Merge branch 'main' into ngf/usp-keepalive-default

Author: y82

.style-guide

@@ -9,6 +9,7 @@ f5-files:
 
 | NGINX Instance Manager chart | Chart                      | Instance Manager |
 |------------------------------|----------------------------|------------------|
+| 2.2.2                        | nginx-stable/nim           | 2.22.2           |
 | 2.2.1                        | nginx-stable/nim           | 2.22.1           |
 | 2.2.0                        | nginx-stable/nim           | 2.22.0           |
 | 2.1.1                        | nginx-stable/nim           | 2.21.1           |

content/includes/nim/kubernetes/nms-chart-supported-module-versions.md

@@ -12,7 +12,7 @@ NGINX Instance Manager supports the following versions of [F5 WAF for NGINX](htt
 
 | NGINX Instance Manager | F5 WAF for NGINX                                |
 | ---------------------- | ----------------------------------------------- |
-| 2.21.0-2.22.1          | Release 4.8.0–4.16.0, 5.1.0–5.13.3              |
+| 2.21.0-2.22.2          | Release 4.8.0–4.16.0, 5.1.0–5.13.4              |
 | 2.17.0–2.20.1          | Release 4.8.0–4.16.0, 5.1.0–5.8.0               |
 | 2.15.1–2.16.0          | Release 4.8.0–4.10.0                            |
 | 2.14.1–2.15.0          | Release 4.4.0–4.7.0                             |

content/includes/nim/tech-specs/nim-app-protect-support.md

@@ -12,7 +12,7 @@ NGINX Instance Manager supports the following NGINX Open Source and NGINX Plus v
 
 | NGINX Instance Manager | NGINX OSS   | NGINX Plus |
 | ---------------------- | ----------- | ---------- |
-| 2.18.0 and later       | 1.18–1.31.2 | R31–R37    |
+| 2.18.0 and later       | 1.18–1.31.3 | R31–R37    |
 | 2.16.0–2.17.x          | 1.18–1.25.1 | R31–R32    |
 | 2.7.0–2.15.x           | 1.18–1.25.1 | R21–R30    |
 | 2.0.0–2.6.0            | 1.18–1.21.6 | R21–R27    |

content/includes/nim/tech-specs/supported-nginx-versions.md

@@ -22,7 +22,7 @@ f5-files:
 | [Filetypes]({{< ref "/waf/policies/filetypes.md" >}}) | The filetype feature allows you to selectively allow filetypes. |
 | [Geolocation]({{< ref "/waf/policies/geolocation.md" >}}) | The geolocation feature allows you to configure enforcement based on the location of an object using the two-letter ISO code representing a country. | 
 | [GraphQL protection]({{< ref "/waf/policies/graphql-protection.md" >}}) | GraphQL protection allows you to configure enforcement for GraphQL, an API query language. | 
-| [gRPC protection]({{< ref "/waf/policies/evasion-techniques.md" >}}) | gRPC protection detects malformed content, parses well-formed content, and extracts the text fields for detecting attack signatures and disallowed meta-characters. In addition, it enforces size restrictions and prohibition of unknown fields. The Interface Definition Language (IDL) files for the gRPC API must be attached to the profile. gRPC protection is available for unary or bidirectional traffic. |
+| [gRPC protection]({{< ref "/waf/policies/grpc-protection.md" >}}) | gRPC protection detects malformed content, parses well-formed content, and extracts the text fields for detecting attack signatures and disallowed meta-characters. In addition, it enforces size restrictions and prohibition of unknown fields. The Interface Definition Language (IDL) files for the gRPC API must be attached to the profile. gRPC protection is available for unary or bidirectional traffic. |
 | [HTTP compliance]({{< ref "/waf/policies/http-compliance.md" >}}) | All HTTP protocol compliance checks are enabled by default except for GET with body and POST without body. It is possible to enable any of these two. Some of the checks enabled by default can be disabled, but others, such as bad HTTP version and null in request are performed by the NGINX parser and F5 WAF for NGINX only reports them. These checks cannot be disabled. |
 | [IP address lists]({{< ref "/waf/policies/ip-address-lists.md" >}}) | Organize lists of allowed and forbidden IP addresses across several lists with common attributes. |
 | [IP intelligence]({{< ref "/waf/policies/ip-intelligence.md" >}}) | Configure the IP Intelligence feature to customize enforcement based on the source IP of the request, limiting access from IP addresses with questionable reputation. |

content/includes/waf/table-policy-features.md

@@ -7,6 +7,7 @@ f5-files:
 
 | F5 WAF for NGINX version  | WAF compiler version       |
 |---------------------------|----------------------------|
+| 5.13.4                    | nms-nap-compiler-v5.635.4  |
 | 5.13.3                    | nms-nap-compiler-v5.635.3  |
 | 5.13.2                    | nms-nap-compiler-v5.635.2  |
 | 5.13.1                    | nms-nap-compiler-v5.635.1  |

content/includes/waf/waf-nim-compiler-support.md

@@ -19,7 +19,9 @@ Dynamic modules are shared object files (`.so`) that can be loaded at runtime us
 
 ### NGINX-authored and NGINX-certified dynamic modules
 
-NGINX maintains the official NGINX Plus repository, which also provides packaged binaries for both [NGINX‑authored]({{< ref "/nginx/admin-guide/installing-nginx/installing-nginx-plus.md#nginx-authored-dynamic-modules" >}}) and [NGINX‑certified community]({{< ref "/nginx/admin-guide/installing-nginx/installing-nginx-plus.md#nginx-certified-community-dynamic-modules" >}}) dynamic modules. All modules in this repository are fully tested to ensure full compatibility with NGINX Plus.
+NGINX maintains the official NGINX Plus repository, which also provides packaged binaries for both [NGINX‑authored]({{< ref "/nginx/admin-guide/installing-nginx/installing-nginx-plus.md#nginx-authored-dynamic-modules" >}}) and [NGINX‑certified community]({{< ref "/nginx/admin-guide/installing-nginx/installing-nginx-plus.md#nginx-certified-community-dynamic-modules" >}}) dynamic modules. 
+
+For detailed support information, please refer to the [guide]({{< ref "/nginx/admin-guide/installing-nginx/installing-nginx-plus.md/#install_modules" >}}).
 
