liuwei3230/ngx_waf

A web application firewall module for nginx without complex configuration. & 使用简单的 nginx 防火墙模块

ngx_waf

English | 简体中文

A web application firewall module for nginx without complex configuration.

Function

• IPV4 and IPV6 support.
• Anti Challenge Collapsar, it can automatically block malicious IP.
• Exceptional allow on specific IP address.
• Block the specified IP address.
• Block the specified request body.
• Exceptional allow on specific URL.
• Block the specified URL.
• Block the specified request args.
• Block the specified UserAgent.
• Block the specified Cookie.
• Exceptional allow on specific Referer.
• Block the specified Referer.

Docs

• Recommended link: https://docs.addesp.com/ngx_waf/
• Alternate link 1: https://add-sp.github.io/ngx_waf/
• Alternate link 2: https://ngx-waf.pages.dev/

License

BSD 3-Clause License

Thanks

• ngx_lua_waf: Most of the default rules of this module come from this.
• nginx-book: Thanks for the tutorial provided by the author.
• nginx-development-guide: Thanks for the tutorial provided by the author.