-
-
Notifications
You must be signed in to change notification settings - Fork 9
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
7cfe1d5
commit 31f1318
Showing
1 changed file
with
19 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,19 @@ | ||
A robust, highly customizable, and feature-rich **Web Application Firewall (WAF)** middleware for the Caddy web server. This middleware provides **advanced protection** against a comprehensive range of web-based threats, seamlessly integrating with Caddy and offering flexible configuration options to secure your applications effectively. | ||
|
||
[![Tests (186) ](https://github.com/fabriziosalmi/caddy-waf/actions/workflows/go.yml/badge.svg)](https://github.com/fabriziosalmi/caddy-waf/actions/workflows/go.yml) [![CodeQL](https://github.com/fabriziosalmi/caddy-waf/actions/workflows/github-code-scanning/codeql/badge.svg)](https://github.com/fabriziosalmi/caddy-waf/actions/workflows/github-code-scanning/codeql) [![Build, Run and Validate](https://github.com/fabriziosalmi/caddy-waf/actions/workflows/build-run-validate.yml/badge.svg)](https://github.com/fabriziosalmi/caddy-waf/actions/workflows/build-run-validate.yml) | ||
|
||
## 🛡️ Core Protections | ||
|
||
* **Regex-Based Filtering:** Deep URL, data & header inspection using powerful regex rules. | ||
* **Blacklisting:** Blocks malicious IPs, domains & optionally TOR exit nodes. | ||
* **Geo-Blocking:** Restricts access by country using GeoIP. | ||
* **Rate Limiting:** Prevents abuse via customizable IP request limits. | ||
* **Anomaly Scoring:** Dynamically blocks requests based on cumulative rule matches. | ||
* **Multi-Phase Inspection:** Analyzes traffic throughout the request lifecycle. | ||
* **Sensitive Data Redaction:** Removes private info from logs. | ||
* **Custom Response Handling:** Tailored responses for blocked requests. | ||
* **Detailed Monitoring:** JSON endpoint for performance tracking & analysis. | ||
* **Dynamic Config Reloads:** Seamless updates without restarts. | ||
* **File Watchers:** Automatic reloads on rule/blacklist changes. | ||
|
||
|