ngx_waf
Handy, High performance Nginx firewall module.
Basic protection
Such as black and white list of IPs or IP range, uri black and white list, and request body black list, etc.
Easy
Directives and rules are easy to write and readable.
Fast
The IP detection is a constant-time operation. Most of the remaining inspections use caching to improve performance.
Advanced protection
Compatible with ModSecurity's rules, you can use OWASP ModSecurity Core Rule Set.
Friendly crawler verification
Supports verifying Google, Bing, Baidu and Yandex crawlers and allowing them automatically to avoid false positives.
Captcha
Supports three kinds of captchas: hCaptcha, reCAPTCHAv2 and reCAPTCHAv3.