deploy PLM infrastructure + +## Configure NGF to connect to PLM storage + +## Enable WAF in the NginxProxy resource + +## Configure security logging (optional) + +## Define the WAF policy + +## Deploy the Gateway and attach WAFPolicy + +## Configure HTTPRoutes + +## Validate policy compilation and application + +## Test deployment and policy enforcement \ No newline at end of file diff --git a/content/ngf/waf-integration/overview.md b/content/ngf/waf-integration/overview.md index f686d0ff4..e4ab13502 100644 --- a/content/ngf/waf-integration/overview.md +++ b/content/ngf/waf-integration/overview.md @@ -141,7 +141,7 @@ Route-level WAFPolicy → Overrides Gateway-level for that route only ## See also -- [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started.md" >}}) +- [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started-http.md" >}}) - [Configure policy sources (NGINX Instance Manager, NGINX One Console, and HTTP)]({{< ref "/ngf/waf-integration/policy-sources.md" >}}) - [Configure WAF settings]({{< ref "/ngf/waf-integration/configuration.md" >}}) - [WAFPolicy and NginxProxy API reference]({{< ref "/ngf/reference/api.md" >}}) diff --git a/content/ngf/waf-integration/policy-sources.md b/content/ngf/waf-integration/policy-sources.md index 4208ed5ff..75b879626 100644 --- a/content/ngf/waf-integration/policy-sources.md +++ b/content/ngf/waf-integration/policy-sources.md @@ -7,7 +7,7 @@ f5-product: NGINX Gateway Fabric f5-description: Configure WAFPolicy to fetch compiled bundles from F5 NGINX Instance Manager, F5 NGINX One Console, or an HTTP server. --- -NGINX Gateway Fabric supports three policy source types for fetching compiled WAF bundles: F5 NGINX Instance Manager, F5 NGINX One Console, and direct HTTP/HTTPS URLs. For a quick start walkthrough using the HTTP source, see [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started.md" >}}). +NGINX Gateway Fabric supports three policy source types for fetching compiled WAF bundles: F5 NGINX Instance Manager, F5 NGINX One Console, and direct HTTP/HTTPS URLs. For a quick start walkthrough using the HTTP source, see [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started-http.md" >}}). Before configuring a policy source, ensure that WAF is [enabled on the NginxProxy]({{< ref "/ngf/waf-integration/overview.md#enable-waf-on-the-nginxproxy" >}}) — either per Gateway or globally via Helm values. @@ -210,7 +210,7 @@ Replace `` with your NGINX One Console tenant hostname. The `namespace` Use this option when you compile WAF policies using the F5 WAF compiler CLI or a CI/CD pipeline and host the resulting bundle on an HTTP/HTTPS server. For details on using the compiler, see [Build and use the compiler tool]({{< ref "/waf/configure/compiler.md" >}}). -For a complete walkthrough including policy compilation and a bundle server deployment, see [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started.md" >}}). +For a complete walkthrough including policy compilation and a bundle server deployment, see [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started-http.md" >}}). For production environments, you would typically host compiled bundles on an HTTPS server with authentication. See [Configure WAF settings]({{< ref "/ngf/waf-integration/configuration.md" >}}) for details on adding credentials, custom CA certificates, and checksum verification to your `policySource`.