Protecting your traditional HTTP and modern HTTP/2 web applications like gRPC and WebSocket is easy using NGINX App Protect DoS, a lightweight, modern application and API, software security solution that seamlessly integrates security policies into DevOps environments to enable security as code as a Layer 7 DoS defense. NGINX App Protect DoS establishes a baseline for normal traffic patterns using machine learning based algorithms and analysis of client behavior and application/API health, to significantly reduce operational costs and false positives. NGINX App Protect DoS runs on all platforms, architectures, and AWS hybrid environments delivering consistent protection. NGINX Plus is cloud-native, and can be used as a reverse proxy, load balancer and API gateway. NGINX Plus provides scalable and reliable high availability, DNS system discovery, and session persistence, along with monitoring to support debugging and diagnosing complex application architectures.
Simplify your stack and deliver consistent high-performance apps and APIs reliably, securely and at scale with NGINX Plus and NGINX App Protect DoS, the all in one, lightweight, load balancer, reverse proxy, and API gateway with Layer 7 DoS protection. Get your free 30-day trial today!
NGINX Plus can operate as a standalone solution or can be integrated with AWS services - such as existing load balancing solutions, Auto Scaling groups, and AWS Lambda - to reduce your application delivery and management costs. NGINX Plus provides enterprise-grade features such as session persistence configuration via API, and active health checks so that you can add advanced application load balancing, monitoring, and management to your AWS application stack.
Protecting your web applications is easy using NGINX App Protect DoS, a lightweight, modern application and API software security solution that seamlessly integrates security policies into DevOps environments to enable security as code as a Layer 7 Denial of Service (DoS) defense. NGINX App Protect DoS runs on all platforms, architectures, and AWS hybrid environments while delivering consistent performance and protection across your entire infrastructure. It can be deployed in a variety of locations to protect your cloud-native apps which include at the Edge as a load balancer, reverse proxy, or embedded on the API gateway to reduce complexity, TCO, manual oversight and tool sprawl. It can provide detailed observability and insights via security log integration with external SIEM tools. NGINX App Protect DoS enables scalable DoS/DDoS protection for web applications, microservices, cloud-native apps, and APIs that run natively on NGINX Plus to deliver strong security, high-performance and low latency across your AWS hybrid environments.
NGINX App Protect Denial of Service (DoS) is a dynamic software security module that uses eBPF with XDP technology to accelerate mitigation of app and API DoS/DDoS attacks at Layer 7. NGINX App Protect DoS is easy to implement, requiring minimal setup and configuration to get started, and can also be used as a stand-alone security solution and operate without the installation of NGINX App Protect WAF. Designed to defend traditional HTTP/HTTPS and modern HTTP/2 applications, like gRPC and WebSocket, against even the most sophisticated DoS/DDoS attacks that include GET and POST flood attacks, Slowloris, Slow read, Slow POST, NAT evasion attacks and targeted SSL/TLS attacks.
NGINX App Protect DoS establishes a baseline for normal traffic patterns using machine learning based algorithms and analysis of over 300 metrics related to client behavior and application/API health, to significantly reduce false positives. It constructs and deploys dynamic signatures to mitigate attacks automatically, then continuously measures mitigation effectiveness and adapts to changing behavior or health conditions. Attack details are shared among multiple NGINX Plus instances to help mitigate potential future attacks even if only one instance was attacked. NGINX App Protect DoS adaptive learning allows for no-touch policy configuration and delivers consistent DoS/DDoS protection to ensure zero-day protection. NGINX App Protect DoS provides a configurable, robust, multi-layered defense to deliver the best strategy to mitigate attacks per individual application. This includes blocking IP addresses of bad actors, blocking bad requests with attack signatures, and applying global rate limiting as needed.
NGINX App Protect DoS security solution helps SecOps and DevOps teams work together in migrating towards a shift left or DevSecOps strategy by facilitating security as code for consistent app security automation. This lightweight software package provides a continuous feedback loop for threat mitigation effectiveness, enabling developer agility and empowering organizations to bring applications to market at speed without compromising on security.
Highlights
NGINX App Protect DoS establishes a baseline for normal traffic patterns using machine learning based algorithms and analysis of over 300 metrics related to client behavior and application/API health, to greatly reduce operational costs and false positives. It constructs and deploys dynamic signatures to mitigate attacks automatically. NGINX App Protect DoS adaptive learning allows for no-touch policy configuration and delivers consistent DoS protection to ensure zero-day protection
NGINX Plus for Application Delivery: Is a reliable, lightweight, and high-performance load balancer and reverse proxy that can be managed at scale.
