Show HN: BunkerWeb – the open-source and cloud-native WAF
docs.bunkerweb.io
Show HN: BunkerWeb – the open-source and cloud-native WAF
1–10 of 32 posts
Re: Show HN: BunkerWeb – the open-source and cloud-native WAF
#2While neat, I feel like in the current age of "let's throw shitloads of packets and see how they like that", this solves _a problem_, but I feel that most of the security products solve it by anycasting IP ranges.
Neat to see another use case for NGNIX though!
Re: Show HN: BunkerWeb – the open-source and cloud-native WAF
#3How is this better than Caddy?
Re: Show HN: BunkerWeb – the open-source and cloud-native WAF
#4Is there a significant difference between this and nginx proxy manager?
Re: Show HN: BunkerWeb – the open-source and cloud-native WAF
#5I'm still strongly suspecting this whole WAF thing is mostly complete bullshit intended for projects doing security works mostly from spreadsheets.
Could someone with a proper background in security confirm or invalidate my suspicion ?
Re: Show HN: BunkerWeb – the open-source and cloud-native WAF
#6Is the syntax same as nginx?
Re: Show HN: BunkerWeb – the open-source and cloud-native WAF
#7Your site talks of BunkerWeb PRO, which is, by the sound of it, not open source. But I have no idea what is actually different about it: https://panel.bunkerweb.io/knowledgebase/105/What-is-BunkerW... flatly doesn’t answer the question: “additional features and services responding to professional needs” is impressively vague.
Re: Show HN: BunkerWeb – the open-source and cloud-native WAF
#8I'm still strongly suspecting this whole WAF thing is mostly complete bullshit intended for projects doing security works mostly from spreadsheets. Could someone with a proper background in security confirm or invalidate my suspicion ?
I mean ... You're not completely wrong, but you're not completely right either. For context: I've been working full-time in security for 15 years and on the fringes (reversing) for many more.
WAFs in and of themselves provide virtually zero security. They can block naive attacks -- catching the most obvious payloads -- and act as an early-warning signal that an attack may be underway (though the SNR on this is awful). But frankly, this is far less important in practice than the fact that it just makes things more difficult and annoying for attackers. Enough so that it can make a semi-attractive target into a no-go.
This is like defense-in-depth, but instead of layering protections in place so that the holes in the swiss cheese don't like up, you're making the cheese smell awful enough to ignore the juicy apple behind it.
If you're a valuable enough target, they're gonna go for the apple regardless of how bad the cheese is. ... And this analogy may have gotten away from me.
Re: Show HN: BunkerWeb – the open-source and cloud-native WAF
#9How this compare against safeline?
Re: Show HN: BunkerWeb – the open-source and cloud-native WAF
#10Is there a significant difference between this and nginx proxy manager?
They're both reverse proxies built on nginx, but the whole point of BunkerWeb is that it's a WAF, which NPM is not, so that's a significant difference.
In short, NPM doesn't do any of the stuff listed under Security Features here: https://docs.bunkerweb.io/latest/#security-features