F5 NGINX

NGINX Open Source vs NGINX One: differences in features

Built for enterprise, NGINX One extends the power of Open Source with advanced features.
See how they compare.


 

Contact F5 to learn more.

Thank you.

A representative from F5 Sales will be in touch shortly using the contact information provided.

NGINX One is an all-in-one enterprise solution that unifies every NGINX component into a single package tailored for modern application delivery. Built on the trusted foundation of NGINX Open Source, NGINX One adds advanced capabilities across management, data, and control planes.

The comparison chart below reflect the full power of NGINX One, incorporating functionality from all components of a unified platform designed to drive scalability, security, and operational efficiency. Those components are NGINX Plus, NGINX Ingress Controller, NGINX Gateway Fabric, NGINX Instance Manager, NGINX One Console, and NGINX App Protect. 

Discover how NGINX One can help your enterprise.

Feature comparison: NGINX Open Source vs NGINX One

Capability Description Additional Capabilities in One Included in NGINX OSS OSS Feature Completeness (%) Key Differences
Commercial Support & Professional Services
Enterprise Support Provides expert assistance to keep your infrastructure stable and performant, minimizing downtime and accelerating issue resolution. X   0% NGINX One includes dedicated enterprise-grade support with SLAs. OSS depends on community support without guaranteed response times. Support is available for OSS through an NGINX One license.
Professional Services Delivers tailored solutions and optimizations that align with your unique business needs, reducing deployment risks and boosting ROI. X   0% NGINX One offers the expertise of the NGINX professional services team for architecture advice, migration planning, and custom implementations, as part of its enhanced offerings. These services are not available with NGINX OSS but can be applied to OSS via licensing of NGINX One.
High Availability (HA)
Active-active Enhances service reliability and performance by distributing traffic across nodes, enabling seamless failover without disruption. X X 60% NGINX One provides HA packages built, is supported by F5, and supports cluster sync to share your NGINX config across your entire environment. NGINX OSS requires installing the community Keepalive.d package, is not supported by F5, and does not provide an automated way to sync your NGINX config in your cluster.
Active-passive Ensures continuous availability by automatically switching to backup systems, minimizing downtime during failures. X   0% NGINX One provides native active-passive clustering with automated failover. OSS requires manual scripting for failover functionality.
Configuration synchronization across cluster Reduces errors and operational overhead by automatically keeping settings consistent across all nodes in a cluster. X   0% NGINX One automates configuration synchronization across cluster nodes. OSS requires manual synchronization.
State sharing: sticky-learn session persistence, rate limiting, key-value stores Maintains seamless user experiences and consistent application behavior across distributed environments. X   0% NGINX One natively supports session persistence, distributed rate limiting, and synchronized key-value stores. NGINX OSS does not support state-sharing capabilities.
Load Balancer
HTTP and TCP/UDP support Supports diverse applications by handling both web and non-web traffic, offering flexibility to meet varied business needs. X X 100% Fully supported in both NGINX One and OSS, with no notable differences.
Layer 7 request routing Improves resource utilization and user satisfaction by intelligently routing requests based on detailed application data. X X 100% Fully supported in both NGINX One and OSS, with no notable differences.
Session persistence Keeps users connected to the same backend, ensuring smooth and reliable application sessions. X X 25% NGINX One supports session persistence with advanced configuration options. OSS provides sticky session functionality through ip or ip_hash.
Active health checks Proactively detects issues to prevent failed servers from impacting user experience, enhancing overall uptime. X   0% NGINX One provides built-in active health checks, while OSS requires additional scripting or third-party tools. Active health checks proactively monitor upstream servers by sending periodic requests, ensuring that only healthy servers handle client traffic to improve reliability and reduce downtime.
Passive health checks Identifies unavailable upstreams without additional network load, helping maintain application availability. X X 100% Fully supported in both NGINX One and OSS, with no notable differences.
DNS service-discovery integration Automatically adapts to changes in backend services, simplifying scaling and reducing manual intervention. X X 100% Fully supported in both NGINX One and OSS, with no notable differences.
IP v4 and IP v6 support Supports both IP versions X X 100% Fully supported in both NGINX One and OSS, with no notable differences.
Content Cache
Static and dynamic content caching Accelerates content delivery and reduces backend load, improving user experience while lowering infrastructure costs. X X 90% NGINX One offers features like cluster support and enhanced cache performance monitoring and cache purge API; otherwise, there are no notable differences.
Cache-purging API Enables timely updates by allowing automated removal of outdated content from caches, ensuring users see fresh data. X   0% NGINX One includes an integrated, cache-purging API. OSS requires indirect methods to implement cache purging.
MQTT protocol support for IoT devices Facilitates efficient, low-latency communication for IoT devices, enabling responsive and reliable connected solutions. X   0% NGINX One supports MQTT natively, while OSS lacks a built-in MQTT parser, requiring custom setups.
Web Server and Reverse Proxy
