Patterns build · 2026-09-20
OWASP Core Rule Set coreruleset/coreruleset@v4.29.0 converted into native WAF rules for four web servers. Generated automatically; no manual edits.
Coverage: 749 patterns across 22 categories — SQLi, XSS, RCE, LFI, RFI, plus generic anomaly and protocol-violation rules.
Backends
| Backend | Format | Bots | Archive | Size |
|---|---|---|---|---|
| Nginx | map + if
| 1879 | nginx_waf.zip
| 48K |
| Apache | ModSecurity | 1879 | apache_waf.zip
| 84K |
| Traefik | Middleware TOML | 1879 | traefik_waf.zip
| 20K |
| HAProxy | ACL | 1879 | haproxy_waf.zip
| 60K |
Quick install
curl -LO https://github.com/fabriziosalmi/patterns/releases/latest/download/nginx_waf.zip
unzip nginx_waf.zip -d /etc/nginx/waf_patternsIntegration guides → Nginx · Apache · Traefik · HAProxy
Verify (SHA-256)
18e5a1eb9de11a526c6de332e5d087d718c2ca845f2c3ebdef1ad1a3ffd922a7 nginx_waf.zip
52656baf7a7e18b565637491b0701830bf9f257acc37ce17936cc3b636800053 apache_waf.zip
74812003d71501d2943be9df571ee6dd8c40c61f2a4419978926496bd456dbec traefik_waf.zip
d191cedd4597e3e0b491d91763d528744107834931f9288c202d2ddf65b1fe1f haproxy_waf.zip
echo "18e5a1eb9de11a526c6de332e5d087d718c2ca845f2c3ebdef1ad1a3ffd922a7 nginx_waf.zip" | sha256sum -c -