nginx-lua-ds-waf
基于openresty/lua-nginx-module的WAF系统
A WAF based on openresty/lua-nginx-module
Dependencies:
- openresty or nginx with openresty/lua-nginx-module
- couchdb
- Tieske/uuid
- mpx/lua-cjson
- pintsized/lua-resty-http
Installation:
将代码放在位于nginx根目录下的lua/nginx-lua-ds-waf/下
Put the code into the directory lua/nginx-lua-ds-waf which is located in the root directory of the nginx
在nginx.conf的http段中添加如下配置：
Add the config below to the http seg in nginx.conf:
lua_package_path "/usr/local/nginx/lua/nginx-lua-ds-waf/?.lua;;";
lua_shared_dict dymanic_block_ips_pool 10m;
init_by_lua_file lua/nginx-lua-ds-waf/init.lua;
access_by_lua_file lua/nginx-lua-ds-waf/waf.lua;
WAF相关的配置在config.lua中，需要保证nginx的worker process对日志文件有读写权限
You can config WAF with the file config.lua,and you must make the worker process of nginx have the read and write permission to the log file