Origin server for static content Offloads backend systems by serving static assets efficiently, speeding up page loads and reducing server costs. X X 100% Fully supported in both NGINX One and OSS natively, with no notable differences.
Reverse proxy: HTTP, FastCGI, memcached, SCGI, uwsgi Simplifies application architecture and improves performance by intelligently routing and caching traffic. X X 90% Fully supported in both NGINX One and OSS, with configuration enhancements in NGINX One for enterprise-scale deployments. These enhancements include cluster support and cache purge via API support.
HTTP/2 gateway Enhances web performance with faster page loads and reduced latency for better user engagement. X X 100% Available in both NGINX One and OSS, with no notable differences.
gRPC proxy Supports scalable, low-latency microservices communication, driving modern, efficient application architectures. X X 100% Fully available in both NGINX One and OSS, with managed API adjustments and enhanced feature integration in NGINX One.
HTTP/3 over QUIC Delivers faster, more reliable connections over variable networks, improving user experience on mobile and remote clients. X X 100% Fully available in both NGINX One and OSS, with no notable differences.
Security Controls
HTTP authentication Protects sensitive resources with access controls, reducing risk of unauthorized use. X X 60% NGINX One supports integration with identity providers (e.g., LDAP, OpenID Connect, OAuth), while OSS supports authentication using auth_basic and static credential files.
HTTP authentication subrequests Enables flexible, integrated authentication workflows that adapt to enterprise identity systems. X X 60% NGINX One includes features like response caching, enhanced observability, real-time user-based traffic metrics, and integration with enterprise authentication systems. OSS supports subrequests via the auth_request module.
IP address-based access control lists Adds an effective network-level security layer by restricting access to trusted sources. X X 80% NGINX One offers dynamic IP ACLs with real-time updates via a REST API. OSS supports static configurations using allow and deny directives.
Rate limiting Shields applications from traffic spikes and abuse, maintaining performance and availability under load. X X 90% NGINX One enables synchronization of rate limiting across your entire NGINX cluster and provides an API to query the current rate limiting configurations. Otherwise, there are no notable differences.
Dual-stack RSA/ECC SSL/TLS offload Boosts server efficiency while securing communications with modern encryption standards. X X 100% Available in both NGINX One and OSS, with no notable differences.
TLS/SSL support Ensures data privacy and compliance by encrypting communications end-to-end. X X 60% NGINX One includes TLS/SSL features like dynamic certificate loading, OCSP stapling, and improved performance for high-traffic scenarios. OSS supports TLS/SSL through standard configurations.
JWT authentication Streamlines API security with lightweight, stateless identity verification. X   0% NGINX One has this feature natively available, while OSS relies on custom scripts (e.g., njs or LUA) for comparable functionality.
JWT authorization Supports JWT claims-based authorization for incoming requests X   0% NGINX One has this feature natively available, while OSS relies on custom scripts (e.g., njs or LUA) for comparable functionality.
OpenID Connect single sign-on (SSO) Simplifies user access across multiple applications, improving security and user productivity. X X 25% NGINX One natively supports OpenID Connect with pre-built integrations, while OSS requires additional components for OpenID Connect support.
Internal redirect Increases efficiency by routing requests within the server, reducing network overhead. X X 100% Fully supported in both NGINX One and OSS. However, NGINX One supports advanced internal redirect capabilities with API driven configuration and advanced variables for conditional routing. NGINX OSS can support this using rewrite modules and try_files; however, its capabilities are more suited to static rules and basic error handling.
NGINX as a SAML Service Provider Enables secure, scalable single sign-on for enterprise users, improving compliance and user convenience. X   0% NGINX One offers a robust SAML solution with SP-initiated and IdP initiated SSO, HTTP POST/redirect bindings, and SLO support. OSS does not include SAML support natively.
Monitoring
Export to external monitoring tools Provides comprehensive observability by integrating with your existing monitoring ecosystem. X X 100% Fully supported in both NGINX One and OSS, with no notable differences.
Built-in dashboard Offers immediate visibility into system health, empowering faster troubleshooting and optimization. X   0% NGINX One includes an integrated dashboard. OSS requires external solutions.
Extended status with 200+ additional metrics Enables deep performance insights to fine-tune operations and prevent issues before they affect users. X   0% NGINX One includes enterprise-scale monitoring features. OSS does not offer similar built-in tools, only offers six metrics. Those six metrics are: active connections, accepts, handled, requests, reading, writing, and waiting.
Native support for Open Telemetry Tracing Facilitates end-to-end visibility in complex microservices environments, improving debugging and performance. X X 100% Available in both NGINX One and OSS, with no notable differences.
Programmability
NGINX JavaScript module Unlocks advanced customization, enabling unique traffic management and application logic. X X 100% Available in both NGINX One and OSS with support for both NGINX One and OSS directives.
NGINX Plus API for dynamic upstream reconfiguration Allows seamless backend adjustments without downtime, speeding up deployment cycles. X   0% NGINX One includes this API for real-time upstream configuration changes. OSS does not include this feature.
Key-value store Provides fast, flexible in-memory data storage for dynamic routing and stateful applications. X   0% NGINX One provides an in-memory key-value store with cluster-wide synchronization and REST API support. OSS does not support key-value stores natively.
