hero

ngx_waf

Handy, High performance Nginx firewall module.

Quick Start →

Basic protection

Such as black and white list of IPs or IP range, uri black and white list, and request body black list, etc.

Easy

Directives and rules are easy to write and readable.

Fast

The IP detection is a constant-time operation. Most of the remaining inspections use caching to improve performance.

Advanced protection

Compatible with ModSecurity's rules, you can use OWASP ModSecurity Core Rule Set.

Friendly crawler verification

Supports verifying Google, Bing, Baidu and Yandex crawlers and allowing them automatically to avoid false positives.

Captcha

Supports three kinds of captchas: hCaptcha, reCAPTCHAv2 and reCAPTCHAv3.