NGINX Plus as an API gateway: Can route requests, authenticate API calls, apply rate limits, and deliver APIs in real-time. NGINX App Protect DoS can be embedded on the API gateway as a streamlined technology solution, reducing latency while delivering high performance in protecting your APIs from Layer 7 DoS attacks.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
NGINX Plus with NGINX App Protect DoS Premium - Amazon Linux 2023
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for this software, billed per running EC2 instance. The many dimensions listed are not feature tiers. Each one maps to a specific EC2 instance type, from small general-purpose sizes to large compute-, memory-, and accelerator-focused instances. Your hourly software rate depends on which instance type you launch. Larger or more capable instance types generally carry a higher hourly rate. AWS charges the underlying EC2 infrastructure separately. You add capacity by launching more instances, and you stop paying when you stop them. The same software runs on every instance type you choose.
Top-of-mind questions for buyers
What do I get when I launch one of these hourly instances?
You get an Amazon Machine Image running NGINX Plus bundled with the DoS protection module on Amazon Linux 2023. The image adds a lightweight web application firewall and layer 7 denial-of-service defense. You also get support from the vendor's engineering team after activating it with your AWS account number.
Am I charged the hourly software rate when an instance is stopped?
The software rate meters running instance-hours only. When you stop an instance, the hourly software charge stops too. AWS may still bill you separately for attached storage on a stopped instance, but the software license itself charges for running time. You add capacity by launching more instances.
Does the hourly rate change if I move the software to a different instance type?
Yes. Each dimension maps to a specific EC2 instance type, and the hourly software rate is tied to that type. If you relaunch on a different instance type, the rate for that type applies. The same software runs on every supported instance type.
docs.nginx.com
Helpful?
Vendor refund policy
We do not offer refunds for hourly usage fees after free trial has expired
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
When a new AMI is deployed for the first time, the latest version of NGINX Plus, NGINX App Protect WAF and NGINX App Protect DOS will be installed, auto-configured and started. NGINX Plus status can then be checked by running: service nginx status, and the NGINX Plus default index page will be accessible on public EC2 instance address. Please use SSH to access your instance for management purposes with the following usernames, for Ubuntu: "ubuntu", Amazon Linux/RHEL: "ec2-user", Debian: "admin". NGINX Plus configuration can be found in /etc/nginx and the documentation is available on the instance locally (as a PDF), and at https://docs.nginx.com/nginx/. NGINX App Protect WAF documentation is available at https://docs.nginx.com/nginx-app-protect-waf/. NGINX App Protect DOS documentation is available at https://docs.nginx.com/nginx-app-protect-dos.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
NGINX Plus combines the speed and performance of NGINX with the trust and security behind the power of F5. Protecting your web applications is easy using NGINX App Protect, a lightweight, modern application and API, software security solution that seamlessly integrates security policies into DevOps environments to enable security as code as either a robust Web Application Firewall (WAF), and/or as Layer 7 DoS defense. NGINX App Protect security solutions run natively on NGINX Plus to support all platforms, architectures and AWS hybrid environments while delivering consistent performance and protection across your entire infrastructure. NGINX Plus is cloud-native, and can be used as a reverse proxy, load balancer and API gateway. NGINX Plus provides scalability and high availability, DNS system discovery, and session persistence, along with monitoring to support debugging and diagnosing complex application architectures. Included in this subscription is NGINX's award-winning support.
NGINX Plus provides enterprise features such as advanced application load balancing, SSL termination, and monitoring. Trusted by the largest sites in the world and integrated with AWS services, NGINX Plus delivers your applications with more control and less complexity in AWS regions worldwide.
NGINX Plus provides enterprise features such as advanced application load balancing, SSL termination, and monitoring. Trusted by the largest sites in the world and integrated with AWS services, NGINX Plus delivers your applications with more control and less complexity in AWS regions worldwide.
NGINX Plus provides enterprise features such as advanced application load balancing, SSL termination, and monitoring. Trusted by the largest sites in the world and integrated with AWS services, NGINX Plus delivers your applications with more control and less complexity in AWS regions worldwide.
NGINX Plus provides enterprise features such as advanced application load balancing, SSL termination, and monitoring. Trusted by the largest sites in the world and integrated with AWS services, NGINX Plus delivers your applications with more control and less complexity in AWS regions worldwide.
NGINX Plus provides enterprise features such as advanced application load balancing, SSL termination, and monitoring. Trusted by the largest sites in the world and integrated with AWS services, NGINX Plus delivers your applications with more control and less complexity in AWS regions worldwide.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.