search

owasp-modsecurity / ModSecurity-apache

ModSecurity v3 Apache Connector
Apache License 2.0
87 stars 51 forks source link

Plans for production readyness? #89

Open friesoft opened 7 months ago

friesoft commented 7 months ago

Hi,

as modsecurity is now an OWASP project: are there any plans for ongoing/improved modsecurity apache httpd support?

Will you continue to support modsecurity 2 or will this Modsecurity-apache module be developed for production readyness in combination with modsecurity 3?

Thanks!

dune73 commented 7 months ago

Thanks for writing in.

We are working based on a preliminary project plan developed in Dec 2023 and Jan 2024.

The project plan proposes to keep v2 productive and supported at least on the short- to mid-term level. Long-term perspective is up to the new community to decide.

Stabilizing the v3 Apache connector is a high priority for the new devs. In fact there are more problems than only an Apache connector for v3, but it's probably one of the biggest ones.

If you are interested to be part of this adventure, then please join our Slack: It's channel #project-modsecurity on the OWASP Slack.