OWASP Coraza: Open Source WAF for Cloud Native Service Mesh
summary
Coraza claims drop‑in compatibility with ModSecurity rules and the OWASP CRS and shows concrete integrations: a Go library embedding the SecLang engine, a proxy‑wasm WebAssembly build that runs on Envoy/Ingress, and a coraza‑proxy‑wasm plugin used with Istio. Demos show per‑domain per-authority rollout (detection only → block) blocking XSS and SQLi; performance tests at 15,000 RPS add ~57 ms with full CRS and ~6 ms with partial rules (k6). Rule playground and Go examples validate rule syntax and that the WebAssembly plugin actually works.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 2:30WAF history and standards
- 9:38Introducing Coraza
- 23:03Securing cloud native
- 31:27Live demonstration
- 43:36Performance testing
- 45:03Q&A and closing
related talks
32mOWASP Coraza - Web Application Firewall
55mOWASP Coraza: The Way To WAF In 2023
23mCoraza Web Application Firewalls Revisited
38mWeb Application Firewalls Revisited
37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application Firewall
46mIt is rough without a WAF
11mLightning Talk: Use Wasm to Deploy WAF Deeper in the Service Mesh for Zero Trust and...- 37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application Firewall