waf

README

caddy-waf

Waf based on caddy2

example

   route {
        waf {
            args_rule args.rule
            user_agent_rule user_agent.rule
            post_rule post.rule
            ip_allow_rule ip_allow.rule
            ip_block_rule ip_block.rule
            rate_limit_bucket 10
            rate_limit_rate 10
        }
    }

Documentation

Index

• type CaddyWaf
  • func (*CaddyWaf) CaddyModule() caddy.ModuleInfo
  • func (w *CaddyWaf) Provision(ctx caddy.Context) error
  • func (w *CaddyWaf) ServeHTTP(rw http.ResponseWriter, r *http.Request, next caddyhttp.Handler) error
  • func (w *CaddyWaf) Start() error
  • func (w *CaddyWaf) Stop() error
  • func (w *CaddyWaf) UnmarshalCaddyfile(d *caddyfile.Dispenser) error
  • func (w *CaddyWaf) Validate() error
• type RateLimit
  • func NewRateLimit(logger *zap.Logger, rateLimitBucket int, rateLimitRate float64) *RateLimit

Types

type CaddyWaf

type CaddyWaf struct {
	ArgsRule        []string
	UserAgentRule   []string
	PostRule        []string
	IpAllowRule     []string
	IpBlockRule     []string
	RateLimitBucket int
	RateLimitRate   float64

	ArgsReRule      []*regexp.Regexp
	UserAgentReRule []*regexp.Regexp
	PostReRule      []*regexp.Regexp
	// contains filtered or unexported fields
}

func (*CaddyWaf) CaddyModule

func (*CaddyWaf) CaddyModule() caddy.ModuleInfo

CaddyModule returns the Caddy module information.

func (*CaddyWaf) Provision

func (w *CaddyWaf) Provision(ctx caddy.Context) error

func (*CaddyWaf) ServeHTTP

func (w *CaddyWaf) ServeHTTP(rw http.ResponseWriter, r *http.Request, next caddyhttp.Handler) error

ServeHTTP implements caddyhttp.MiddlewareHandler.

func (*CaddyWaf) Start

func (w *CaddyWaf) Start() error

func (*CaddyWaf) Stop

func (w *CaddyWaf) Stop() error

func (*CaddyWaf) UnmarshalCaddyfile

func (w *CaddyWaf) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

UnmarshalCaddyfile sets up the middleware from Caddyfile tokens. Syntax:

func (*CaddyWaf) Validate

func (w *CaddyWaf) Validate() error

type RateLimit

type RateLimit struct {
	// contains filtered or unexported fields
}

func NewRateLimit

func NewRateLimit(logger *zap.Logger, rateLimitBucket int, rateLimitRate float64) *RateLimit