nginx-waf
ModSecurity-nginx
| nginx-waf | ModSecurity-nginx | |
|---|---|---|
| 2 | 4 | |
| 6 | 1,428 | |
| - | 1.4% | |
| 3.4 | 5.7 | |
| 7 months ago | 4 days ago | |
| Dockerfile | Perl | |
| MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
nginx-waf
ModSecurity-nginx
-
NGINX WAF alternatives: App Protect vs. ModSecurity vs. open-appsec
ModSecurity v3 has also introduced major changes in how ModSecurity works. The entire WAF is not packed together anymore. Instead, the single libmodsecurity engine is paired with a connector module that interfaces the application with the server. Different connectors are available based on the server and are hosted as independent packages. This means that there's a separate ModSecurity v3 Nginx Connector project.
-
Passing variables from modsecurity to nginx
As far as I can tell there is a feature request and/or some custom method to pass variables from modsecurity back to nginx but I'm looking for the other way around
-
What (software, open source) WAF are you using with (open source) Nginx?
I'm currently erring toward ModSecurity & the Nginx connector now that it's been de-Apache'd.
-
How to implement WAF on Kong Ingress controller? (like ModSecurity v3)
ModSecurity Connector: https://github.com/SpiderLabs/ModSecurity-nginx
What are some alternatives?
traefik-modsecurity-plugin - Traefik plugin to proxy requests to owasp/modsecurity-crs:apache container
ModSecurity - ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
modsecurity-spoa - HAProxy agent for ModSecurity web application firewall
coraza - OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
docker-bloodhound - BloodHound Docker Ready to Use
lua-resty-waf - High-performance WAF built on the OpenResty stack
docker-php-nginx - Docker image with PHP-FPM 8.3 & Nginx 1.24 on Alpine Linux
BunkerWeb - 🛡️ Make your web services secure by default !
i-probably-didnt-backdoor-this - A practical experiment on supply-chain security using reproducible builds
naxsi - NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
zerotier-docker - ZeroTier One as Docker Image
coreruleset - OWASP CRS (Official Repository)