3 ms·
NGINX Plus, the newest R10 release just integrated their own WAF using ModSecurity (https://www.nginx.com/products/web-application-firewall/ https://www.nginx.c
by nodesocket 10y ago
NGINX Plus, the newest R10 release just integrated their own WAF using ModSecurity (https://www.nginx.com/products/web-application-firewall/ https://www.nginx.com/products/web-application-firewall/).
Seems like an obvious choice to stay within the native NGINX community and just use NGINX Plus. What would be some advantages to using NAXSI?
NGINX Plus is actually not that expensive, especially since you can purchase an AMI and pay per month using AWS.
- jvoisin 10y agoModsecurity is notoriously slow, and its rules are complex to read and to write, while the naxsi ones are simple: https://github.com/nbs-system/naxsi/blob/master/naxsi_config/naxsi_core.rules https://github.com/nbs-system/naxsi/blob/master/naxsi_config...