naxsi
GoAccess
naxsi | GoAccess | |
---|---|---|
6 | 81 | |
4,739 | 18,106 | |
- | - | |
0.0 | 9.1 | |
10 months ago | 23 days ago | |
C | C | |
GNU General Public License v3.0 only | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
naxsi
- Recommended free and open-source WAF
- nginx security best practice
-
What (software, open source) WAF are you using with (open source) Nginx?
I was using Naxsi until recently, but changes to PCRE compatibility have broken it for now, and the most recent commit was around 6 months ago. I can't help with the code commits, so I'm looking for alternatives.
-
HowTo: WAF with NAXSI for Plex
Ok, so whahaatt the fuckk is NAXSI? Well, NAXSI are a set of rules (aka MainRules) in the form of "does input match funky shit? blocckkked" for nginx. That's the gist of it. Nothing more to it. They're basically an industry standard and block 99% of funky shit.
- Naxsi – Nginx Anti XSS and SQL Injection Module
GoAccess
-
goaccess for nginx report
But how about if we want to analyze the access.log file as a single report? I found goaccess can help to the rescue. So here is how I used this tool to generate a report.
-
Ngtop – Request analytics from the Nginx access logs
Goaccess (https://github.com/allinurl/goaccess) does this in real time and has been very stable for well over a decade.
-
The 50 best open-source alternatives to popular SaaS software
GitHub: GoAccess GitHub Repository
-
Ask HN: Interesting TUIs (text user interfaces), maybe forgotten ones?
Not forgotten by any means but goaccess is nice and simple to use
https://goaccess.io/
-
You don't need analytics on your blog
If one wants server-side metrics with a little more info than the author's "hacky little script", there's always goaccess [1], which functions in broadly the same way. I even use it with Firebase Hosting-hosted sites via [2] (which I wrote).
[1] http://goaccess.io/
[2] https://github.com/Silicon-Ally/gcp-clf
-
Using Analytics on My Website
> Just use GoAcces for fuck's sake.
GoAccess seems pretty cool and is probably a good task for the job, when you need something simple, thanks for recommending it: https://goaccess.io/
Even if you have analytics of some sort already in place, I think it'd probably still be a nice idea to run GoAccess on your server, behind some additional auth, so you can check up on how the web servers are performing.
That said, I'd still say that the analytics solutions out there, especially self-hostable ones like Matomo, are quite nice and can have both UIs that are very easy to interact with for the average person (e.g. filtering data by date range, or by page/view that was interacted with), as well as have a plethora of different datasets: https://matomo.org/features/
I think it can be useful to have a look at what sorts of devices are mostly being used to interact with your site, what operating systems and browsers are in use, how people navigate through the site, where do they enter the site from and how they find it, what the front end performance is like, or even how your e-commerce site is doing, at a glance, in addition to seeing how this changes over time.
People have also said good things about Plausible Analytics as well: https://plausible.io/
-
How do {you} analyze apache log files?
Maybe, if it's just local and need just information, maybe https://goaccess.io is an option.
-
Show HN: Why Google Analytics May Not Be the Best Option for Your Website (2023)
I run goaccess on a cron job and have paired it with a MaxMind GeoIP database so that you can see where people are coming from etc.
https://goaccess.io/
-
Working on Ubuntu: File does not exist on the server, how to create it
file on GitHub.
-
Display real time visitors statistics of a website
There is small programm for linux https://goaccess.io/
What are some alternatives?
ModSecurity - ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
AWStats - AWStats Log Analyzer project (official sources)
OctopusWAF - OctopusWAF is a WAF( Web application firewall) with high performance, made in C language and use libevent.
Matomo - Empowering People Ethically with the leading open source alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. Liberating Web Analytics. Star us on Github? +1. And we love Pull Requests!
nginx-module-vts - Nginx virtual host traffic status module
Elasticsearch - Free and Open, Distributed, RESTful Search Engine
ModSecurity-nginx - ModSecurity v3 Nginx Connector
Open Web Analytics - Official repository for Open Web Analytics which is an open source alternative to commercial tools such as Google Analytics. Stay in control of the data you collect about the use of your website or app. Please consider sponsoring this project.
openappsec - open-appsec is an open-source machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. It is available for NGINX, NGINX Ingress, Envoy (Soon), Kong (Soon), Ambassador (Soon).
Plausible Analytics - Simple, open source, lightweight (< 1 KB) and privacy-friendly web analytics alternative to Google Analytics.
ngx_http_response_body_module - Capture response body into nginx variable
nginx-proxy-manager-goaccess - NGINX Proxy Manager and Goaccess docker file