How to set up a self-hosted WAF for Webapps in 2 minutes

说明与用途

使用脚本或 Docker 在两分钟内安装 Aegis，自托管 WAF，保护 Web 应用免受 SQL 注入和 XSS 攻击。

问题

Deploying a Web Application Firewall (WAF) quickly and without complex Nginx configurations

结果

Aegis blocks a simulated SQL Injection with HTTP 403 and provides a dashboard for route management and threat monitoring

工作流

• Clone the Aegis repository and run the installer script
• Verify the aegis systemd service is active
• Alternatively run the Docker container with ports 8080 and 8081 exposed
• Test WAF by sending a simulated SQL Injection payload to the proxy
• Open the web dashboard at http://localhost:8081 to manage routes and view telemetry

证据

Clone the repository and run the automated installer: git clone https://github.com/divinelabio/aegis.git cd aegis sudo bash install.sh

来源

docker run -d --name aegis_server \
--restart unless-stopped \
-p 8080:8080 -p 8081:8081 \
-v aegis_data:/var/lib/aegis/data \
-e AEGIS_ADMIN_PASSWORD="ChooseStrongAdminPassword123!" \
ghcr.io/divinelabio/aegis:latest

来源

curl -i "http://localhost:8080/?id=1%27%20OR%201=1--"

来源

HTTP/1.1 403 Forbidden X-WAF-Rule-ID: 942100 Access denied: This request was rejected by the application security layer.

来源