How to Configure SafeLine WAF as a Reverse Proxy

Description and use

SafeLine WAF can be quickly deployed as a reverse proxy that inspects incoming traffic and forwards only safe requests to the application, without changing its code.

Problem

Deploy a Web Application Firewall (WAF) in front of existing web applications without modifying application code or infrastructure.

Outcome

SafeLine is deployed in minutes, acting as a reverse proxy that inspects traffic and forwards only clean requests to the application, without requiring changes to the application code or upstream server configuration.

Workflow

• Install SafeLine on a host that can reach the upstream server using the one-line installer
• Open the SafeLine management console at https://<safeline-ip>:9443 and add a protected site specifying the upstream server URL, domain, and listening port
• Configure DNS or firewall rules to point the application domain to the SafeLine host IP or port
• Verify operation via the dashboard, reviewing allowed, blocked, and challenged requests, and add whitelist rules if needed
• Optionally, adjust TLS termination settings to terminate HTTPS at SafeLine or forward HTTPS to the upstream

Evidence

SafeLine is a self-hosted WAF that works as a reverse proxy by design: it terminates your public traffic, inspects every request, and forwards only clean traffic to your real web server.

Source

The dashboard shows real-time request logs: allowed, blocked, and challenged.

Source