OWASP Coraza: The Way To WAF In 2023
summary
Concrete claims and working demos: a community OWASP WAF library is stable, 40× faster than ModSecurity in Go benchmarks, and 100% compatible with the Core Rule Set; it runs in-browser as a demo and supports WebAssembly and eBPF connectors (eBPF can read but not terminate connections). Architecture is plugin-first, supports gRPC, tracing, SPOA and async workflows, targets APIs and GraphQL, lists 6 active developers and hundreds of stars — watch if those specifics matter.
AI-written summary · about
chapters (22)
- 0:00Start
- 2:17WAF in the early 2000s
- 5:12ModSecurity
- 7:10Implementation techniques
- 7:37Core Rule Set
- 8:43Rich Content Applications (Ajax)
- 10:39eBPF
- 12:07Tracing
- 14:21SPOA
- 15:25Web Assembly (WASM)
- 16:45Websockets
- 19:02GraphQL
- 20:07Edge Termination
- 25:45Horizontal Scaling
- 26:190 False Positives
- 27:49Compete against CDN WAF
- 32:16High Level Design
- 33:46Sample Usage
- 36:20Benchmarks
- 38:36Deployment Options
- 42:36Roadmap
- 44:09Conclusions
related talks
23mCoraza Web Application Firewalls Revisited
32mOWASP Coraza - Web Application Firewall
38mWeb Application Firewalls Revisited
53mOWASP Coraza: Open Source WAF for Cloud Native Service Mesh
46mIt is rough without a WAF
37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application Firewall- 37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application Firewall
11mLightning Talk: Use Wasm to Deploy WAF Deeper in the Service Mesh for Zero Trust and...