This article explains how to install NGINXÂ Plus on different operating systems, upgrade existing NGINXÂ Plus installation, install and enable dynamic modules, install in rootless mode or when offline.
root
privilegeInstall NGINX Plus on Amazon Linux 2023
Check if your operating system and architecture are supported. For a complete list of supported platforms and architectures, see the Technical Specifications.
Back up your NGINX Plus configuration and log files if you have an older NGINX Plus package installed. For more information, see Upgrading NGINX Plus.
Download the SSL certificate, private key, and the JWT license file associated with your NGINX Plus subscription from the MyF5 Customer Portal:
Starting from
NGINX Plus Release 33, a JWT file is required for each NGINX Plus instance. For more information, see
About Subscription Licenses.
Install the ca-certificates dependency:
shellsudo dnf update
sudo dnf install ca-certificates
sudo dnf update
sudo dnf install ca-certificates
Create the /etc/ssl/nginx directory:
sudo mkdir -p /etc/ssl/nginx
sudo mkdir -p /etc/ssl/nginx
Copy the downloaded .crt and .key files to the /etc/ssl/nginx/ directory and make sure they are named nginx-repo.crt and nginx-repo.key:
shellsudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
sudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
Add the NGINXÂ Plus repository to your Amazon Linux 2023 instance. Download the plus-amazonlinux2023.repo file to /etc/yum.repos.d:
sudo wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/plus-amazonlinux2023.repo
sudo wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/plus-amazonlinux2023.repo
Install the nginx-plus package. Any older NGINXÂ Plus package is automatically replaced.
sudo dnf install nginx-plus
sudo dnf install nginx-plus
Copy the downloaded JWT file to the /etc/nginx/ directory and make sure it is named license.jwt:
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
Check the nginx
version to verify that NGINX Plus is installed correctly:
Make sure license reporting to F5 licensing endpoint is configured. By default, no configuration is required. However, it becomes necessary when NGINX Plus is installed in a disconnected environment, uses NGINX Instance Manager for usage reporting, or uses a custom path for the license file. Configuration can be done in the mgmt {}
block of the NGINX Plus configuration file (/etc/nginx/nginx.conf
). For more information, see About Subscription Licenses.
If you are using NGINX Instance Manager in your infrastructure, install and enable NGINX Agent. See Install and Configure NGINX Agent for details.
Install NGINX Plus on Amazon Linux 2
Check if your operating system and architecture are supported. For a complete list of supported platforms and architectures, see the Technical Specifications.
Back up your NGINX Plus configuration and log files if you have an older NGINX Plus package installed. For more information, see Upgrading NGINX Plus.
Download the SSL certificate, private key, and the JWT license file associated with your NGINX Plus subscription from the MyF5 Customer Portal:
Starting from
NGINX Plus Release 33, a JWT file is required for each NGINX Plus instance. For more information, see
About Subscription Licenses.
Install the ca-certificates dependency:
shellsudo yum update
sudo yum install ca-certificates
sudo yum update
sudo yum install ca-certificates
Create the /etc/ssl/nginx directory:
sudo mkdir -p /etc/ssl/nginx
sudo mkdir -p /etc/ssl/nginx
Copy the downloaded .crt and .key files to the /etc/ssl/nginx/ directory and make sure they are named nginx-repo.crt and nginx-repo.key:
shellsudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
sudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
Add the NGINXÂ Plus repository to your Amazon Linux 2 instance. Download the nginx-plus-amazon2.repo file to /etc/yum.repos.d:
sudo wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/nginx-plus-amazon2.repo
sudo wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/nginx-plus-amazon2.repo
Install the nginx-plus package. Any older NGINXÂ Plus package is automatically replaced.
sudo yum install nginx-plus
sudo yum install nginx-plus
Copy the downloaded JWT file to the /etc/nginx/ directory and make sure it is named license.jwt:
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
Check the nginx
version to verify that NGINX Plus is installed correctly:
Make sure license reporting to F5 licensing endpoint is configured. By default, no configuration is required. However, it becomes necessary when NGINX Plus is installed in a disconnected environment, uses NGINX Instance Manager for usage reporting, or uses a custom path for the license file. Configuration can be done in the mgmt {}
block of the NGINX Plus configuration file (/etc/nginx/nginx.conf
). For more information, see About Subscription Licenses.
If you are using NGINX Instance Manager in your infrastructure, install and enable NGINX Agent. See Install and Configure NGINX Agent for details.
Install NGINX Plus on RHEL 8.1+, Oracle Linux 8.1+, AlmaLinux 8, Rocky Linux 8
Check if your operating system and architecture are supported. For a complete list of supported platforms and architectures, see the Technical Specifications.
Back up your NGINX Plus configuration and log files if you have an older NGINX Plus package installed. For more information, see Upgrading NGINX Plus.
Download the SSL certificate, private key, and the JWT license file associated with your NGINX Plus subscription from the MyF5 Customer Portal:
Starting from
NGINX Plus Release 33, a JWT file is required for each NGINX Plus instance. For more information, see
About Subscription Licenses.
Install the ca-certificates dependency:
shellsudo dnf update
sudo dnf install ca-certificates
sudo dnf update
sudo dnf install ca-certificates
Create the /etc/ssl/nginx directory:
sudo mkdir -p /etc/ssl/nginx
sudo mkdir -p /etc/ssl/nginx
Copy the downloaded .crt and .key files to the /etc/ssl/nginx/ directory and make sure they are named nginx-repo.crt and nginx-repo.key:
shellsudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
sudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
Add the NGINXÂ Plus repository by downloading the nginx-plus-8.repo file to /etc/yum.repos.d:
sudo wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/nginx-plus-8.repo
sudo wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/nginx-plus-8.repo
Learn how to pin NGINX Plus to a specific version
Tip: Pin NGINX Plus to a specific versionTo pin NGINX Plus to a specific version (for example, R33):
Edit the
/etc/yum.repos.d/nginx-plus-8.repo
file.Update the repository base URL to the desired version:
baseurl=https://pkgs.nginx.com/plus/R33/centos/8/$basearch/
baseurl=https://pkgs.nginx.com/plus/R33/centos/8/$basearch/
Save the changes and exit.
Update the repository information:
To pin NGINX Plus to a specific version (for example, R33):
Edit the
/etc/yum.repos.d/nginx-plus-8.repo
file.Update the repository base URL to the desired version:
baseurl=https://pkgs.nginx.com/plus/R33/centos/8/$basearch/
baseurl=https://pkgs.nginx.com/plus/R33/centos/8/$basearch/
Save the changes and exit.
