Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WAF integration #911

Open
ennetech opened this issue Nov 10, 2022 · 4 comments · May be fixed by #915
Open

WAF integration #911

ennetech opened this issue Nov 10, 2022 · 4 comments · May be fixed by #915

Comments

@ennetech
Copy link

it could be interesting to integrate coraza (https://github.com/corazawaf/coraza) directly in fabio?

before starting the implementation I would like some feedback

@nathanejohnson
Copy link
Member

This looks very interesting. What did you have in mind?

@ennetech
Copy link
Author

  • create a global configuration "all request go trough WAF"
  • create label "waf" for per-route configuration
  • find the best way to load the directives (i am thinking a global rule definition with the coreruleset, but i would like also per-route specific rules)
  • if the connection should pass thru waf fabio should run the parser and return an error if an intrusion is detected

Also i am working on a distributed firewall written in golang and i would like to report waf failures to it

@nathanejohnson
Copy link
Member

I would love to see a PR around this! I'm not yet familiar with the coraza project, but I might play it with next week when things are slow with the holiday.

@ennetech ennetech linked a pull request Nov 20, 2022 that will close this issue
@ennetech
Copy link
Author

@nathanejohnson #915 this is the bare minimum to get it working

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants