Question about reverse proxies and WAFs

CJ Ess zxcvbn4038 at
Mon Apr 25 15:51:11 UTC 2016

Very cool! lua-resty-waf is actually at the top of my list of WAFs to try
as soon as I finish deploying openresty everywhere.

On Mon, Apr 25, 2016 at 11:09 AM, Robert Paprocki <
rpaprocki at> wrote:

> There are also several WAFs built upon Openresty (nginx + luajit at
>> however I haven't set any of them up yet so I can't
>> comment on their production readiness.
> Speaking as the author of one of these (lua-resty-waf,
>, I can tell you that it's
> definitely a production-ready project. lua-resty-waf is designed to provide
> direct translation of ModSecurity functionality, and allows you to port
> your existing ModSecurity ruleset, obviating the need to rewrite your rules
> in a new syntax.
> _______________________________________________
> nginx mailing list
> nginx at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the nginx mailing list