Update the repository information:
Install the nginx-plus package. Any older NGINXÂ Plus package is automatically replaced.
sudo dnf install nginx-plus
sudo dnf install nginx-plus
Copy the downloaded JWT file to the /etc/nginx/ directory and make sure it is named license.jwt:
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
To enable the NGINX service to start at boot, run the following command:
sudo systemctl enable nginx.service
sudo systemctl enable nginx.service
Check the nginx
version to verify that NGINX Plus is installed correctly:
Make sure license reporting to F5 licensing endpoint is configured. By default, no configuration is required. However, it becomes necessary when NGINX Plus is installed in a disconnected environment, uses NGINX Instance Manager for usage reporting, or uses a custom path for the license file. Configuration can be done in the mgmt {}
block of the NGINX Plus configuration file (/etc/nginx/nginx.conf
). For more information, see About Subscription Licenses.
If you are using NGINX Instance Manager in your infrastructure, install and enable NGINX Agent. See Install and Configure NGINX Agent for details.
Install NGINX Plus on RHEL 9.0+, Oracle Linux 9, AlmaLinux 9, Rocky Linux 9
Check if your operating system and architecture are supported. For a complete list of supported platforms and architectures, see the Technical Specifications.
Back up your NGINX Plus configuration and log files if you have an older NGINX Plus package installed. For more information, see Upgrading NGINX Plus.
Download the SSL certificate, private key, and the JWT license file associated with your NGINX Plus subscription from the MyF5 Customer Portal:
Starting from
NGINX Plus Release 33, a JWT file is required for each NGINX Plus instance. For more information, see
About Subscription Licenses.
Install the ca-certificates dependency:
shellsudo dnf update
sudo dnf install ca-certificates
sudo dnf update
sudo dnf install ca-certificates
Create the /etc/ssl/nginx directory:
sudo mkdir -p /etc/ssl/nginx
sudo mkdir -p /etc/ssl/nginx
Copy the downloaded .crt and .key files to the /etc/ssl/nginx/ directory and make sure they are named nginx-repo.crt and nginx-repo.key:
shellsudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
sudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
Add the NGINXÂ Plus repository by downloading the plus-9.repo file to /etc/yum.repos.d:
sudo wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/plus-9.repo
sudo wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/plus-9.repo
Learn how to pin NGINX Plus to a specific version
Tip: Pin NGINX Plus to a specific versionTo pin NGINX Plus to a specific version (for example, R33):
Edit the
/etc/yum.repos.d/plus-9.repo
file.Update the repository base URL to the desired version:
baseurl=https://pkgs.nginx.com/plus/R33/centos/9/$basearch/
baseurl=https://pkgs.nginx.com/plus/R33/centos/9/$basearch/
Save the changes and exit.
Update the repository information:
To pin NGINX Plus to a specific version (for example, R33):
Edit the
/etc/yum.repos.d/plus-9.repo
file.Update the repository base URL to the desired version:
baseurl=https://pkgs.nginx.com/plus/R33/centos/9/$basearch/
baseurl=https://pkgs.nginx.com/plus/R33/centos/9/$basearch/
Save the changes and exit.
Update the repository information:
Install the nginx-plus package. Any older NGINXÂ Plus package is automatically replaced.
sudo dnf install nginx-plus
sudo dnf install nginx-plus
Copy the downloaded JWT file to the /etc/nginx/ directory and make sure it is named license.jwt:
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
To enable the NGINX service to start at boot, run the following command:
sudo systemctl enable nginx.service
sudo systemctl enable nginx.service
Check the nginx
version to verify that NGINX Plus is installed correctly:
Make sure license reporting to F5 licensing endpoint is configured. By default, no configuration is required. However, it becomes necessary when NGINX Plus is installed in a disconnected environment, uses NGINX Instance Manager for usage reporting, or uses a custom path for the license file. Configuration can be done in the mgmt {}
block of the NGINX Plus configuration file (/etc/nginx/nginx.conf
). For more information, see About Subscription Licenses.
If you are using NGINX Instance Manager in your infrastructure, install and enable NGINX Agent. See Install and Configure NGINX Agent for details.
Install NGINX Plus on Debian or Ubuntu
NGINXÂ Plus can be installed on the following versions of Debian or Ubuntu:
Check if your operating system and architecture are supported. For a complete list of supported platforms and architectures, see the Technical Specifications.
Back up your NGINX Plus configuration and log files if you have an older NGINX Plus package installed. For more information, see Upgrading NGINX Plus.
Download the SSL certificate, private key, and the JWT license file associated with your NGINX Plus subscription from the MyF5 Customer Portal:
Starting from
NGINX Plus Release 33, a JWT file is required for each NGINX Plus instance. For more information, see
About Subscription Licenses.
Create the /etc/ssl/nginx directory:
sudo mkdir -p /etc/ssl/nginx
sudo mkdir -p /etc/ssl/nginx
Copy the downloaded .crt and .key files to the /etc/ssl/nginx/ directory and make sure they are named nginx-repo.crt and nginx-repo.key:
shellsudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
sudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
Install the prerequisites packages:
For Debian:
shellsudo apt update && \
sudo apt install apt-transport-https \
lsb-release \
ca-certificates \
wget \
gnupg2 \
debian-archive-keyring
sudo apt update && \
sudo apt install apt-transport-https \
lsb-release \
ca-certificates \
wget \
gnupg2 \
debian-archive-keyring
For Ubuntu:
shellsudo apt update && \
sudo apt install apt-transport-https \
lsb-release \
ca-certificates \
wget \
gnupg2 \
ubuntu-keyring
sudo apt update && \
sudo apt install apt-transport-https \
lsb-release \
ca-certificates \
wget \
gnupg2 \
ubuntu-keyring
Download and add NGINX signing key:
shellwget -qO - https://cs.nginx.com/static/keys/nginx_signing.key \
| gpg --dearmor \
| sudo tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null
wget -qO - https://cs.nginx.com/static/keys/nginx_signing.key \
| gpg --dearmor \
| sudo tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null
Add the NGINXÂ Plus repository:
For Debian:
shellprintf "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
https://pkgs.nginx.com/plus/debian `lsb_release -cs` nginx-plus\n" \
| sudo tee /etc/apt/sources.list.d/nginx-plus.list
printf "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
https://pkgs.nginx.com/plus/debian `lsb_release -cs` nginx-plus\n" \
| sudo tee /etc/apt/sources.list.d/nginx-plus.list
For Ubuntu:
shellprintf "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
https://pkgs.nginx.com/plus/ubuntu `lsb_release -cs` nginx-plus\n" \
| sudo tee /etc/apt/sources.list.d/nginx-plus.list
printf "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
https://pkgs.nginx.com/plus/ubuntu `lsb_release -cs` nginx-plus\n" \
| sudo tee /etc/apt/sources.list.d/nginx-plus.list
Tip: Pin NGINX Plus to a specific versionTo pin NGINX Plus to a specific version (for example, R33):
Edit the
/etc/apt/sources.list.d/nginx-plus.list
file.Update the repository base URL to the desired version:
For Ubuntu:
https://pkgs.nginx.com/plus/R33/ubuntu
https://pkgs.nginx.com/plus/R33/ubuntu
For Debian:
https://pkgs.nginx.com/plus/R33/debian
https://pkgs.nginx.com/plus/R33/debian
Save the changes and exit.
