A new Cloudflare Web Application Firewall

#1

Post by migueldemoura » Mon, Mar 29, 2021, 1:07 PM UTC

A new Cloudflare Web Application Firewall
blog.cloudflare.com

Re: A new Cloudflare Web Application Firewall

#2

Post by jgrahamc » Mon, Mar 29, 2021, 1:43 PM UTC

The plan is to open source the old WAF code (that I wrote long ago) once the new WAF is fully rolled out.

Re: A new Cloudflare Web Application Firewall

#3

Post by _kyran » Mon, Mar 29, 2021, 2:38 PM UTC

jgrahamc wrote: post #2

The plan is to open source the old WAF code (that I wrote long ago) once the new WAF is fully rolled out.

Curious if you have any stories from working on this? I'd love to hear what some of the hardest problems to solve were?

Re: A new Cloudflare Web Application Firewall

#4

Post by jgrahamc » Mon, Mar 29, 2021, 2:40 PM UTC

_kyran wrote: post #3

jgrahamc wrote: post #2

The plan is to open source the old WAF code (that I wrote long ago) once the new WAF is fully rolled out.

Curious if you have any stories from working on this? I'd love to hear what some of the hardest problems to solve were?

You can start here: https://www.youtube.com/watch?v=nlt4XKhucS4

Re: A new Cloudflare Web Application Firewall

#5

Post by anotherhue » Mon, Mar 29, 2021, 2:51 PM UTC

jgrahamc wrote: post #2

The plan is to open source the old WAF code (that I wrote long ago) once the new WAF is fully rolled out.

Do you get to go 'off-call' then?

Re: A new Cloudflare Web Application Firewall

#6

Post by jgrahamc » Mon, Mar 29, 2021, 2:54 PM UTC

anotherhue wrote: post #5

jgrahamc wrote: post #2

The plan is to open source the old WAF code (that I wrote long ago) once the new WAF is fully rolled out.

Do you get to go 'off-call' then?

I haven't been on call for that code for a long time. There's a whole team that works on it and has been improving it for quite a few years.

Re: A new Cloudflare Web Application Firewall

#7

Post by anotherhue » Mon, Mar 29, 2021, 2:59 PM UTC

jgrahamc wrote: post #6

anotherhue wrote: post #5

Earlier quoted context omitted.

Do you get to go 'off-call' then?

I haven't been on call for that code for a long time. There's a whole team that works on it and has been improving it for quite a few years.

Glad to hear! It's a little jarring that the Web-UI throws it's hands in the air when you add a few boolean clauses so I look forward to some improvements there.

Cloudflare is, in general, a delight to use.

Re: A new Cloudflare Web Application Firewall

#8

Post by jgrahamc » Mon, Mar 29, 2021, 3:01 PM UTC

anotherhue wrote: post #7

jgrahamc wrote: post #6

Earlier quoted context omitted.

I haven't been on call for that code for a long time. There's a whole team that works on it and has been improving it for quite a few years.

Glad to hear! It's a little jarring that the Web-UI throws it's hands in the air when you add a few boolean clauses so I look forward to some improvements there. Cloudflare is, in general, a delight to use.

Email me (jgc) any issues.

Re: A new Cloudflare Web Application Firewall

#9

Post by alberth » Mon, Mar 29, 2021, 3:03 PM UTC

anotherhue wrote: post #7

jgrahamc wrote: post #6

Earlier quoted context omitted.

I haven't been on call for that code for a long time. There's a whole team that works on it and has been improving it for quite a few years.

Glad to hear! It's a little jarring that the Web-UI throws it's hands in the air when you add a few boolean clauses so I look forward to some improvements there. Cloudflare is, in general, a delight to use.

> "Cloudflare is, in general, a delight to use."

Agreed. There's lots of companies in the space that Cloudflare operates in. Cloudflare is the "macOS/Apple" of the market whereas their competition is the unwieldily mess that is "Linux".

Re: A new Cloudflare Web Application Firewall

#10

Post by alberth » Mon, Mar 29, 2021, 3:08 PM UTC

jgrahamc wrote: post #2

The plan is to open source the old WAF code (that I wrote long ago) once the new WAF is fully rolled out.

Sad to see LuaJIT is no longer in use.

LuaJIT was so far ahead of it's time (and still is), it's sad to see the current state of it since Mike Pall has moved on. The learned lesson for me is that, even if you have a vastly superior offering - the success of something is hugely correlated to the community behind it.