4 ms·
Here's more about NAXSI: https://www.nbs-system.co.uk/blog-2/naxsi-web-application-firewall-for-nginx.html https://www.nbs-system.co.uk/blog-2/naxsi-web-applica
by nikolay 10y ago
Here's more about NAXSI: https://www.nbs-system.co.uk/blog-2/naxsi-web-application-firewall-for-nginx.html https://www.nbs-system.co.uk/blog-2/naxsi-web-application-fi...
Although, it's sad that Nginx chose the unreleased v3 of ModSecurity [0] [1] for their commercial offering instead.
[0]: https://www.modsecurity.org/ https://www.modsecurity.org/
[1]: https://github.com/SpiderLabs/ModSecurity-nginx https://github.com/SpiderLabs/ModSecurity-nginx
- djsumdog 10y agoIt's how they make money, but it is sad from an OSS developer perspective. At least they didn't offer it and then remove it like TypeSafe did with their Slick/MSSQL driver. I've written a thing about this kind of business model: http://penguindreams.org/blog/the-philosophy-of-open-source-in-community-and-enterprise-software/ http://penguindreams.org/blog/the-philosophy-of-open-source-...
- thresh 10y agoWhy is that sad? Modsecurity sources are freely available on github - and nginx.com emails are seen in the commits.
- TimPrice 10y agoSince this doesn't go well with HTTP/2 so far, we'll have to stick with ModSec for the time being. > https://github.com/nbs-system/naxsi/issues/227 https://github.com/nbs-system/naxsi/issues/227