Overview
This offering includes a free, full featured 30-day trial. Simplify your stack and deliver high-performance apps reliably, securely and at scale with NGINX Plus and NGINX App Protect: the all in one (yet surprisingly lightweight) load balancer, reverse proxy, and API gateway with WAF. Try it for free today!
Looking for consistent, high-performance app delivery and web services? NGINX plus operates stand-alone or can integrate with AWS services - such as existing load balancing solutions, Auto Scaling groups, and AWS Lambda - to reduce your application delivery and management costs. NGINX Plus provides enterprise-grade features such as session persistence, configuration via API, and active health checks so that you can add advanced application load balancing, monitoring and management to your AWS application stack.
Want to use the same WAF across all your environments - from on-prem to cloud to Kubernetes? NGINX App Protect, our modern app-security solution built on F5's market-leading security expertise, can do just that. Our security-as-code design philosophy makes it easy to integrate security into your agile and DevOps workflows. It easily integrates with NGINX Plus and NGINX Ingress Controller to protect your apps from a range of threats including OWASP Top 10 and beyond.
Highlights
- NGINX Integration: Enables strong security controls integrated seamlessly with NGINX Plus and NGINX Ingress Controller.
- Application Delivery: A reliable, lightweight and high-performance load balancer and reverse proxy that can be managed at scale.
- API gateway: Route requests, authenticate API calls, apply rate limits and deliver APIs in real-time.
Details
Unlock automation with AI agent solutions

Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Cost/hour |
---|---|
c5.large Recommended | $1.50 |
r5ad.24xlarge | $1.50 |
m5n.2xlarge | $1.50 |
m5n.24xlarge | $1.50 |
h1.16xlarge | $1.50 |
m3.2xlarge | $1.50 |
r5ad.2xlarge | $1.50 |
m6i.large | $1.50 |
m6i.8xlarge | $1.50 |
u-6tb1.56xlarge | $1.50 |
Vendor refund policy
We do not offer refunds for hourly usage fees after free trial has expired
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Release notes can be found at https://docs.nginx.com/nginx/releases/Â
Additional details
Usage instructions
When a new AMI is deployed for the first time, the latest version of NGINX Plus will be installed, auto-configured and started. NGINX Plus status can then be checked by running: service nginx status, and the NGINX Plus default index page will be accessible on public EC2 instance address. Please use SSH to access your instance for management purposes with the following usernames, for Ubuntu: "ubuntu", CentOS: "centos", Amazon Linux/RHEL: "ec2-user", Debian: "admin". NGINX Plus configuration can be found in /etc/nginx and the documentation is available on the instance locally (as a PDF), and at https://docs.nginx.com/nginx/Â .
Resources
Vendor resources
Support
Vendor support
The Premium edition includes access to 24x7 email and phone support for unlimited number of incidents. SLA within 30 minutes for urgent Severity 1 requests, 24 hours response for low Severity requests. Documentation questions answered within 24 hours. Receive hot bug fixes and email notifications of all NGINX software updates. To engage our support team, please activate your account at: https://support.f5.com/csp/article/K23782072Â To engage the F5 support team, please first activate your account
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

Standard contract
Customer reviews
Empowers seamless DevOps integration and future-ready configurations
What is our primary use case?
What is most valuable?
What needs improvement?
For how long have I used the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
How was the initial setup?
What about the implementation team?
What was our ROI?
What other advice do I have?
Which deployment model are you using for this solution?
Blocking IPs and detecting bots enhances security for medical websites
What is our primary use case?
What is most valuable?
How are customer service and support?
How would you rate customer service and support?
Positive
What's my experience with pricing, setup cost, and licensing?
Which other solutions did I evaluate?
What other advice do I have?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Signature-based detection, DOS protection, and bot protection
How has it helped my organization?
NGINX App Protect is easier to automate and configure, or manage from an API. This is good for securing applications. However, it's not suitable for more complex tasks.
NGINX App Protect positively impacted performance changes. There's a cache or it works like a proxy, so it can speed up applications. It can also offload some functions from servers, which NGINX can handle faster.
What is most valuable?
It has simple functions, especially for CICD pipelines and automation capabilities. The functions are not as broad as the Advanced WAF.
