NAXSI – Open-Source, High Performance, Low Rules Maintenance WAF for Nginx

Re:NAXSI – Open-Source, High Performance, Low Rules Maintena... by nikolay on Thursday September 15, 2016 @12:58PM (#12507768)

Here's more about NAXSI: https://www.nbs-system.co.uk/blog-2/naxsi-web-application-fi...

Although, it's sad that Nginx chose the unreleased v3 of ModSecurity [0] [1] for their commercial offering instead.

[0]: https://www.modsecurity.org/

[1]: https://github.com/SpiderLabs/ModSecurity-nginx

[ Parent | on HN ]

Re:NAXSI – Open-Source, High Performance, Low Rules Maintena... by TimPrice on Thursday September 15, 2016 @02:03PM (#12508342)

Since this doesn't go well with HTTP/2 so far, we'll have to stick with ModSec for the time being.

> https://github.com/nbs-system/naxsi/issues/227

[ Parent | on HN ]

Re:NAXSI – Open-Source, High Performance, Low Rules Maintena... by jvoisin on Friday September 16, 2016 @01:29PM (#12515692)

It seems that the issue is fixed: https://github.com/nbs-system/naxsi/issues/227#issuecomment-...

[ Parent | on HN ]

Re:NAXSI – Open-Source, High Performance, Low Rules Maintena... by nikolay on Wednesday September 21, 2016 @04:59PM (#12552178)

Thanks!

[ Parent | on HN ]

Re:NAXSI – Open-Source, High Performance, Low Rules Maintena... by djsumdog on Thursday September 15, 2016 @01:54PM (#12508280)

It's how they make money, but it is sad from an OSS developer perspective. At least they didn't offer it and then remove it like TypeSafe did with their Slick/MSSQL driver.

I've written a thing about this kind of business model: http://penguindreams.org/blog/the-philosophy-of-open-source-...

[ Parent | on HN ]

Re:NAXSI – Open-Source, High Performance, Low Rules Maintena... by thresh on Thursday September 15, 2016 @02:20PM (#12508475)

Why is that sad? Modsecurity sources are freely available on github - and nginx.com emails are seen in the commits.

[ Parent | on HN ]