corazawaf / coraza

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
https://www.coraza.io
Apache License 2.0
2.08k stars 206 forks source link

coraza-crs-docker #1095

Closed loukaniko85 closed 1 month ago

loukaniko85 commented 1 month ago

OWASP provide an official ModSecurity CRS container - https://github.com/coreruleset/modsecurity-crs-docker . It would be fantastic to have a coraza-crs-docker take its place.

I'm using this in the interim period - https://github.com/loukaniko85/waf with this traefiik plugin https://plugins.traefik.io/plugins/644d9a72ebafd55c9c740848/mx-m-owasp-crs-modsecurity-plugin .

fzipi commented 1 month ago

Like this one?

fzipi commented 1 month ago

For now it is implemented using Caddy. But the idea is to have additional versions with just the bare middleware, traefik, etc (if needed).

But then that will be provided by the CRS team, not the Coraza team.

loukaniko85 commented 1 month ago

How did I miss this!? I made my own fork instead.. Thank you!

fzipi commented 1 month ago

No worries. You can start contributing there also! 💪

M4tteoP commented 1 month ago

hey @loukaniko85, can we close this?

loukaniko85 commented 1 month ago

🤝

M4tteoP commented 1 month ago

🚀