NAXSI – Open-Source, High Performance, Low Rules Maintenance WAF for Nginx

Re:NAXSI – Open-Source, High Performance, Low Rules Maintena... by nodesocket on Thursday September 15, 2016 @03:52PM (#12509269)

NGINX Plus, the newest R10 release just integrated their own WAF using ModSecurity (https://www.nginx.com/products/web-application-firewall/).

Seems like an obvious choice to stay within the native NGINX community and just use NGINX Plus. What would be some advantages to using NAXSI?

NGINX Plus is actually not that expensive, especially since you can purchase an AMI and pay per month using AWS.

[ Parent | on HN ]

Re:NAXSI – Open-Source, High Performance, Low Rules Maintena... by jvoisin on Friday September 16, 2016 @01:28PM (#12515682)

Modsecurity is notoriously slow, and its rules are complex to read and to write, while the naxsi ones are simple: https://github.com/nbs-system/naxsi/blob/master/naxsi_config...

[ Parent | on HN ]