nginx waf02

1.waf支持的

支持IP白名单和黑名单
支持URL白名单和黑名单
支持User-agent
支持CC防护
支持Cookie过滤
支持URL过滤
支持URL参数过滤

 2.部署

wget https://codeload.github.com/unixhot/waf/tar.gz/v1.0.0
tar -zxvf v1.0.0
mv /usr/local/src/waf-1.0.0/waf/ /usr/local/nginx/conf/


# nginx配置文件加入如下
vim /usr/local/nginx/conf/nginx.conf
......
    lua_shared_dict limit 50m;
    lua_package_path "/usr/local/nginx/conf/waf/?.lua";
    init_by_lua_file "/usr/local/nginx/conf/waf/init.lua";
    access_by_lua_file "/usr/local/nginx/conf/waf/access.lua";
......
    server {
	.......


	location /hello {
                default_type 'text/plain';
                content_by_lua 'ngx.say("hello,lua")';
         }
       .......
	}