NGINX has signature-based detection, DOS protection, and bot protection.
What needs improvement?
It doesn't have more advanced features like no false-positive security, which you can configure in Advanced WAF.
It should be simple and easy to manage. The functions cannot be too complex because that would decrease the value of its management. So, I think it's good for now.
How are customer service and support?
It's good support. In some cases, it's fast and helpful, but in others, it's slow and requires escalation. Overall, it's good compared to some other vendors.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I have experience with F5 Advanced WAF (F5), it is a popular F5 product.Â
I have also used FortiWeb.Â
How was the initial setup?
The complexity and time for the setup depend on the type of app. With experience, it can take a few minutes to a few hours to install and protect applications on a basic level.Â
For more granular security, it takes more time to configure, but it's not very difficult with experience.
What was our ROI?
There are benefits. Implementing it improves network security posture. If you have a CICD pipeline, it's easy to integrate and manage automatically.
What's my experience with pricing, setup cost, and licensing?
I don't know the prices. It's a case-by-case thing.
Compared to Advanced WAF, it is cheaper.
What other advice do I have?
There are scenarios where it's very good to use and implement. I would recommend it for securing specific applications with specific requirements. It's not for everyone, but many customers find it improves security.
Overall, I would rate it an eight out of ten.
Has less complexities and is very user-friendly
What is most valuable?
Mail Proxy Server and SMTP are quite effective features in the product. The tool's API connectivity across the hybrid network is pretty impressive, which is almost the same as the threat intelligence capabilities of NGINX.
What needs improvement?
The product's price is high, making it an area of concern where improvements are required. The tool's licensing model is also not good.
The product should have more documentation, especially like the ones provided by other OEMs.
For how long have I used the solution?
I have been using NGINX App Protect for five years. I use NGINX App Protect WAF Release 5.0. My company has a partnership with F5.
What do I think about the scalability of the solution?
My company is currently dealing with one enterprise-sized company and one financial organization.
How was the initial setup?
The product's initial setup phase was a bit difficult since the articles and other documentation were not that good.
When it comes to the implementation part, at least seven days are needed for the testing phase since there may be some struggles in several places, and one may have to go directly to the OEM just to make sure that we can study the tool properly.
What's my experience with pricing, setup cost, and licensing?
The product's price is high.
Which other solutions did I evaluate?
If NGINX App Protect does not fit the budget of our customers, then my company recommends Radware to such clients. Radware's OEM engagement is better than that of NGINX App Protect.
I don't have any problem with NGINX App Protect's OEM engagement. When I directly engage with the tool's OEM, I see that they are really helpful. When it comes to OEM, F5 has an amazing feature set and is pretty technical. Technicians from F5 can help any time with any request of a client associated with the tool, and they also help to help clients so our company's deals with them can mature further.
What other advice do I have?
The product is good since NGINX is involved in a lot of research and development work. Two years ago, my company used the firewall from NGINX. In the previous year, my company entered into a deal with Radware.
Whether I would recommend the product to others depends on their requirements and the type of business they are doing, among other factors.
Speaking about how the tool has been able to handle new and emerging security threats, I would say that my company is testing the product to see if it fits our requirements. My company is testing some threats.
My company has not tested the product with any of the tool's AI-driven security initiatives, but we may do so later since we are only working on one deal associated with Radware.
The tool is not complex and is very user-friendly.
I rate the tool a ten out of ten.
Useful for customer platforms and portal environments like e-commerce
What is our primary use case?
We use the tool for customer platforms and portal environments like e-commerce.
What is most valuable?
The tool's most valuable feature is the OWASP certification. Additionally, the tool's ability to enforce strong passwords and OTP within minutes is impressive. With its analytics and recommendations, it is a very good solution.
What needs improvement?
The solution needs to be improved in the e-commerce portal.Â
How was the initial setup?
The tool's deployment is easy but can be challenging if security policies are applied together.Â
What was our ROI?
I have invested about 40,000 dollars. I expect a return of 30,000 dollars in eight months. It helps to save time.Â
What's my experience with pricing, setup cost, and licensing?
NGINX App Protect is expensive.Â
What other advice do I have?
I rate the overall solution a nine out of ten. We plan to integrate the tool with some applications in two months.Â