Welcome! Log In Create A New Profile


Re: WAF Recommendations?

September 13, 2012 05:44PM

On Thu, Sep 13, 2012 at 8:29 AM, AJ Weber <aweber@comcast.net> wrote:
> Would like to integrate WAF functionality/capability with nginx. Has anyone
> tested the latest version of ModSecurity (2.7.0), which apparently has a
> module for nginx?

My colleague John Graham-Cumming has been working on a compiler that
can compile a good number of ModSecurity rule configurations into Lua
code that can be run atop ngx_lua [1]. We (CloudFlare) may opensource
it at some point.

Some (big) users of mine have been using ngx_lua to implement custom
WAF in production and sent back good results. Some reported better
performance with ngx_lua than both ModSecurity and Naxi, but I've not
confirmed the result myself yet :)

Best regards,

[1] http://wiki.nginx.org/HttpLuaModule

nginx mailing list
Subject Author Posted

WAF Recommendations?

aweber September 13, 2012 11:30AM

Re: WAF Recommendations?

Rainer Duffner September 13, 2012 11:40AM

Re: WAF Recommendations?

aweber September 13, 2012 11:50AM

Re: WAF Recommendations?

agentzh September 13, 2012 05:44PM

Re: WAF Recommendations?

Listjj September 24, 2012 09:47PM

Re: WAF Recommendations?

csg September 25, 2012 02:42AM

Re: WAF Recommendations?

Alan Silva October 04, 2012 03:38PM

Re: WAF Recommendations?

aweber October 04, 2012 04:00PM

Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 79
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready