ADD-SP/ngx_waf v10.1.0

v10.1.0 Current

on GitHub

[10.1.0] - 2021-12-14 UTC+0800

Added

• You can set the directive waf to bypass, in which case no requests will be intercepted, but ngx_waf will still do the detection and logging.

• The directive waf_verify_bot has a new parameter SogouSpider, which is used to verify if it is a Sogou crawler.

Fixed

• Garbage collection is not running, which does not lead to memory leaks, but does lead to performance problems.

• Sometimes the [FAKE-BOT] log is printed incorrectly.

[10.1.0] - 2021-12-14 UTC+0800

新增

• 指令 waf 可以设置为 bypass 模式，即仅检测并记录日志，但不会拦截任何请求。

• 指令 waf_verify_bot 新增了参数 SogouSpider，用于验证是否为搜狗爬虫。

修复

• 内存回收机制并未正常运行，这虽然不会造成内存泄漏，但会导致内存占用居高不下，并引发性能问题。

• 友好爬虫验证功能会错误地打印拦截日志。