Update the repository information:
To pin NGINX Plus to a specific version (for example, R33):
Edit the
/etc/apt/sources.list.d/nginx-plus.list
file.Update the repository base URL to the desired version:
For Ubuntu:
https://pkgs.nginx.com/plus/R33/ubuntu
https://pkgs.nginx.com/plus/R33/ubuntu
For Debian:
https://pkgs.nginx.com/plus/R33/debian
https://pkgs.nginx.com/plus/R33/debian
Save the changes and exit.
Update the repository information:
Download the nginx-plus apt configuration to /etc/apt/apt.conf.d:
sudo wget -P /etc/apt/apt.conf.d https://cs.nginx.com/static/files/90pkgs-nginx
sudo wget -P /etc/apt/apt.conf.d https://cs.nginx.com/static/files/90pkgs-nginx
Update the repository information:
Install the nginx-plus package. Any older NGINXÂ Plus package is automatically replaced.
sudo apt install -y nginx-plus
sudo apt install -y nginx-plus
Copy the downloaded JWT file to the /etc/nginx/ directory and make sure it is named license.jwt:
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
Check the nginx
version to verify that NGINX Plus is installed correctly:
Make sure license reporting to F5 licensing endpoint is configured. By default, no configuration is required. However, it becomes necessary when NGINX Plus is installed in a disconnected environment, uses NGINX Instance Manager for usage reporting, or uses a custom path for the license file. Configuration can be done in the mgmt {}
block of the NGINX Plus configuration file (/etc/nginx/nginx.conf
). For more information, see About Subscription Licenses.
If you are using NGINX Instance Manager in your infrastructure, install and enable NGINX Agent. See Install and Configure NGINX Agent for details.
Install NGINX Plus on FreeBSD
Check if your operating system and architecture are supported. For a complete list of supported platforms and architectures, see the Technical Specifications.
Back up your NGINX Plus configuration and log files if you have an older NGINX Plus package installed. For more information, see Upgrading NGINX Plus.
Download the SSL certificate, private key, and the JWT license file associated with your NGINX Plus subscription from the MyF5 Customer Portal:
Starting from
NGINX Plus Release 33, a JWT file is required for each NGINX Plus instance. For more information, see
About Subscription Licenses.
Install the prerequisite ca_root_nss package:
shellsudo pkg update
sudo pkg install ca_root_nss
sudo pkg update
sudo pkg install ca_root_nss
Create the /etc/ssl/nginx directory:
sudo mkdir -p /etc/ssl/nginx
sudo mkdir -p /etc/ssl/nginx
Copy the downloaded .crt and .key files to the /etc/ssl/nginx/ directory and make sure they are named nginx-repo.crt and nginx-repo.key:
shellsudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
sudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
Copy the nginx-plus.conf file to the /etc/pkg/ directory:
sudo fetch -o /etc/pkg/nginx-plus.conf http://cs.nginx.com/static/files/nginx-plus.conf
sudo fetch -o /etc/pkg/nginx-plus.conf http://cs.nginx.com/static/files/nginx-plus.conf
Add the following lines to the /usr/local/etc/pkg.conf file:
PKG_ENV: { SSL_NO_VERIFY_PEER: "1",
SSL_CLIENT_CERT_FILE: "/etc/ssl/nginx/nginx-repo.crt",
SSL_CLIENT_KEY_FILE: "/etc/ssl/nginx/nginx-repo.key" }
PKG_ENV: { SSL_NO_VERIFY_PEER: "1",
SSL_CLIENT_CERT_FILE: "/etc/ssl/nginx/nginx-repo.crt",
SSL_CLIENT_KEY_FILE: "/etc/ssl/nginx/nginx-repo.key" }
Install the nginx-plus package. Any older NGINXÂ Plus package is automatically replaced. Back up your NGINX Plus configuration and log files if you have an older NGINX Plus package installed. For more information, see Upgrading NGINX Plus.
sudo pkg install nginx-plus
sudo pkg install nginx-plus
Copy the downloaded JWT file to the /usr/local/etc/nginx directory and make sure it is named license.jwt:
sudo cp license.jwt /usr/local/etc/nginx
sudo cp license.jwt /usr/local/etc/nginx
Check the nginx
version to verify that NGINX Plus is installed correctly:
Make sure license reporting to F5 licensing endpoint is configured. By default, no configuration is required. However, it becomes necessary when NGINX Plus is installed in a disconnected environment, uses NGINX Instance Manager for usage reporting, or uses a custom path for the license file. Configuration can be done in the mgmt {}
block of the NGINX Plus configuration file (/etc/nginx/nginx.conf
). For more information, see About Subscription Licenses.
If you are using NGINX Instance Manager in your infrastructure, install and enable NGINX Agent. See Install and Configure NGINX Agent for details.
Install NGINX Plus on SUSE Linux Enterprise Server
Check if your operating system and architecture are supported. For a complete list of supported platforms and architectures, see the Technical Specifications.
Back up your NGINX Plus configuration and log files if you have an older NGINX Plus package installed. For more information, see Upgrading NGINX Plus.
Download the SSL certificate, private key, and the JWT license file associated with your NGINX Plus subscription from the MyF5 Customer Portal:
Starting from
NGINX Plus Release 33, a JWT file is required for each NGINX Plus instance. For more information, see
About Subscription Licenses.
