Hi,
On Thu, Jan 12, 2012 at 11:35 PM, Joshua Zhu <zhuzhaoyuan@gmail.com> wrote:
> Hi,
>
> We are pleased to announce that Tengine-1.2.2 has been released. And you
> can download it here: http://tengine.taobao.org/download/tengine.tar.gz
> (For those who don't know Tengine, it is a distribution of Nginx,
> including quite a few useful patches and modules developed by a group
> software engineers from Taobao)
>
> In this release, we introduced the 'input body filter' mechanism. So it's
> very handy to a developer who wants to write a Web Application Firewall. We
> merged the changes from the latest stable Nginx, i.e. Tengine is based on
> Nginx-1.0.11 now. There are also some bug fixes in this release. More
> detailed changelog is available at
> http://tengine.taobao.org/changelog.html
>
I've written a post about how to use this 'input body filter' to develop
Web Application Firewalls, taking a _naive_ module to fight hash collision
DoS attacks as an example:
http://blog.zhuzhaoyuan.com/2012/01/a-mechanism-to-help-write-web-application-firewalls-for-nginx/
Regards,
--
Joshua Zhu
Senior Software Engineer
Server Platforms Team at Taobao
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx