Uploaded June 2026 | Updated September 2026, 3 days ago
Are your Kubernetes APIs properly secured? The Kubernetes Gateway API is reshaping traffic routing, but default implementations often lack the deep, container-native security required for enterprise workloads.
In this demo, we show you how to seamlessly bridge the gap between SecOps and Platform Engineering by integrating F5’s enterprise-grade NGINX WAF directly into the F5 NGINX Gateway Fabric data plane. Watch as we block cross-site scripting (XSS) attacks in real-time and use DataGuard to automatically mask sensitive PII (like credit card numbers and SSNs) on outbound responses. All of this is managed through the centralized NGINX One Console and deployed with declarative zero-downtime Kubernetes workflows.
Release blog: https://www.f5.com/company/blog/waf-f...
Docs: https://docs.nginx.com/nginx-gateway-...
0:00 Introduction
0:10 The Security Gap in Modern Kubernetes
0:40 F5 WAF for NGINX Gateway Fabric — Architecture
1:00 Gateway API Integration & WAF Capabilities
1:30 Policy Workflow — NGINX One Console to Gateway Fabric
2:00 Demo: Create WAF Policy in NGINX One Console
2:30 Demo: Kubernetes Setup — Pods, WAF Proxy, WAFPolicy YAML
3:10 Demo: Apply Policy & Verify in Data Plane
3:30 Demo: Normal Traffic — Sensitive Data Exposed
3:50 Demo: XSS Attack — Blocked!
4:20 Demo: DataGuard — Create Policy to Mask PII
4:40 Demo: DataGuard in Action — Credit Card & SSN Masked
4:50 Security Dashboard — Main View
5:10 Security Dashboard — Advanced View & Signatures
5:20 Security Dashboard — Event Logs & Forensic Drilldown
5:50 What We Covered Today
6:06 End
Notes:
- Contributed by: Akash Ananthanarayanan
- Related Article: None
- Project Files: None
⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️
DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems—together.
Find all our platform links ⬇️ and follow our Community Evangelists! 👋
➡️ DEVCENTRAL: community.f5.com
➡️ YOUTUBE: youtube.com/devcentral
➡️ LINKEDIN: linkedin.com/showcase/f5-devcentral
➡️ X: https://x.com/devcentral
Your Community Evangelists:
👋 Jason Rahm: linkedin.com/in/jrahm | https://x.com/jasonrahm
👋 Buu Lam: linkedin.com/in/buulam | https://x.com/buulam
👋 Chase Abbott: linkedin.com/in/chaseabbott1
Are your Kubernetes APIs properly secured? The Kubernetes Gateway API is reshaping traffic routing, but default implementations often lack the deep, container-native security required for enterprise workloads.
In this demo, we show you how to seamlessly bridge the gap between SecOps and Platform Engineering by integrating F5’s enterprise-grade NGINX WAF directly into the F5 NGINX Gateway Fabric data plane. Watch as we block cross-site scripting (XSS) attacks in real-time and use DataGuard to automatically mask sensitive PII (like credit card numbers and SSNs) on outbound responses. All of this is managed through the centralized NGINX One Console and deployed with declarative zero-downtime Kubernetes workflows.
Release blog: https://www.f5.com/company/blog/waf-f...
Docs: https://docs.nginx.com/nginx-gateway-...
0:00 Introduction
0:10 The Security Gap in Modern Kubernetes
0:40 F5 WAF for NGINX Gateway Fabric — Architecture
1:00 Gateway API Integration & WAF Capabilities
1:30 Policy Workflow — NGINX One Console to Gateway Fabric
2:00 Demo: Create WAF Policy in NGINX One Console
2:30 Demo: Kubernetes Setup — Pods, WAF Proxy, WAFPolicy YAML
3:10 Demo: Apply Policy & Verify in Data Plane
3:30 Demo: Normal Traffic — Sensitive Data Exposed
3:50 Demo: XSS Attack — Blocked!
4:20 Demo: DataGuard — Create Policy to Mask PII
4:40 Demo: DataGuard in Action — Credit Card & SSN Masked
4:50 Security Dashboard — Main View
5:10 Security Dashboard — Advanced View & Signatures
5:20 Security Dashboard — Event Logs & Forensic Drilldown
5:50 What We Covered Today
6:06 End
Notes:
- Contributed by: Akash Ananthanarayanan
- Related Article: None
- Project Files: None
⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️
DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems—together.
Find all our platform links ⬇️ and follow our Community Evangelists! 👋
➡️ DEVCENTRAL: community.f5.com
➡️ YOUTUBE: youtube.com/devcentral
➡️ LINKEDIN: linkedin.com/showcase/f5-devcentral
➡️ X: https://x.com/devcentral
Your Community Evangelists:
👋 Jason Rahm: linkedin.com/in/jrahm | https://x.com/jasonrahm
👋 Buu Lam: linkedin.com/in/buulam | https://x.com/buulam
👋 Chase Abbott: linkedin.com/in/chaseabbott1
