Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

BunkerWeb: Nginx-based open-source Web Application Firewall (WAF)

docs.bunkerweb.io

Post reply on HN
Print view View original

1–8 of 8 posts

Re: BunkerWeb: Nginx-based open-source Web Application Firewall (WAF)

#2

Post by m3drano »

BunkerWeb effortlessly integrates into your existing environments, whether it's Linux, Docker, Swarm, Kubernetes, or more. Its versatility allows for easy configuration to suit your specific requirements. Don't worry if you prefer a user-friendly interface—BunkerWeb offers an exceptional web UI alongside the command-line interface (CLI), ensuring accessibility for all users.

Re: BunkerWeb: Nginx-based open-source Web Application Firewall (WAF)

#3

Post by freedomben »

I'd love to hear from somebody who has run this in production. What was your experience like? Would you recommend this?

I feel like the last several years have gotten many of us dependent on Cloudflare. I love Cloudflare, but I think it's healthy and important to have an open source WAF that is usable.

Re: BunkerWeb: Nginx-based open-source Web Application Firewall (WAF)

#5

Post by bnkty »

fwsgonzo wrote: post #4

It's just a wrapper around the abandoned ModSecurity waf.

(BW maintainers here)

ModSecurity is just one security feature included into BW, you can find the full list here : https://docs.bunkerweb.io/latest/security-tuning/

Btw we also have plugins (e.g. coraza) as described here : https://docs.bunkerweb.io/latest/plugins/

Re: BunkerWeb: Nginx-based open-source Web Application Firewall (WAF)

#6

Post by bnkty »

freedomben wrote: post #3

I'd love to hear from somebody who has run this in production. What was your experience like? Would you recommend this? I feel like the last several years have gotten many of us dependent on Cloudflare. I love Cloudflare, but I think it's healthy and important to have an open source WAF that is usable.

(BW maintainers here)

We try our best to fix critical bugs and enhance the user experience. I can tell you that BW is running in production for both homelabs and enterprise.

Re: BunkerWeb: Nginx-based open-source Web Application Firewall (WAF)

#7

Post by bnkty »

m3drano wrote: post #2

BunkerWeb effortlessly integrates into your existing environments, whether it's Linux, Docker, Swarm, Kubernetes, or more. Its versatility allows for easy configuration to suit your specific requirements. Don't worry if you prefer a user-friendly interface—BunkerWeb offers an exceptional web UI alongside the command-line interface (CLI), ensuring accessibility for all users.

(BW maintainers here)

Thanks for sharing BW on HN !

Post reply on HN