Coraza Web Application Firewalls Revisited
summary
Open source Coraza is a Go WAF that claims production readiness with OWASP endorsement and a recent v3.2.1 release and ~2K on GitHub. It runs as native Go or compiled to WebAssembly so it can run in Envoy Kong Traefik or as a sidecar in service mesh, supports OWASP CRS, plugins and an experimental API, and exports audit logs including planned OSF C format. Performance notes include compiling re2 and a Rust dictionary into WASM to beat Go stdlib regex.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 0:56What is aWAF
- 2:39Why use aWAF
- 4:38Why 2024
- 8:38Coraza
- 9:50Core Principles
- 14:19API Features
- 17:00Runtime
- 19:40Whats next
related talks
32mOWASP Coraza - Web Application Firewall
55mOWASP Coraza: The Way To WAF In 2023
38mWeb Application Firewalls Revisited
53mOWASP Coraza: Open Source WAF for Cloud Native Service Mesh
37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application Firewall- 37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application Firewall
46mIt is rough without a WAF
11mLightning Talk: Use Wasm to Deploy WAF Deeper in the Service Mesh for Zero Trust and...