 For module‑specific installation and usage instructions, select the corresponding package name in the table.
 
@@ -53,7 +55,9 @@ For module‑specific installation and usage instructions, select the correspond
 Besides the modules provided in the official repository, a wide range of third-party modules is available through community-driven projects such as [Awesome NGINX GitHub project](https://github.com/agile6v/awesome-nginx#third-party-modules). Many of these modules can be [compiled as dynamic modules]({{< ref "/nginx/admin-guide/installing-nginx/installing-nginx-plus.md#install_modules_oss" >}}) and used with your NGINX Plus or NGINX Open Source deployments.
 
 ### NGINX Certified Partner dynamic modules
- In addition to the modules authored by NGINX and community third‑party developers, NGINX Certified Partner Modules are available for purchase from commercial third parties. Certified Modules are distributed and supported by their authors. NGINX has tested the modules extensively and [certifies](https://www.f5.com/go/partner/nginx-certified-module-program-documentation) that they do not interfere with standard NGINX Plus functionality.
+ In addition to the modules authored by NGINX and community third‑party developers, NGINX Certified Partner Modules are available for purchase from commercial third parties. Certified Modules are distributed and supported by their authors. 
+
+For detailed support information, please refer to the [guide]({{< ref "/nginx/admin-guide/installing-nginx/installing-nginx-plus.md/#install_modules" >}}).
 
 NGINX Certified Partner modules can be found on the [F5 Dynamic Modules page](https://www.f5.com/go/product/nginx-modules?filter=module-author%3Anginx-certified-partner).
 

content/nginx/admin-guide/dynamic-modules/dynamic-modules.md

@@ -568,7 +568,7 @@ NGINX-authored dynamic modules are developed and officially maintained by the F5
 
 ### NGINX-certified community dynamic modules
 
-NGINX-certified community dynamic modules are popular third‑party modules tested and distributed by F5 NGINX, with installation and basic configuration support provided. They are also distributed as precompiled packages for various operating systems and can be installed [from the `nginx-plus` repository](#install-from-official-repository).
+NGINX-certified community dynamic modules are popular third‑party modules distributed by F5 NGINX, with installation and basic configuration support provided. They are also distributed as precompiled packages for various operating systems and can be installed [from the `nginx-plus` repository](#install-from-official-repository).
 
 {{< table >}}
 

content/nginx/admin-guide/installing-nginx/installing-nginx-plus.md

@@ -98,6 +98,7 @@ In order to collect data from virtual servers, upstream server groups, or cache
         # ...
         }
     ```
+{{< call-out class="note" title="Important" >}} Make sure the shared memory zone has sufficient capacity. When [new metrics are added to the API](#yaml-version), you may need to review and increase the sizes of existing shared memory zones. {{< /call-out >}}
 
 - When finished, save and exit configuration file.
 - Test the configuration and reload NGINX Plus:

content/nginx/admin-guide/monitoring/live-activity-monitoring.md

@@ -72,7 +72,8 @@ NGINX Plus PLS.37.0.0.1 LTS is the first LTS release.
 - [NGINX control REST API]({{< ref "/nginx/admin-guide/basic-functionality/runtime-control.md#control-api" >}}) that provides an HTTP interface for controlling an NGINX Plus instance in addition to signal-based control.
 - JSON-formatted error logs: the [`json`](https://nginx.org/en/docs/ngx_core_module.html#error_log_json) parameter of the [`error_log`](https://nginx.org/en/docs/ngx_core_module.html#error_log) directive.
 - Customer error log variables: the [`error_log_tag`](https://nginx.org/en/docs/http/ngx_http_core_module.html#error_log_tag) directive.
-- Enhanced upstream latency metrics with latency histograms: the `response_time_hist` data for each [HTTP upstream](https://nginx.org/en/docs/http/ngx_http_api_module.html#def_nginx_http_upstream).
+- Enhanced upstream latency metrics with latency histograms: the `response_time_hist` data for each [HTTP upstream](https://nginx.org/en/docs/http/ngx_http_api_module.html#def_nginx_http_upstream). 
+{{< call-out class="note" title="Important" >}} This change adds about 1k of shared memory for each upstream server. If your [upstream shared memory zones](https://nginx.org/en/docs/http/ngx_http_upstream_module.html#zone) are near capacity, increase their sizes by roughly 1k per upstream server, and round up to keep some extra space. {{< /call-out >}}
 - Basic authentication for [HTTP CONNECT forward proxy](https://nginx.org/en/docs/http/ngx_http_tunnel_module.html).
 - Encrypted Client Hello (ECH) support: the [`ssl_ech_file`](https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ech_file) directive.
 - Multipath TCP support: the [`multipath`](https://nginx.org/en/docs/http/ngx_http_core_module.html#multipath) parameter of the [`listen`](https://nginx.org/en/docs/http/ngx_http_core_module.html#listen) directive.