opcache/ngx_waf repository overview

⁠ngx_waf

English | 简体中文⁠

Handy, High performance Nginx firewall module.

⁠Why ngx_waf

• Full-featured: The basic functions of the web application firewall are available.
• Easy to install: No need to install other modules in advance.
• Easy to use: directives are easy to understand and you can probably guess what they mean without reading the documentation.
• High performance: In more extreme tests, QPS(Queries Per Second) is reduced by about 4% after starting this module. See the documentation for details of the tests.

⁠Function

• SQL injection detection.
• IPV4 and IPV6 support.
• Anti Challenge Collapsar, it can automatically block malicious IP.
• Exceptional allow on specific IP address.
• Block the specified IP address.
• Block the specified request body.
• Exceptional allow on specific URL.
• Block the specified URL.
• Block the specified query string.
• Block the specified UserAgent.
• Block the specified Cookie.
• Exceptional allow on specific Referer.
• Block the specified Referer.

⁠Docs

• Recommended link: https://docs.addesp.com/ngx_waf/⁠
• Alternate link 1: https://add-sp.github.io/ngx_waf/⁠
• Alternate link 2: https://ngx-waf.pages.dev/⁠

⁠Contact

• Telegram Channel: https://t.me/ngx_waf⁠
• Telegram Group: https://t.me/ngx_waf_group⁠

⁠License

BSD 3-Clause License⁠

⁠Thanks

• uthash⁠
• libinjection⁠
• libsodium⁠
• ngx_lua_waf⁠
• nginx-book⁠
• nginx-development-guide⁠