Create the /etc/ssl/nginx directory:
sudo mkdir -p /etc/ssl/nginx
sudo mkdir -p /etc/ssl/nginx
Copy the downloaded .crt and .key files to the /etc/ssl/nginx/ directory and make sure they are named nginx-repo.crt and nginx-repo.key:
shellsudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
sudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
Create a file bundle of the certificate and key:
cat /etc/ssl/nginx/nginx-repo.crt /etc/ssl/nginx/nginx-repo.key > /etc/ssl/nginx/nginx-repo-bundle.crt
cat /etc/ssl/nginx/nginx-repo.crt /etc/ssl/nginx/nginx-repo.key > /etc/ssl/nginx/nginx-repo-bundle.crt
Install the required ca-certificates dependency:
shellzypper refresh
zypper install ca-certificates
zypper refresh
zypper install ca-certificates
Add the nginx-plus repo.
For SLES 12:
shellzypper addrepo -G -t yum -c \
"https://pkgs.nginx.com/plus/sles/12?ssl_clientcert=/etc/ssl/nginx/nginx-repo-bundle.crt&ssl_verify=peer" \
nginx-plus
zypper addrepo -G -t yum -c \
"https://pkgs.nginx.com/plus/sles/12?ssl_clientcert=/etc/ssl/nginx/nginx-repo-bundle.crt&ssl_verify=peer" \
nginx-plus
For SLES 15:
shellzypper addrepo -G -t yum -c \
"https://pkgs.nginx.com/plus/sles/15?ssl_clientcert=/etc/ssl/nginx/nginx-repo-bundle.crt&ssl_verify=peer" \
nginx-plus
zypper addrepo -G -t yum -c \
"https://pkgs.nginx.com/plus/sles/15?ssl_clientcert=/etc/ssl/nginx/nginx-repo-bundle.crt&ssl_verify=peer" \
nginx-plus
Install the nginx-plus package. Any older NGINXÂ Plus package is automatically replaced.
zypper install nginx-plus
zypper install nginx-plus
Copy the downloaded JWT file to the /etc/nginx/ directory and make sure it is named license.jwt:
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
Check the nginx
version to verify that NGINX Plus is installed correctly:
Make sure license reporting to F5 licensing endpoint is configured. By default, no configuration is required. However, it becomes necessary when NGINX Plus is installed in a disconnected environment, uses NGINX Instance Manager for usage reporting, or uses a custom path for the license file. Configuration can be done in the mgmt {}
block of the NGINX Plus configuration file (/etc/nginx/nginx.conf
). For more information, see About Subscription Licenses.
If you are using NGINX Instance Manager in your infrastructure, install and enable NGINX Agent. See Install and Configure NGINX Agent for details.
Install NGINX Plus on Alpine Linux
Check if your operating system and architecture are supported. For a complete list of supported platforms and architectures, see the Technical Specifications.
Back up your NGINX Plus configuration and log files if you have an older NGINX Plus package installed. For more information, see Upgrading NGINX Plus.
Download the SSL certificate, private key, and the JWT license file associated with your NGINX Plus subscription from the MyF5 Customer Portal:
Starting from
NGINX Plus Release 33, a JWT file is required for each NGINX Plus instance. For more information, see
About Subscription Licenses.
Upload nginx-repo.key to /etc/apk/cert.key and nginx-repo.crt to /etc/apk/cert.pem. Ensure these files contain only the specific key and certificate â Alpine Linux doesn’t support mixing client certificates for multiple repositories.
Put the NGINX signing public key in the /etc/apk/keys directory:
sudo wget -O /etc/apk/keys/nginx_signing.rsa.pub https://cs.nginx.com/static/keys/nginx_signing.rsa.pub
sudo wget -O /etc/apk/keys/nginx_signing.rsa.pub https://cs.nginx.com/static/keys/nginx_signing.rsa.pub
Add the NGINX repository to the /etc/apk/repositories file:
shellprintf "https://pkgs.nginx.com/plus/alpine/v`egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release`/main\n" \
| sudo tee -a /etc/apk/repositories
printf "https://pkgs.nginx.com/plus/alpine/v`egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release`/main\n" \
| sudo tee -a /etc/apk/repositories
Remove all community-supported NGINX packages. Note that this will also remove all NGINX modules:
Install the NGINXÂ Plus package:
Copy the downloaded JWT file to the /etc/nginx/ directory and make sure it is named license.jwt:
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
Check the nginx
version to verify that NGINX Plus is installed correctly:
Make sure license reporting to F5 licensing endpoint is configured. By default, no configuration is required. However, it becomes necessary when NGINX Plus is installed in a disconnected environment, uses NGINX Instance Manager for usage reporting, or uses a custom path for the license file. Configuration can be done in the mgmt {}
block of the NGINX Plus configuration file (/etc/nginx/nginx.conf
). For more information, see About Subscription Licenses.
If you are using NGINX Instance Manager in your infrastructure, install and enable NGINX Agent. See Install and Configure NGINX Agent for details.
Install Dynamically Loadable Modules
NGINX Plus functionality can be extended with dynamically loadable modules. They can be added or updated independently of the core binary, enabling powerful capabilities such as advanced security, traffic shaping, telemetry, embedded scripting, geolocation, and many more.
Dynamic modules are shared object files (.so
) that can be loaded at runtime using the load_module
directive in the NGINX configuration.
nginx-plus
official repo Full support NGINX-certified Community Tested and distributed by NGINX Packaged binaries from nginx-plus
official repo Installation and basic configuration support NGINX Certified Partner Partner-built modules verified through NGINXâs certification Provided by partners Provided by partners Community Developed and distributed by thirdâparty contributors Self-compiled No support Type Description Distribution Method F5 NGINX Support NGINX-authored Developed and distributed by NGINX Packaged binaries from nginx-plus
official repo Full support NGINX-certified Community Tested and distributed by NGINX Packaged binaries from nginx-plus
official repo Installation and basic configuration support NGINX Certified Partner Partner-built modules verified through NGINXâs certification Provided by partners Provided by partners Community Developed and distributed by thirdâparty contributors Self-compiled No support
NGINX-authored dynamic modules
NGINX-authored dynamic modules are developed and officially maintained by the F5 NGINX team. These modules are available as packaged binaries for various operating systems and can be installed from the nginx-plus
repository.
NGINX-certified community dynamic modules
NGINX-certified community dynamic modules are popular thirdâparty modules tested and distributed by F5 NGINX, with installation and basic configuration support provided. They are also distributed as precompiled packages for various operating systems and can be installed from the nginx-plus
repository.
Install from official repository
NGINXâauthored and NGINXâcertified community dynamic modules can be installed as packaged binaries directly from the official nginx-plus
repository.
