sWAF is a simple Web Application Firewall docker image, pre-packaged to be easily used within your web services architecture.
It runs NGINX as a dedicated reverse proxy embedding powerful WAF engines: ModSecurity 3, using OWASP® ModSecurity Core Rule Set (CRS) rules, and NAXSI. It uses acme.sh for Let’s Encrypt and others free CA support.
Getting Started
-
Get sWAF docker image:
docker pull swafproject/swaf
-
Start a sWAF container:
docker run -d --name swaf --restart always --net host swafproject/swaf
Further Details
-
All details on https://github.com/swaf-project/swaf-docker
-
Full documentation on the Wiki
And obviously…
…in case of any issue: https://github.com/swaf-project/swaf-docker/issues