Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF)

github.com

Post reply on HN
Print view View original

11–20 of 31 posts

Re: Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF)

#11

Post by brunoqc »

> Whether it's enhanced security, an enriched user experience, or technical supervision, the BunkerWeb PRO version will allow you to fully benefit from BunkerWeb and respond to your professional needs.

Is it open core? I see that the license is AGPL. Can I just edit the code to enable the "pro" features, or are they in another repo?

"enhanced security" sounds a bit like the open source version is gutted to encourage people paying for it. If so, it's a bit of a shame. Wouldn't it be better if everyone used this waf and the web would be more secure as possible for everyone?

Re: Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF)

#14

Post by bnkty »

panarky wrote: post #12

"live threatmap of live cyber attacks blocked by BunkerWeb instances all around the world" So this sketchy looking thing is also equipped with telemetry that phones home all the time? No thanks.

The BunkerNet feature is completely optional. You can disable it at any time, however, you will not be able to take advantage of crowdsourcing on threats if you do so. More information here : https://docs.bunkerweb.io/latest/security-tuning/#bunkernet

Re: Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF)

#17

Post by bnkty »

softwreoutthere wrote: post #10

Is this just LUA modules? Whats the performance hit like vs a fresh install of nginx? Whats the performance like on something like ten thousand server blocks?

Performance will indeed decrease compared to a web server without security features. However, this largely depends on the BunkerWeb features you choose to enable.

Re: Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF)

#18

Post by bnkty »

brunoqc wrote: post #11

> Whether it's enhanced security, an enriched user experience, or technical supervision, the BunkerWeb PRO version will allow you to fully benefit from BunkerWeb and respond to your professional needs. Is it open core? I see that the license is AGPL. Can I just edit the code to enable the "pro" features, or are they in another repo? "enhanced security" sounds a bit like the open source version is gutted to encourage…

You are right, this is an open-core model. The PRO features are proprietary and, to be precise, they are actually modules that integrate into the core of the solution. In addition to these features, the PRO version gives you access to technical support. We completely agree with you that BunkerWeb can be used by everyone to make the web more secure. We sincerely believe that the features offered in the community version contribute significantly to this goal. Thank you for your feedback.

Re: Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF)

#19

Post by runekaagaard »

Looks very good, thx for sharing!

Can it be integrated with an existing large nginx config with multiple domains, server and client certificates, websockets, other custom settings and different apps deployed with ansible or does it need to run the nginx process by itself?

Re: Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF)

#20

Post by bnkty »

runekaagaard wrote: post #19

Looks very good, thx for sharing! Can it be integrated with an existing large nginx config with multiple domains, server and client certificates, websockets, other custom settings and different apps deployed with ansible or does it need to run the nginx process by itself?

You will need to migrate to BunkerWeb. But since BunkerWeb is based on NGINX it might be easier than you think. As an example, it supports custom NGINX configs : https://docs.bunkerweb.io/latest/quickstart-guide/#custom-co...

Maybe you can join our Discord to discuss further about your use case.

Post reply on HN