To install a binary package, run the command in a terminal that corresponds to your operating system, replacing <MODULE-NAME>
with the actual binary package name, for example, nginx-plus-module-njs
.
For RHEL, Amazon Linux 2, CentOS, Oracle Linux:
shellsudo yum update && \
sudo yum install <MODULE-NAME>
sudo yum update && \
sudo yum install <MODULE-NAME>
The resulting .so
file will be installed to: /usr/lib64/nginx/modules/
For Amazon Linux 2023, AlmaLinux and Rocky Linux:
shellsudo dnf update && \
sudo dnf install <MODULE-NAME>
sudo dnf update && \
sudo dnf install <MODULE-NAME>
The resulting .so
file will be installed to: /usr/lib64/nginx/modules/
For Debian and Ubuntu:
shellsudo apt update && \
sudo apt install <MODULE-NAME>
sudo apt update && \
sudo apt install <MODULE-NAME>
The resulting .so
file will be installed to: /usr/lib/nginx/modules
For FreeBSD:
shellsudo pkg update && \
sudo pkg install <MODULE-NAME>
sudo pkg update && \
sudo pkg install <MODULE-NAME>
The resulting .so
file will be installed to: /usr/local/etc/nginx/modules
For SUSE Linux Enterprise:
shellsudo zypper refresh && \
sudo zypper install <MODULE-NAME>
sudo zypper refresh && \
sudo zypper install <MODULE-NAME>
The resulting .so
file will be installed to: /usr/lib64/nginx/modules/
For Alpine Linux:
shellsudo apk update && \
sudo apk add <MODULE-NAME>
sudo apk update && \
sudo apk add <MODULE-NAME>
The resulting .so
file will be installed to: /usr/lib/nginx/modules
For detailed description and installation steps for each dynamic module, see NGINXÂ Plus Dynamic Modules.
Some modules may not be available on specific operating systems due to platform-level limitations. For detailed modules compatibility, see the Dynamic Modules section of the NGINXÂ Plus Technical Specifications.
After installing the module, you will need to:
load_module
directiveTo enable a dynamic module:
In a text editor, open the NGINX Plus configuration file:
/etc/nginx/nginx.conf
for Linux/usr/local/etc/nginx/nginx.conf
for FreeBSDOn the top-level (or the âmain
â context, before any http
or stream
blocks), specify the path to the .so
file with the load_module
directive. By default, the files are expected to be in the /modules
directory. The path to the directory depends on your operating system:
/usr/lib64/nginx/modules/
for most Linux operating systems/usr/lib/nginx/modules
for Debian, Ubuntu, Alpine/usr/local/etc/nginx/modules
for FreeBSDIf there are several dynamic modules, specify each module with a separate load_module
directive:
load_module modules/<MODULE-NAME-1>.so;
load_module modules/<MODULE-NAME-2>.so;
http {
#...
}
stream {
#...
}
load_module modules/<MODULE-NAME-1>.so;
load_module modules/<MODULE-NAME-2>.so;
http {
#...
}
stream {
#...
}
Save the changes.
Check the new configuration for syntactic validity:
Reload the NGINXÂ Plus configuration:
After installing the module, you will need to configure the module in the NGINX Plus configuration file. Follow the usage and setup instructions provided in the moduleâs official documentation.
NGINX Certified Partner dynamic modules
NGINX Certified Partner dynamic modules are partner-built extensions that enhance NGINX Plus with advanced features such as security, identity and access management, device detection, application delivery, and many more. These modules are verified through NGINXâs certification process. Installation packages, documentation, and support are provided directly by the partners.
Name Description Commercial Support CQ botDefence Simplify traffic analysis to prevent fraud and theft that may result from automated bot attacks against your public-facing web, mobile, and API-based applications. Support provided by Cequence Curity Identity Server Powerful OAuth and OpenID Connect server, used for logging in and securing millions of users, access to API and mobile apps over APIs and microservices. Support and docs [1], [2] provided by Curity DeviceAtlas Detect what devices users are using, including smartphones, laptops, and weareable devices, and use this data to deliver customized experiences. Support and docs provided by DeviceAtlas ForgeRock Policy Agent In conjunction with ForgeRock Access Management, allows you to authenticate your application and API access. Support and docs provided by PingIdentity HUMAN Security for F5 NGINX Provides the required enforcement layer to protect websites and apps from modern automated security threats. Support provided by HUMAN Security IDFConnect SSO/Rest Integrates your web access management platform’s full capabilities with NIGNX Plus. Support and docs provided by IDFConnect OPSWAT Scalable solutions to protect your networks and applications from malware and unknown (zero-day) malicious file content. Support and docs provided by OPSWAT Passenger Enterprise An application server with support for Meteor, Node.js, Python, and Ruby apps. Support and docs provided by Phusion Ping Access Centralized management of access security with advanced contextual policies to secure your mobile and web properties in any domain. Support and docs provided by PingIdentity PingIntelligence A complete solution to secure an organization’s API across on-premises, public and private clouds, and hybrid IT environments. Support and docs provided by PingIdentity Seer Box by Plurbius One Cloud-native web application security manager which provides thorough monitoring and protection capabilities. Support provided by Seer Box Signal Sciences Intelligently detects malicious requests and blocks them without false positives, while the patented fail-open architecture allows legitimate requests through. Support and docs provided by Fastly Wallarm The Wallarm WAF provides enterprise-grade protection against advanced Layer 7 application attacks. Support and docs provided by Wallarm WURFL InFuse Give developers the most advanced, accurate, and high-performance device detection in the industry. Support and docs provided by Scientiamobile 51Degrees Device Detection Improve speed of response and accuracy, delivering an optimal user experience and high-fidelity analysis. Support and docs provided by 51Degrees Name Description Commercial Support CQ botDefence Simplify traffic analysis to prevent fraud and theft that may result from automated bot attacks against your public-facing web, mobile, and API-based applications. Support provided by Cequence Curity Identity Server Powerful OAuth and OpenID Connect server, used for logging in and securing millions of users, access to API and mobile apps over APIs and microservices. Support and docs [1], [2] provided by Curity DeviceAtlas Detect what devices users are using, including smartphones, laptops, and weareable devices, and use this data to deliver customized experiences. Support and docs provided by DeviceAtlas ForgeRock Policy Agent In conjunction with ForgeRock Access Management, allows you to authenticate your application and API access. Support and docs provided by PingIdentity HUMAN Security for F5 NGINX Provides the required enforcement layer to protect websites and apps from modern automated security threats. Support provided by HUMAN Security IDFConnect SSO/Rest Integrates your web access management platform’s full capabilities with NIGNX Plus. Support and docs provided by IDFConnect OPSWAT Scalable solutions to protect your networks and applications from malware and unknown (zero-day) malicious file content. Support and docs provided by OPSWAT Passenger Enterprise An application server with support for Meteor, Node.js, Python, and Ruby apps. Support and docs provided by Phusion Ping Access Centralized management of access security with advanced contextual policies to secure your mobile and web properties in any domain. Support and docs provided by PingIdentity PingIntelligence A complete solution to secure an organization’s API across on-premises, public and private clouds, and hybrid IT environments. Support and docs provided by PingIdentity Seer Box by Plurbius One Cloud-native web application security manager which provides thorough monitoring and protection capabilities. Support provided by Seer Box Signal Sciences Intelligently detects malicious requests and blocks them without false positives, while the patented fail-open architecture allows legitimate requests through. Support and docs provided by Fastly Wallarm The Wallarm WAF provides enterprise-grade protection against advanced Layer 7 application attacks. Support and docs provided by Wallarm WURFL InFuse Give developers the most advanced, accurate, and high-performance device detection in the industry. Support and docs provided by Scientiamobile 51Degrees Device Detection Improve speed of response and accuracy, delivering an optimal user experience and high-fidelity analysis. Support and docs provided by 51DegreesThe complete list of Certified Partner Modules can be found on the F5.com Dynamic Modules page.
