coreruleset
apisix-ingress-controller
coreruleset | apisix-ingress-controller | |
---|---|---|
13 | 33 | |
1,966 | 944 | |
3.0% | 0.7% | |
9.7 | 8.7 | |
4 days ago | 6 days ago | |
Python | Go | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
coreruleset
-
Hardening Apache APISIX with the OWASP's Coraza and Core Ruleset
--OWASP® ModSecurity Core Rule Set website
-
Looking for feedback on a security-related project idea
The other thing that came to my mind is the OWASP ModSecurity Core Rule Set (https://coreruleset.org/), which seems somewhat analogous to your proposal. If so, it might be worth chatting with some of the CRS maintainers about what their journey was.
- Access Denied
-
Modsecurity Wordpress exceptions
I would say it depends on your version. The core rule set git repo shows REQUEST-903.9002-WORDPRESS-EXCLUSION-RULES.conf being in versions 3.0.2 through 3.3.4.
-
Web Security Resources Request
If your focus is on generic detection rules than a good resource to start with is the OWASP ModSecurity Core Rule Set (CRS) - However, this rule set is built for the mod_security WAF but depending on what data you get in from your customers, you might be able to forward it against your own mod_security instance and process the mod_security audit logs in Splunk without having to re-write/convert the rules.
-
ModSecurity headers.X-Forwarded-For is enormous
I'm always getting great and helpful support from the CRS issue tracker: https://github.com/coreruleset/coreruleset/issues
-
Firewall made easy - Protect your web server traffic with UFW 🔥
Host-based firewalls and network firewalls won't always quite "cut it", OWASP ModSecurity is an open-source rule set for critical web applications that require an additional level of security.
-
[SL] MangaDex 3.0+1.0 Staff AMA
Other than that we rely on quite a lot of things these days, notably ModSecurity and the OWASP Core Rule Set alongside some other heavy restricting of our apps. (the idea being that the app is safe on its own, but those act as extra layers of defense in case we fuck up something really badly in the app one day)
-
Harden Apache2 Server
sudo git clone https://github.com/coreruleset/coreruleset /usr/share/modsecurity-crs
-
Cloudflare's inaccessible browser contradicts the company's mission
It's quite hard, because it's not just "use known vulnerabilities on this specific address" - you can block it easily, and there are projects (such as CRS: https://github.com/coreruleset/coreruleset) that tries to emulate this. It's more of combined specific attacks, which is amplified because if CloudFlare detected an attempt on a single high-profile site, then that IP address can be propagate to all of the protected properties. Combine that with how random is an address allocated in Tor, and you've got blocks without using an explicit Tor list.
apisix-ingress-controller
- Apache APISIX: A dynamic, real-time, high-performance API gateway
-
Implementing the Idempotency-Key specification on Apache APISIX
This post shows how to implement it with Apache APISIX.
-
3 Tips for Deploying APISIX in Kubernetes (Part 1)
APISIX Ingress Controller is a tool focused on API management, offering high performance and flexible configuration options. If you require more complex routing rules, rate limiting, circuit breaking, and other advanced features, APISIX Ingress Controller may be a better choice. It provides a rich plugin system, allowing integration of plugins through APISIX Ingress CRD using declarative configuration to handle authentication, authorization, monitoring, logging, and other functionalities. This enriches the capabilities of APISIX Ingress Controller and simplifies configuration.
-
Hardening Apache APISIX with the OWASP's Coraza and Core Ruleset
In this post, I'd like to describe how to fix some of them via the Apache APISIX API Gateway.
-
Mastering APISIX Health Checks: Active and Passive Monitoring Strategies
In the era of digitization, the availability and stability of services are crucial for the success of enterprises. As a key component of microservices architecture, the API gateway plays a significant role. APISIX, an open-source API gateway platform, ensures the continuity and stability of services through its health check mechanism.
-
2023 in retrospective
Next February will mark the two-year milestone that I'm working for: API7.ai on Apache APISIX. I'm still very pleased about both. It allows me to do things I like a lot, such as writing posts and giving talks.
-
Five Apache projects you probably didn't know about
In early 2021, I started to work on the Apache APISIX project. I have to admit that I had never heard about it before. In this post, I'd like to introduce some Apache projects that are less well-known than HTTPD or Kafka.
-
Apache APISIX plugin priority, a leaky abstraction?
Apache APISIX is an API Gateway, which builds upon the OpenResty reverse-proxy to offer a plugin-based architecture. The main benefit of such an architecture is that it brings structure to the configuration of routes. It's a help at scale, when managing hundreds or thousands of routes.
- Building a starter pack for an API-as-a-Service
-
10 Common API Resilience Design Patterns with API Gateway
API resilience is about building robust APIs that can withstand a variety of challenges, ensuring that they continue to function effectively. API Gateways play a key role in this, acting as the entry point for external requests and managing the communication between different services by taking into account common API resilience patterns. One of the popular open-source API Gateways, Apache APISIX, provides a variety of features to enhance the resilience and robustness of APIs. In this article, we will explore 10 common API resilience design patterns and how they can be implemented using APISIX.
What are some alternatives?
ModSecurity - ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
ingress-nginx - Ingress-NGINX Controller for Kubernetes
ModSecurity-nginx - ModSecurity v3 Nginx Connector
envoy - Cloud-native high-performance edge/middle/service proxy
app - Repository to host app releases, issues, and feature requests for Paperback
emissary - open source Kubernetes-native API gateway for microservices built on the Envoy Proxy
Fider - Open platform to collect and prioritize feedback
IngressMonitorController - A Kubernetes controller to watch ingresses and create liveness alerts for your apps/microservices in UptimeRobot, StatusCake, Pingdom, etc. – [✩Star] if you're using it!
rules - Repository of yara rules
apisix - The Cloud-Native API Gateway
Viewfinder - 📷 BrowserBox - Remote isolated browser API for security, automation visibility and interactivity. Run on our cloud, or bring your own. Full scope double reverse web proxy with multi-tab, mobile-ready browser UI frontend. Plus co-browsing, advanced adaptive streaming, secure document viewing and more! But only in the Pro version. Get BB today! Secure your document needs and internet, today! [Moved to: https://github.com/crisdosyago/BrowserBox]
ingress-merge - Merge Ingress Controller for Kubernetes