Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: Get started with F5 WAF for NGINX
title: Get started with F5 WAF for NGINX (HTTP)
weight: 200
toc: true
f5-content-type: how-to
Expand All @@ -8,6 +8,8 @@ f5-description: Quick start guide for protecting traffic with F5 WAF for NGINX i
f5-summary: >
Deploy a sample application, compile a WAF policy, and apply it to a Gateway using NGINX Gateway Fabric.
This walkthrough uses the HTTP source type to demonstrate the full flow from policy compilation to attack blocking.
aliases:
- /nginx-gateway-fabric/waf-integration/get-started/
---

This guide walks through the complete flow of protecting traffic with F5 WAF for NGINX: deploy a sample application, compile a WAF policy, apply it to a Gateway, and verify that attacks are blocked.
Expand Down
37 changes: 37 additions & 0 deletions content/ngf/waf-integration/get-started-plm.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
---
title: Get started with F5 WAF for NGINX (PLM)
weight: 199
toc: true
f5-content-type: tutorial
f5-docs: DOCS-000
f5-product: F5 NGINX Gateway Fabric
f5-description: Tutorial for setting up F5 WAF for NGINX with a PLM-based policy workflow in F5 NGINX Gateway Fabric.
f5-keywords: "F5 NGINX Gateway Fabric, F5 WAF for NGINX, policy lifecycle manager, tutorial, step by step, beginner"
f5-summary: >
Set up and validate a policy lifecycle workflow for F5 WAF for NGINX in F5 NGINX Gateway Fabric.
Learn how to deploy a sample app, attach a WAFPolicy, and verify policy enforcement.
This tutorial is for platform engineers and operators with basic Kubernetes and Gateway API knowledge.
f5-audience: operator
---

Introduction text goes here.

## Before you begin

## Deploy PLM infrastructure

## Configure NGF to connect to PLM storage

## Enable WAF in the NginxProxy resource

## Configure security logging (optional)

## Define the WAF policy

## Deploy the Gateway and attach WAFPolicy

## Configure HTTPRoutes

## Validate policy compilation and application

## Test deployment and policy enforcement
2 changes: 1 addition & 1 deletion content/ngf/waf-integration/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -141,7 +141,7 @@ Route-level WAFPolicy → Overrides Gateway-level for that route only

## See also

- [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started.md" >}})
- [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started-http.md" >}})
- [Configure policy sources (NGINX Instance Manager, NGINX One Console, and HTTP)]({{< ref "/ngf/waf-integration/policy-sources.md" >}})
- [Configure WAF settings]({{< ref "/ngf/waf-integration/configuration.md" >}})
- [WAFPolicy and NginxProxy API reference]({{< ref "/ngf/reference/api.md" >}})
Expand Down
4 changes: 2 additions & 2 deletions content/ngf/waf-integration/policy-sources.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ f5-product: NGINX Gateway Fabric
f5-description: Configure WAFPolicy to fetch compiled bundles from F5 NGINX Instance Manager, F5 NGINX One Console, or an HTTP server.
---

NGINX Gateway Fabric supports three policy source types for fetching compiled WAF bundles: F5 NGINX Instance Manager, F5 NGINX One Console, and direct HTTP/HTTPS URLs. For a quick start walkthrough using the HTTP source, see [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started.md" >}}).
NGINX Gateway Fabric supports three policy source types for fetching compiled WAF bundles: F5 NGINX Instance Manager, F5 NGINX One Console, and direct HTTP/HTTPS URLs. For a quick start walkthrough using the HTTP source, see [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started-http.md" >}}).

Before configuring a policy source, ensure that WAF is [enabled on the NginxProxy]({{< ref "/ngf/waf-integration/overview.md#enable-waf-on-the-nginxproxy" >}}) — either per Gateway or globally via Helm values.

Expand Down Expand Up @@ -210,7 +210,7 @@ Replace `<tenant>` with your NGINX One Console tenant hostname. The `namespace`

Use this option when you compile WAF policies using the F5 WAF compiler CLI or a CI/CD pipeline and host the resulting bundle on an HTTP/HTTPS server. For details on using the compiler, see [Build and use the compiler tool]({{< ref "/waf/configure/compiler.md" >}}).

For a complete walkthrough including policy compilation and a bundle server deployment, see [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started.md" >}}).
For a complete walkthrough including policy compilation and a bundle server deployment, see [Get started with F5 WAF for NGINX]({{< ref "/ngf/waf-integration/get-started-http.md" >}}).

For production environments, you would typically host compiled bundles on an HTTPS server with authentication. See [Configure WAF settings]({{< ref "/ngf/waf-integration/configuration.md" >}}) for details on adding credentials, custom CA certificates, and checksum verification to your `policySource`.

Expand Down
Loading