Community dynamic modules
Community dynamic modules are open source extensions developed and distributed by thirdâparty contributors of the NGINX community.
These modules are not available in the official NGINX repository. To use them, you must download the source code from the module’s repository and compile it against the NGINX Open Source version that matches your NGINX Plus version.
The lists of community modules can be found across different community-driven resources, for example, Awesome NGINX GitHub project.
Installing a community dynamic module
For a community dynamic module to work with NGINX Plus, it must be compiled alongside the corresponding version of NGINX Open Source.
Find out the NGINX Open Source version that matches your NGINX Plus version. In a terminal, run the command:
Expected output of the command:
nginx version: nginx/1.29.0 (nginx-plus-r35)
nginx version: nginx/1.29.0 (nginx-plus-r35)
Prepare the build environment.
We strongly recommend compiling dynamic modules on a separate system, referred to as the âbuild environmentâ. This approach minimizes the risk and complexity for the system where NGINX Plus will be upgraded, referred to as the âproduction environmentâ. The build environment should meet the following requirements:
make
utilitiesTo verify that the required prerequisites are installed in your build environment, run the following commands:
For Debian and Ubuntu:
shellsudo apt update && \
sudo apt install gcc make libpcre3-dev zlib1g-dev
sudo apt update && \
sudo apt install gcc make libpcre3-dev zlib1g-dev
For CentOS, Oracle Linux, and RHEL:
shellsudo yum update && \
sudo yum install gcc make pcre-devel zlib-devel
sudo yum update && \
sudo yum install gcc make pcre-devel zlib-devel
Obtain NGINX Open Source.
Identify the NGINX Open Source version that corresponds to your version of NGINX Plus. See NGINX Plus Releases.
Download the sources for the appropriate NGINX Open Source mainline version, in this case 1.29.0:
wget -qO - https://nginx.org/download/nginx-1.29.0.tar.gz | tar zxfv -
wget -qO - https://nginx.org/download/nginx-1.29.0.tar.gz | tar zxfv -
Obtain the source for the dynamic module.
The source code for the dynamic module can be placed in any directory in the build environment. As an example, here we’re copying the NGINX âHello Worldâ module from GitHub:
git clone https://github.com/perusio/nginx-hello-world-module.git
git clone https://github.com/perusio/nginx-hello-world-module.git
Compile the dynamic module.
First, establish binary compatibility by running the configure
script with the ââwithâcompat
option. Then compile the module with make modules
.
cd nginx-1.29.0/ && \
./configure --with-compat --add-dynamic-module=../<MODULE-SOURCES> && \
make modules
cd nginx-1.29.0/ && \
./configure --with-compat --add-dynamic-module=../<MODULE-SOURCES> && \
make modules
The .so file generated by the build process is placed in the objs subdirectory:
Expected command output:
objs/ngx_http_hello_world_module.so
objs/ngx_http_hello_world_module.so
Make a copy of the module file and include the NGINX Open Source version in the filename. This makes it simpler to manage multiple versions of a dynamic module in the production environment.
cp objs/ngx_http_hello_world_module.so ./ngx_http_hello_world_module_1.29.0.so
cp objs/ngx_http_hello_world_module.so ./ngx_http_hello_world_module_1.29.0.so
Transfer the resulting .so
file from your build environment to the production environment.
In your production environment, copy the resulting .so
file to the dynamic modules directory. The path to the directory depends on your operating system:
/usr/lib64/nginx/modules/
for most Linux operating systems/usr/lib/nginx/modules
for Debian, Ubuntu, Alpine/usr/local/etc/nginx/modules
for FreeBSDsudo cp ngx_http_hello_world_module_1.29.0.so /usr/local/nginx/modules/ngx_http_hello_world_module_1.29.0.so
sudo cp ngx_http_hello_world_module_1.29.0.so /usr/local/nginx/modules/ngx_http_hello_world_module_1.29.0.so
After installing the module, you need to enable it in the NGINXÂ Plus configuration file. For more information, see Enabling Dynamic Modules.
NGINX Plus Unprivileged Installation
In some environments, access to the root account is restricted for security reasons. On Linux systems, this limitation prevents the use of package managers to install NGINX Plus without root privileges.
As a workaround, in such environments NGINXÂ Plus can be installed with a special script that modifies NGINXÂ Plus configuration file to allow it to run from a non-root user. This script performs the following actions:
Downloads the NGINXÂ Plus packages
Extracts the content of the archives into a user-defined directory of the packages
Updates the paths in the NGINX configuration file to use relative paths in the specified directory
Makes a backup copy of the configuration directory
Provides an option to upgrade an existing unprivileged installation of NGINX Plus
Comparing to a standard installation of NGINXÂ Plus, an unprivileged installation has certain limitations and restrictions:
Root privileges are still required in order to listen on ports below 1024
.
The script is not intended to replace your operating system’s package manager and does not allow for the installation of any software other than NGINX Plus and its modules. Modifications to the script for other installations are not covered by the support program.
NGINXÂ Plus will not start automatically, so, you must add a custom init
script or a systemd
unit file for each unprivileged installation on the host.
all dependencies and libraries required by the NGINXÂ Plus binary and its modules are not installed automatically and should be checked and installed manually.
The script can be run on the following operating systems:
Before starting the unprivileged installation, make sure you have all the prerequisites listed in the Prerequisites section (excluding root
privileges). For RPM-based distributions, verify that you have rpm2cpio
installed.
To perform an unprivileged installation of NGINX Plus:
Download the SSL certificate, private key, and the JWT license file associated with your NGINX Plus subscription from the MyF5 Customer Portal:
Starting from
NGINX Plus Release 33, a JWT file is required for each NGINX Plus instance. For more information, see
About Subscription Licenses.
Ensure that the downloaded JWT license file is named license.jwt.
Obtain the script:
wget https://raw.githubusercontent.com/nginxinc/nginx-plus-install-tools/main/ngxunprivinst.sh
wget https://raw.githubusercontent.com/nginxinc/nginx-plus-install-tools/main/ngxunprivinst.sh
Make the script executable:
chmod +x ngxunprivinst.sh
chmod +x ngxunprivinst.sh
Download NGINXÂ Plus and its module packages for your operating system. The <cert_file>
and <key_file>
are your NGINX Plus certificate and a private key required to access the NGINX Plus repo:
./ngxunprivinst.sh fetch -c <cert_file> -k <key_file>
./ngxunprivinst.sh fetch -c <cert_file> -k <key_file>
If you need to install a particular version of NGINXÂ Plus:
first, list all available NGINX Plus versions from the repository:
./ngxunprivinst.sh list -c <cert_file> -k <key_file>
./ngxunprivinst.sh list -c <cert_file> -k <key_file>
then specify a particular NGINXÂ Plus version with the -v
parameter:
./ngxunprivinst.sh fetch -c <cert_file> -k <key_file> -v <version>
./ngxunprivinst.sh fetch -c <cert_file> -k <key_file> -v <version>
Extract the downloaded packages to the program prefix <path>
specified by the -p
parameter and specify the license.jwt <license_file>
with the -j
parameter. The optional -y
parameter allows overwriting an existing installation:
./ngxunprivinst.sh install [-y] -p <path> -j <license_file> <file1.rpm> <file2.rpm>
./ngxunprivinst.sh install [-y] -p <path> -j <license_file> <file1.rpm> <file2.rpm>
When the installation procedure is finished, run NGINXÂ Plus. The -p
parameter sets a path to the directory that keeps nginx files. The -c
parameter sets a path to an alternative NGINX configuration file. Please note NGINXÂ Plus must listen on ports above 1024
:
<path>/usr/sbin/nginx -p <path>/etc/nginx -c <path>/etc/nginx/conf.d
<path>/usr/sbin/nginx -p <path>/etc/nginx -c <path>/etc/nginx/conf.d
With this script, you can also upgrade an existing unprivileged installation of NGINXÂ Plus in the provided <path>
. The optional -y
parameter performs a forced upgrade without any confirmation:
./ngxunprivinst.sh upgrade [-y] -p <path> <file1.rpm> <file2.rpm>
./ngxunprivinst.sh upgrade [-y] -p <path> <file1.rpm> <file2.rpm>
NGINX Plus Offline Installation
This section explains how to install NGINX Plus and its dynamic modules on a server with limited or no Internet access.
To install NGINX Plus offline, you will need a machine connected to the Internet to get the NGINX Plus package, JWT license, SSL certificate and key. Then your can transfer these files to the target server for offline installation.
Step 1: Obtaining files on the machine connected to the Internet
Download the SSL certificate, private key, and the JWT license file associated with your NGINX Plus subscription from the MyF5 Customer Portal:
Starting from
NGINX Plus Release 33, a JWT file is required for each NGINX Plus instance. For more information, see
About Subscription Licenses.
Transfer the files to the target server that doesn’t have online access and where NGINX Plus will be installed.
Step 2: Installing NGINX Plus on a server without Internet connectivity
Back up your NGINX Plus configuration and log files if you have an older NGINX Plus package installed. For more information, see Upgrading NGINX Plus.
Make sure youâve downloaded the SSL certificate, private key, and the JWT file required for your NGINX Plus subscription. You can find these files in the MyF5 Customer Portal. For details on how to obtain these files, see Step 1: Obtaining files on the machine connected to the Internet.
Create the /etc/ssl/nginx directory:
sudo mkdir -p /etc/ssl/nginx
sudo mkdir -p /etc/ssl/nginx
Copy the downloaded .crt and .key files to the /etc/ssl/nginx/ directory and make sure they are named nginx-repo.crt and nginx-repo.key:
shellsudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
sudo cp <downloaded-file-name>.crt /etc/ssl/nginx/nginx-repo.crt
sudo cp <downloaded-file-name>.key /etc/ssl/nginx/nginx-repo.key
Install the NGINX Plus package or a dynamic module. Any older NGINXÂ Plus package is automatically replaced.
For RHEL, Amazon Linux, CentOS, Oracle Linux, AlmaLinux and Rocky Linux:
sudo rpm -ihv <rpm_package_name>
sudo rpm -ihv <rpm_package_name>
For Debian, Ubuntu:
sudo dpkg -i <deb_package_name>
sudo dpkg -i <deb_package_name>
For Alpine:
apk add <apk_package_name>
apk add <apk_package_name>
For SLES:
rpm -ivh <rpm_package_name>
rpm -ivh <rpm_package_name>
Copy the downloaded JWT file to the /etc/nginx/ directory and make sure it is named license.jwt:
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
Check the nginx
version to verify that NGINX Plus is installed correctly:
Install NGINX Instance Manager 2.18 or later in your local environment to enable usage reporting, which is mandatory since R33. For more information, see Disconnected environments and About Subscription Licenses.
Configure usage reporting of the NGINX Plus instance to NGINX Instance Manager which is mandatory starting from R33.
In the nginx.conf
configuration file, specify the following directives:
the mgmt {}
block that handles NGINX Plus licensing and usage reporting configuration,
the usage_report
directive that sets the domain name or IP address of NGINX Instance Manager,
the enforce_initial_report
directive that enables the 180-day grace period for sending the initial usage report. The initial usage report must be received by F5 licensing endpoint during the grace period, otherwise traffic processing will be stopped:
mgmt {
usage_report endpoint=NIM_FQDN;
enforce_initial_report off;
}
mgmt {
usage_report endpoint=NIM_FQDN;
enforce_initial_report off;
}
In NGINX Instance Manager, prepare and send the usage report to F5 licensing endpoint. For more information, see Report usage to F5 in a disconnected environment.
Upload the usage acknowledgement to NGINX Instance Manager. For more information, see Report usage to F5 in a disconnected environment.
Starting from
Release 24(R24), NGINXÂ Plus repositories have been separated into individual repositories based on operating system distribution and license subscription. Before upgrading from previous NGINXÂ Plus versions, you must first reconfigure your repositories to point to the correct location. To reconfigure your repository, follow the installation instructions above for your operating system.
Starting from
Release 24(R24), NGINXÂ Plus repositories have been separated into individual repositories based on operating system distribution and license subscription. Before upgrading from previous NGINXÂ Plus versions, you must first reconfigure your repositories to point to the correct location. To reconfigure your repository, follow the installation instructions above for your operating system.
To upgrade your NGINXÂ Plus installation to the newest version:
If your system has previous NGINX or NGINXÂ Plus packages on it, back up the configuration and log files.
For Linux distributions:
shellsudo cp -a /etc/nginx /etc/nginx-plus-backup
sudo cp -a /var/log/nginx /var/log/nginx-plus-backup
sudo cp -a /etc/nginx /etc/nginx-plus-backup
sudo cp -a /var/log/nginx /var/log/nginx-plus-backup
For FreeBSD:
shellsudo cp -a /usr/local/etc/nginx /usr/local/etc/nginx-plus-backup
sudo cp -a /var/log/nginx /var/log/nginx-plus-backup
sudo cp -a /usr/local/etc/nginx /usr/local/etc/nginx-plus-backup
sudo cp -a /var/log/nginx /var/log/nginx-plus-backup
Get the JWT file associated with your NGINX Plus subscription from the MyF5 Customer Portal:
Starting from
NGINX Plus Release 33, a JWT file is required for each NGINX Plus instance. For more information, see
About Subscription Licenses.
Create the /etc/nginx/ directory for Linux or the /usr/local/etc/nginx directory for FreeBSD:
For Linux:
For FreeBSD:
sudo mkdir -p /usr/local/etc/nginx
sudo mkdir -p /usr/local/etc/nginx
Using custom pathsIf you plan to use a custom path for the license file, note that custom paths wonât work until after the R33 upgrade. Youâll need to create a placeholder file at
/etc/nginx/license.jwt
or/usr/local/etc/nginx/license.jwt
on FreeBSD before upgrading.
Before upgrading: Create the placeholder file by running:
touch /etc/nginx/license.jwt
touch /etc/nginx/license.jwt
After upgrading: Update the
nginxlicense_token
directive in the NGINX configurationmgmt
block to point to your custom path:mgmt { license_token <custom_path>; }
mgmt { license_token <custom_path>; }
If you plan to use a custom path for the license file, note that custom paths wonât work until after the R33 upgrade. Youâll need to create a placeholder file at
/etc/nginx/license.jwt
or/usr/local/etc/nginx/license.jwt
on FreeBSD before upgrading.
Before upgrading: Create the placeholder file by running:
touch /etc/nginx/license.jwt
touch /etc/nginx/license.jwt
After upgrading: Update the
nginxlicense_token
directive in the NGINX configurationmgmt
block to point to your custom path:mgmt { license_token <custom_path>; }
mgmt { license_token <custom_path>; }
After downloading the JWT file, copy it to the /etc/nginx/ directory for Linux, or to the /usr/local/etc/nginx directory for FreeBSD, and make sure it’s named license.jwt:
For Linux:
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
sudo cp <downloaded-file-name>.jwt /etc/nginx/license.jwt
For FreeBSD:
sudo cp <downloaded-file-name>.jwt /usr/local/etc/nginx/license.jwt
sudo cp <downloaded-file-name>.jwt /usr/local/etc/nginx/license.jwt
Upgrade to the new NGINXÂ Plus package.
For RHEL, Amazon Linux, CentOS, Oracle Linux, AlmaLinux and Rocky Linux:
sudo yum upgrade nginx-plus
sudo yum upgrade nginx-plus
For Debian and Ubuntu:
shellsudo apt update
sudo apt install nginx-plus
sudo apt update
sudo apt install nginx-plus
For FreeBSD:
sudo pkg upgrade nginx-plus
sudo pkg upgrade nginx-plus
Configure NGINX Plus usage reporting which is mandatory starting from R33. By default, no configuration is required. However, configuration is required in specific scenarios, such as NGINX Plus is installed in an offline environment or if the JWT license file is located in a non-default directory.
For offline environments, usage reporting should be configured for NGINX Instance Manager 2.18 or later. In the nginx.conf
configuration file, specify the following directives:
the mgmt
context handles NGINX Plus licensing and usage reporting configuration,
the usage_report
directive specifies the domain name or IP address of the NGINX Instance Manager,
the enforce_initial_report
directive enables a 180-day grace period for sending the initial usage report. The initial usage report must be received by F5 licensing endpoint within this grace period. If the report is not received in time, traffic processing will be stopped:
mgmt {
usage_report endpoint=NIM_FQDN;
enforce_initial_report off;
}
mgmt {
usage_report endpoint=NIM_FQDN;
enforce_initial_report off;
}
In NGINX Instance Manager, prepare and send the usage report to F5 licensing endpoint. For more information, see Report usage to F5 in a disconnected environment.
If the JWT license file is located in a directory other than /etc/nginx/ for Linux or usr/local/etc/nginx/ for FreeBSD, you must specify its name and path in the license_token
directive:
mgmt {
license_token custom/file/path/license.jwt;
}
mgmt {
license_token custom/file/path/license.jwt;
}
For more information, see About Subscription Licenses.
To verify that the new NGINXÂ Plus version is upgraded, run:
The output of the command:
nginx version: nginx/1.29.0 (nginx-plus-r35)
nginx version: nginx/1.29.0 (nginx-plus-r35)
Upgrade NGINX Plus Modules
The upgrade procedure depends on how the module was supplied and installed.
NGINXâauthored and NGINXâcertified community dynamic modules are updated automatically together with NGINXÂ Plus.
For FreeBSD, each NGINXâauthored and NGINXâcertified module must be updated separately using FreeBSD package management tool.
For FreeBSD, each NGINXâauthored and NGINXâcertified module must be updated separately using FreeBSD package management tool.
Community dynamic modules must be recompiled against the corresponding NGINX Open Source version. See Installing NGINX Community Modules.
Install NGINX App Protect
To install NGINX App Protect, follow the steps in the NGINX App Protect installation guide.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4