From d4ce129e0db167b4cc24ea3938755c889c1a0fa2 Mon Sep 17 00:00:00 2001 From: Daniel Edgar Date: Mon, 24 Nov 2025 10:15:17 -0500 Subject: [PATCH 1/2] fix: script issues and headline level issues --- .../deployment-guide/learn-about-deployment.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/content/nap-dos/deployment-guide/learn-about-deployment.md b/content/nap-dos/deployment-guide/learn-about-deployment.md index 0eb63b1dd..ba29fdb7d 100644 --- a/content/nap-dos/deployment-guide/learn-about-deployment.md +++ b/content/nap-dos/deployment-guide/learn-about-deployment.md @@ -1378,7 +1378,7 @@ You need root permissions to execute the following steps. # prepare environment mkdir -p /var/run/adm /tmp/cores ${LOGDIR} - chmod55 /var/run/adm /tmp/cores ${LOGDIR} + chmod 755 /var/run/adm /tmp/cores ${LOGDIR} chown ${USER}:${USER} /var/run/adm /tmp/cores ${LOGDIR} # run processes @@ -1867,7 +1867,8 @@ Make sure to replace upstream and proxy pass directives in this example with rel chown ${USER}:${USER} /var/run/adm /tmp/cores ${LOGDIR} # run processes - /bin/su -s /bin/bash -c "/usr/bin/adminstall > ${LOGDIR}/adminstall.log 2>&1" ${USER}/bin/su -s /bin/bash -c '/opt/app_protect/bin/bd_agent &' ${USER} + /bin/su -s /bin/bash -c "/usr/bin/adminstall > ${LOGDIR}/adminstall.log 2>&1" ${USER} + /bin/su -s /bin/bash -c '/opt/app_protect/bin/bd_agent &' ${USER} /bin/su -s /bin/bash -c "/usr/share/ts/bin/bd-socket-plugin tmm_count 4 proc_cpuinfo_cpu_mhz 2000000 total_xml_memory 307200000 total_umu_max_size 3129344 sys_max_account_id 1024 no_static_config 2>&1 > /var/log/app_protect/bd-socket-plugin.log &" ${USER} /bin/su -s /bin/bash -c "/usr/bin/admd -d --log info > ${LOGDIR}/admd.log 2>&1 &" ${USER} /usr/sbin/nginx -g 'daemon off;' @@ -2237,9 +2238,9 @@ Review the syslog ports by entering the following command: semanage port -l | grep syslog ``` -### Kubernetes Deployment Examples +## Kubernetes Deployment Examples -#### App Protect DoS +### App Protect DoS `appprotect-dos.yaml`: @@ -2466,7 +2467,7 @@ http { } ``` -#### App Protect DoS arb +### App Protect DoS arb Arbitrator (arb) is an internal service that is essential for the scaling scenarios. The arbitrator service should be deployed in the same namespace as F5 DoS for NGINX. From 24999544d82a8a8787c6666c71d6edd4dc1a3a0a Mon Sep 17 00:00:00 2001 From: Daniel Edgar Date: Mon, 24 Nov 2025 10:57:11 -0500 Subject: [PATCH 2/2] fix: moving probe directives to http context as that is the only valid location --- content/nap-dos/deployment-guide/learn-about-deployment.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/content/nap-dos/deployment-guide/learn-about-deployment.md b/content/nap-dos/deployment-guide/learn-about-deployment.md index ba29fdb7d..dbb4c0c04 100644 --- a/content/nap-dos/deployment-guide/learn-about-deployment.md +++ b/content/nap-dos/deployment-guide/learn-about-deployment.md @@ -2426,6 +2426,9 @@ http { app_protect_dos_security_log "/etc/app_protect_dos/log-default.json" /var/log/adm/logger.log; # app_protect_dos_security_log "/etc/app_protect_dos/log-default.json" syslog:server=1.2.3.4:5261; + app_protect_dos_liveness on; # uri:/app_protect_dos_liveness port:8090 + app_protect_dos_readiness on; # uri:/app_protect_dos_readiness port:8090 + server { listen 80 reuseport; server_name serv; @@ -2448,9 +2451,6 @@ http { listen 8090; server_name probe; - app_protect_dos_liveness on; # uri:/app_protect_dos_liveness port:8090 - app_protect_dos_readiness on; # uri:/app_protect_dos_readiness port:8090 - location / { proxy_pass http://localhost:8091; }