corazawaf / coraza-spoa

A wrapper for integrating the OWASP Coraza WAF with HAProxy's SPOE filters.
Apache License 2.0
89 stars 18 forks source link

Listen "server" on .sock #96

Closed UnveilTech closed 2 weeks ago

UnveilTech commented 1 year ago

Hello, the doc indicates the server "s1" on ip:port as below: # /etc/haproxy/haproxy.cfg .... backend coraza-spoa mode tcp server s1 127.0.0.1:9000

do you think it could makes sense to also use a .sock (/var/run/coaza-spoa.sock), it could be nice to have that instead of having dozens of open ports on the computer and it might be faster in transaction..

thanks, bye Fred

fionera commented 2 weeks ago

This is supported now and yes it is a lot faster as you skip the tcp stack

UnveilTech commented 1 week ago

fionera,

great news !!!

thanks a lot, bye Fred