Streaming Media
Live streaming: RTMP, HLS, DASH Ensures smooth, scalable delivery of live video to global audiences, enhancing viewer engagement. X X 90% NGINX One provides integrated HLS/DASH with enhanced performance, detailed observability, and enterprise support. OSS supports RTMP through third-party modules.
VOD: Flash (FLV), MP4 Optimizes on-demand video playback quality and reliability, improving user satisfaction. X X 90% NGINX One offers advanced MP4 rate limiting features when compared to NGINX OSS.
Adaptive bitrate VOD: HLS, HDS Automatically adjusts video quality to network conditions, ensuring uninterrupted viewing. X X 50% NGINX One simplifies adaptive bitrate streaming and offers better performance for high-scale environments. OSS requires plugins or manual configuration.
MP4 bandwidth controls Balances quality and resource usage, delivering consistent video experiences while managing costs. X   0% NGINX One includes advanced bandwidth controls for MP4, ensuring more granular traffic management, while NGINX OSS supports MP4 streaming without built-in bandwidth control features.
Third-party ecosystem
Dynamic modules repository Extends platform capabilities with third-party plugins, accelerating innovation and customization. X X 25% NGINX One provides access to an official repository with a wide range of pre-packaged and tested dynamic modules for various use cases. NGINX OSS offers a smaller selection of these modules in its official repository. Additional modules for NGINX OSS are available in their respective open-source repositories but may require manual building and integration.
Commercial support Provides rapid expert help to minimize risks and maximize uptime and performance. X X 25% NGINX One includes 24/7 commercial support from NGINX experts, while OSS relies on community support and DIY troubleshooting.
Kubernetes
Ingress controller Simplifies Kubernetes traffic management, speeding up deployment and scaling. X X 25% NGINX One provides an enterprise-grade ingress controller including features like high availability, advanced monitoring, programmability, and zero-downtime reloads. OSS includes standard ingress.
Gateway API Enables flexible, advanced routing for microservices, improving reliability and agility. X X 75% NGINX Gateway Fabric, as part of NGINX One, includes enterprise-grade Gateway API features. OSS includes standard Gateway API functionality.
Observability Delivers essential monitoring and debugging tools tailored for containerized environments. X X 25% NGINX One provides additional metrics for Kubernetes observability. OSS supports a subset of these metrics.
Governance & Management
SaaS Console Centralizes management for easier scaling, monitoring, and administration across environments. X   0% The NGINX One SaaS console manages both NGINX One and OSS instances. NGINX One includes additional metrics and visualizations. It requires a valid NGINX subscription license.
On-premise Management Option Supports compliance and security requirements for air-gapped environments by enabling private, controlled deployments. X   0% NGINX Instance Manager provides on-premise control and monitoring of both enterprise and OSS instances in air-gapped environments. NGINX One includes additional metrics and visualizations. It requires a valid NGINX One subscription license.
Fleet Management Automates updates and configuration across many instances, reducing operational overhead. X   0% NGINX One provides tools for fleet management and automation. NGINX OSS requires manual management for instance updates.
At scale configuration Streamlines large-scale deployments with automated configuration rollouts, reducing errors. X   0% NGINX One provides cluster-wide configuration syncing and APIs for scaling deployments efficiently. NGINX OSS requires manual configuration changes.
Policy Enforcement Ensures consistent application of security and operational policies across all services. X   0% NGINX One enables centralized policy enforcement and granular controls for all instances. OSS requires individual configuration for each instance.
Cert Management Prevents outages by automating certificate renewals and deployments. X   0% NGINX One centralizes certificate management, including live updates. OSS requires manual certificate management.
Vulnerability management Proactively detects and remediates security threats, protecting business continuity. X   0% NGINX One includes vulnerability monitoring and access to patched builds as part of its commercial support services. OSS relies on third-party tools. If OSS support is in place, vulnerability monitoring is available.
Logging Captures comprehensive logs to aid auditing, troubleshooting, and compliance efforts. X X 100% Available in both NGINX One and OSS, with no notable differences.
Templates Provides blueprints of NGINX configurations for faster rollout at scale. X   0% NGINX One provides Go templates to simplify configuration lifecycle management.
AI
AI assistant Provides actionable insights and recommendations to optimize performance and accelerate problem-solving. X   0% NGINX One offers vetted and official AI-powered tools to streamline operations, automate tasks, and improve decision-making. OSS does not include AI-driven capabilities.
WAF
Web Application Firewall Protects applications from common threats like SQL injection and XSS, reducing risk. Is natively and handles traffic at wire speed. X   0% An NGINX One premium subscription includes NGINX App Protect WAF with seamless configuration, which includes protection for OSS instances. NGINX OSS requires manual configuration of separately-procured, F5-branded or third-party solutions.
DoS Protection Detects and mitigates denial-of-service attacks to prevent outages. X   0% An NGINX One premium subscription includes NGINX App Protect DoS with seamless configuration, which includes protection for OSS instances. NGINX OSS requires manual configuration of separately procured F5-branded or third-party solutions.

Review F5 NGINX One products and packaging ›